This notice explains how 7LORA INC. handles personal data when you visit this website, email us, or submit the contact form. It provides the information required when personal data is collected directly from you.
1. Data controller
The controller is 7LORA INC., a company established in Delaware, United States. Send privacy questions or requests to info@7lora.com.
2. Personal data we handle
Depending on how you use the website, we may handle:
- Contact and business data: your name, work email, selected area of interest and, only if you choose to provide it, company.
- Request content: information you choose to include in a project description or email.
- Technical and security data: IP address, request time, browser information, requested resources, and limited abuse-prevention signals created by the normal operation of the server.
- Bot-detection signals: when the contact page is opened, Cloudflare Turnstile processes limited network and browser signals such as IP address, TLS fingerprint, user-agent, site key, and origin, and returns a one-time verification token. Turnstile does not receive the contents of the contact form.
- Communication data: later correspondence and information needed to answer or manage your request.
Do not send sensitive personal data, confidential credentials, or information you are not allowed to share.
3. Purposes and legal grounds
- Answering requests: where your enquiry concerns a possible engagement, the legal ground is taking steps at your request before entering a contract (Article 6(1)(b) GDPR). For other business enquiries, it is our legitimate interest in answering communications addressed to us (Article 6(1)(f)).
- Operating and protecting the website: to provide pages, prevent spam and abuse, diagnose faults, and secure our systems, based on our legitimate interest in keeping a safe and reliable business website (Article 6(1)(f)).
- Legal duties and claims: to keep or disclose information when required by law (Article 6(1)(c)) or when necessary to establish, exercise, or defend legal claims (Article 6(1)(f)).
We do not use your enquiry to add you to marketing lists. The website does not make automated decisions or create profiles.
4. Recipients and international transfers
Personal data is available only to authorised 7LORA personnel and to contracted providers supporting hosting, email, security, and technical operations when access is needed. The website uses Aruba infrastructure. Providers processing data on our behalf are bound by data-protection terms and instructions where required. Professional advisers or public authorities receive data only when necessary for legal duties or claims. You may ask us for the identity of the recipients relevant to your data.
The contact form uses Cloudflare Turnstile. Cloudflare processes security signals as a processor when protecting this website and as an independent controller when improving its bot-detection service. See the Cloudflare Turnstile Privacy Addendum.
7LORA INC. is established in the United States, so a request may be processed there or in another country outside the European Economic Area. Where Chapter V GDPR applies to a transfer, it may take place only under an applicable adequacy decision (including the EU–US Data Privacy Framework only for a certified recipient), appropriate safeguards such as the European Commission's Standard Contractual Clauses, or a specific Article 49 derogation where its strict conditions are met. Ask info@7lora.com for the mechanism applicable to your data and a copy of, or reference to, the relevant safeguards.
We do not sell personal data.
5. Retention
Enquiries that do not lead to an engagement are generally kept for up to 12 months after the last meaningful communication, unless a shorter period is appropriate or longer retention is needed for legal duties or the protection of rights. If an engagement begins, relevant correspondence may be kept with related business and contract records for the period required by law and legitimate operational needs.
The contact endpoint derives a pseudonymous rate-limit key from the IP address and current hourly window; the key is not used after that window and stale records are periodically deleted. Infrastructure logs follow the hosting provider's security and operational retention schedules. We can provide the current provider-specific details on request.
Turnstile verification tokens expire after five minutes and can be used only once. Cloudflare retains its underlying security signals according to the periods and criteria in its privacy documentation.
6. Your rights
Where the GDPR or similar law applies, you may have the right to request access, correction, deletion, restriction, and, where its conditions apply, portability. You may object at any time to processing based on legitimate interests; we will stop unless compelling legitimate grounds or legal claims justify continuing.
To exercise a right, email info@7lora.com. We may need to verify your identity and clarify the request. You may also complain to the data protection authority where you live or work, or where you believe an infringement occurred.
7. Security and required information
We use technical and organisational measures suited to the website and the data involved. No internet transmission or storage method can be guaranteed to be completely secure.
Name, email, area of interest, and message are required to understand, route, and answer your request. Company is optional. Without the required data, the form cannot be sent, but you can contact us directly by email.
8. Changes to this notice
We may update this notice to reflect changes to the website, our processing, or legal requirements. The date above identifies the current version.