Privacy policy

Who we are

Lourdes Work Corporation is the data controller for the personal data described here. We are incorporated in the State of Florida, United States, with its registered office at 1200 Brickell Avenue, Suite 1950 #1025, Miami, FL 33131.

You can reach us about anything in this policy through the contact form on our home page.

What we collect

When you visit this site

Nothing. This site sets no cookies, runs no analytics, embeds no third party scripts and builds no visitor profile. Our hosting provider records standard server access logs, which may include your IP address, for security and reliability. We do not access those logs to identify individuals.

If we add analytics in future, this policy will be updated before it is switched on.

When you use our contact form

We receive the name, email address and message you enter. We keep the correspondence so we can answer you and keep a record of what was agreed.

The form is delivered by Web3Forms, which passes the message to our inbox. It sees the contents of your message in transit. The form sets no cookies and does not track you.

When you buy a digital product

Payments are processed by Stripe, Inc. You enter your card details directly with Stripe. We never receive, see or store your full card number. What we receive from Stripe is your name, email address, billing country, the last four digits of the card, and the details of what you bought.

Stripe processes this data as an independent controller under its own privacy policy, available at stripe.com/privacy.

When you join our mailing list

If you subscribe, we collect your email address and your name if you give it. We use it to send you writing about marketing, and news about new guides and tools. You are added only if you ask to be, and every email carries an unsubscribe link that works immediately.

Our mailing list runs on Kit, formerly ConvertKit, which stores subscriber data and records whether emails were opened or clicked so we can tell what is worth writing. We do not buy subscriber lists, and we do not add customers to the mailing list automatically because they bought something.

When we work together on a consulting engagement

To do the work we are usually given access to material belonging to your business, which can include marketing accounts, analytics, customer lists and internal documents. We treat all of it as confidential, use it only to do the work you engaged us for, and return or delete it on request when the engagement ends.

Why we are allowed to hold it

• To perform a contract with you. Delivering a product you bought, or the consulting you engaged us for.
• To meet legal obligations. Tax and accounting records, which we are required to keep.
• Our legitimate interests. Answering your messages, keeping records of what was agreed, and preventing fraud.

Your consent is the basis for the mailing list, and only for the mailing list. You give it by subscribing, and you can withdraw it at any time using the unsubscribe link in any email, or by writing to us. Withdrawing it does not affect anything you have bought or any work we are doing for you.

Who else sees your data

We keep the list of third parties deliberately short:

• Stripe, Inc. Payment processing and refunds.
• Kit (formerly ConvertKit). Delivering our mailing list, if you have subscribed.
• Google LLC. Business email and document storage for Lourdes Work Corporation.
• Web3Forms. Delivering messages sent through our contact form.
• GitHub, Inc. Hosting this website.
• Our accountant and, where legally required, tax authorities.

We do not sell personal data. We do not share it with advertising networks or data brokers. We do not use it to train machine learning models.

International transfers

We operate from the United States and use service providers based in the United States and elsewhere. Personal data you give us may be transferred to, processed and stored outside your country of residence, including in countries whose data protection laws differ from your own, and it may be subject to disclosure where required by applicable law, including lawful requests by public authorities.

Where transfers of data from the European Economic Area, the United Kingdom or Switzerland are involved, we rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism offered by the provider concerned.

How long we keep it

• Messages you send us: up to three years from your last message, unless you ask us to delete it sooner.
• Mailing list subscriptions: until you unsubscribe, and removed from Kit within 30 days after that.
• Purchase and refund records: seven years, because tax law requires it.
• Client material from a consulting engagement: returned or deleted at the end of the engagement on request, and otherwise no more than twelve months after it ends.

Your rights

Wherever you live, you can ask us to:

• tell you what personal data we hold about you,
• give you a copy of it,
• correct anything that is wrong,
• delete it, where we are not required by law to keep it,
• stop using it for a particular purpose.

Send a request through the contact form and we will respond within 30 days. We will not charge you, and we will not treat you differently for asking.

If you are in the European Economic Area or the United Kingdom you also have the right to complain to your national data protection authority. If you are a California resident, we confirm that we have not sold or shared personal information in the preceding twelve months, and we do not knowingly collect data from anyone under 16.

Security

We use encrypted connections for this website, encrypted storage for business records, and multi factor authentication on the accounts that hold personal data. No system is perfectly secure, and we will tell you promptly if a breach affects your data.

Internal tooling

Lourdes Work Corporation operates internal command line tooling that connects to our own Google Workspace and Google account data, including our email, calendar and files, so that staff can manage their own work from their own computers. This tooling is used only by us, on our own accounts, and any credentials it holds are stored encrypted on company controlled devices. It is not offered to the public, it does not access client Google accounts, and no customer data is sent to any third party through it.

Children

Our services are for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us data, contact us and we will delete it.

Changes to this policy

If we change this policy we will update the date at the top of this page. Where a change materially affects how we use data you have already given us, we will email you about it before it takes effect.

Contact

Lourdes Work Corporation
Contact us through the contact form on our home page.
1200 Brickell Avenue, Suite 1950 #1025
Miami, FL 33131, United States
Incorporated in the State of Florida. D-U-N-S 117812754.