Legal

Privacy Policy

How inquiries and site-security information are processed through Cloudflare, Resend, and Lark.

1. Who Operates This Site And What This Policy Covers

Hiraeth Ventures LLC, doing business as LochielOak (the “Company,” “we,” or “us”), operates this Site and is responsible for how it handles inquiries in its own business operations. This Policy covers lochieloak.com, the contact form, site-security processing, and ordinary business communications. It does not automatically govern a client’s separate website, storefront or customer records merely because we helped build that website.

If we process information on a client’s behalf during a paid project, the parties should use a signed service agreement and, where appropriate, a data-processing or confidentiality addendum to allocate responsibilities. For privacy questions, email [email protected].

2. Personal Information Provided To Us

When you submit an inquiry, technical support request, billing question, or email us, we receive the name, email address, selected topic, message, and other information you choose to send, together with our subsequent correspondence. In a client relationship, we may also receive the business contact, invoicing, and project information needed to perform an agreed service. The public inquiry form is not intended for sensitive records, account passwords, payment-card information, medical details, or confidential third-party datasets. Please do not include them.

3. Technical And Security Information

Cloudflare and other technical providers may handle IP addresses, request times, browser or device characteristics, approximate IP-based geographic area, requested URLs, security and abuse indicators, and diagnostic or access logs to deliver and protect the Site. Cloudflare Turnstile collects signals to determine whether a submission is automated and issues a token that our Cloudflare Worker validates before forwarding an inquiry.

Our current contact-flow design does not rely on a separate public customer-inquiry database; however, a submitted message and technical records can be stored in email systems, provider delivery records, backups and security logs. This is not a promise that providers keep no logs.

4. How Information Is Used

We use personal information to receive, screen, and respond to inquiries; discuss and, where separately agreed, deliver services; maintain business records; administer communications; protect against spam, fraud, and unauthorized activity; troubleshoot systems; enforce agreements; and meet legal obligations. We do not use a contact-form submission as consent to receive unrelated promotional campaigns. We do not sell contact-form information or disclose it for cross-context behavioral advertising as part of the current Site setup.

5. Providers And Recipients

Our current inquiry workflow uses Cloudflare (Pages, Workers, Turnstile, access controls and security), Resend (transactional sending from notify.lochieloak.com), and Lark Mail (business inboxes and correspondence). A form submission is checked by Cloudflare, delivered by Resend to the appropriate Lark mailbox: [email protected] for general and project inquiries, [email protected] for technical support, or [email protected] for billing questions. We may reply from these business mailboxes. Providers may also handle delivery metadata, diagnostic records, and service-security information under their respective agreements and policies.

We may share information with professional advisers, vendors necessary to perform requested work, public authorities when legally required, or a lawful acquirer of the business subject to applicable restrictions. We do not knowingly sell information submitted through the current contact form or use it for cross-context behavioral advertising. We do not provide one client access to another prospect’s inquiry.

6. Site Analytics, Cookies And Similar Technologies

The current website does not intentionally deploy Google Analytics, advertising pixels, or behavioral advertising cookies. Cloudflare and Turnstile may use strictly necessary security-related signals, cookies, or other browser mechanisms to defend this site and validate contact-form submissions. Google Fonts loads typefaces from Google-hosted servers and may receive technical request data such as IP address and browser headers. See the providers’ privacy information for details.

When you dismiss our privacy notice, your browser may save a first-party local-storage preference so it does not reappear on every page. This preference is not used for advertising or analytics. You can reopen the notice with the “Cookies & privacy” control in the footer or clear site data in your browser to reset it.

If LochielOak adds non-essential analytics, advertising, or similar tools later, the site will be reassessed and appropriate choices and consent controls implemented before those tools run where legally required.

7. How Long Information Is Retained

We retain submitted inquiries, replies and project correspondence only as reasonably needed to evaluate or respond to a request, document services, meet accounting or legal requirements, address disputes, or secure operations. The retention period varies by record type and any resulting client relationship; retention varies by the nature and purpose of each record. Service providers may retain delivery, backup and abuse-prevention records under their own documented schedules.

We periodically review records and take reasonable steps to delete information no longer needed, subject to applicable obligations. You may request deletion using the contact below; we will evaluate the request against applicable law, active agreements, and legitimate recordkeeping or security needs.

8. Protection And Limitations

We use administrative and technical measures appropriate to this Site, including restricted administrative access, encrypted communication channels, spam checks, server-side validation, and role-based access where available. No online service can guarantee absolute security. For your protection, do not send credentials or highly sensitive details through this inquiry form. If a security incident affects information subject to a legal notification requirement, we will take steps required by applicable law.

9. Your Privacy Choices And Requests

You may contact us to ask about the information we maintain about you, correct an error, or request deletion. We may verify that you are authorized to make the request and may need to retain certain records for legal, accounting, security or contractual purposes. We will honor any access, correction, deletion, appeal or opt-out rights that applicable law actually provides to you, following the procedures required by that law.

This Policy does not state that every comprehensive state privacy statute necessarily applies to this business. Rights and response deadlines depend on the applicable jurisdiction and legal thresholds.

10. Children

The Site is intended for prospective business clients and adults, not designed for children under 13. We do not knowingly request children's personal information through the inquiry form. If a parent or guardian believes a child submitted information, contact us so we can evaluate removal as appropriate.

11. International Processing

Our service providers may operate systems or personnel outside your state or country. Communications and technical information may therefore be processed in jurisdictions with different laws, subject to applicable contractual, organizational, and legal safeguards. Contact us if you need project-specific details before sharing regulated information.

12. Third-Party Links And Customer Websites

Our pages may link to third-party websites and client portfolios. Their privacy practices are separate from ours. A customer website that the Company developed under the LochielOak brand may be operated by the client under its own privacy policy. We are not automatically the operator or controller of information collected through another company's website.

13. Updates

We may update this Policy when our operations, technology providers, laws, or data uses change. The effective or update date will appear on this page. When law requires affirmative consent or a particular advance notice, posting a revised policy alone will not substitute for that legal requirement.

14. Contact

Contact Hiraeth Ventures LLC d/b/a LochielOak at [email protected] about privacy requests, accidental submissions, or concerns. We do not publish a residential street address or offer walk-in appointments. When an applicable law, contract, or type of commercial communication requires a postal or registered address, the Company must furnish the required address through the appropriate lawful channel.