Legal Documentation & Data Protection
Privacy Policy & Software Service Terms.
How Organic Web collects, safeguards, and processes client and visitor information, alongside software terms designed to maintain transparency and prevent disputes.
1. Scope & Applicable Regulations
This Privacy Policy and Service Framework governs all interactions with Organic Web (“Organic Web”, “we”, “us”, or “our”), encompassing the domain organicweb.tech, bespoke software deliverables, consulting engagements, and client correspondence.
We conform to international data protection benchmarks, including the General Data Protection Regulation (EU GDPR), the UK Data Protection Act, and the California Consumer Privacy Act (CCPA/CPRA). By engaging our services or browsing this site, you acknowledge the terms outlined herein.
2. Information We Collect
We collect information strictly necessary to provide engineering services, respond to prospective inquiries, and ensure technical performance:
- Direct Contact Data: Name, work email address, company affiliation, service requested, budget selection, and project descriptions submitted via our contact forms.
- Technical & Telemetry Data: IP address, browser type and version, operating system, HTTP referrers, and submission timestamps collected automatically via server logs for security defense and rate-limiting.
- Client Credentials & Infrastructure Access: During active contracts, clients may provide SSH keys, SFTP credentials, database access strings, or third-party API tokens. All such operational credentials are held strictly in encrypted credential vaults and discarded upon project closure.
3. Purpose & Legal Basis for Processing
| Category of Data | Purpose of Processing | Legal Basis (GDPR Art. 6) |
|---|---|---|
| Inquiry Information | Project estimation, scope validation, scheduling calls | Legitimate Interest & Contractual Preparation |
| Technical Server Logs | DDoS prevention, spam defense, server uptime | Legitimate Technical Security Interest |
| Client Project Assets | Software coding, QA testing, deployment, handover | Performance of a Contract |
4. Client Confidentiality & Non-Disclosure
We treat all technical specifications, database schemas, commercial strategies, business workflows, and intellectual property shared with Organic Web as strictly confidential (“Confidential Information”). We agree to:
- Refrain from disclosing Confidential Information to any third party without explicit written client consent.
- Execute customized Non-Disclosure Agreements (NDAs) prior to code access whenever requested by enterprise clients.
- Never utilize proprietary client datasets to train public machine learning or Large Language Model (LLM) weights.
5. Intellectual Property & Code Ownership
To avoid any ownership ambiguities or operational conflicts, Organic Web adheres to the following clear intellectual property standards:
- Client Custom Code: Upon final milestone payment receipt in full, all custom software components, theme code, bespoke plugins, and unique layouts engineered specifically for the client transfer entirely to the client with full, unrestricted commercial ownership.
- Pre-existing Studio Tooling: Organic Web retains ownership over proprietary baseline libraries, boilerplates, and developer utilities developed prior to or independently of the engagement. The client receives a perpetual, worldwide, non-exclusive, royalty-free license to utilize such components within the delivered system.
- Open-Source Components: Standard third-party packages (e.g., WordPress core, Gutenberg, React, PHP libraries) remain governed by their respective open-source licenses (GPLv2, MIT, Apache).
6. Third-Party Integrations & Sub-Processors
Our engineering workflows may interface with trusted third-party cloud infrastructure and API endpoints. We ensure all providers adhere to strict enterprise security standards:
- Cloud Hosting & Edge Delivery: Cloudflare, AWS, DigitalOcean, or client-specified infrastructure.
- AI & Automation APIs: OpenAI, Anthropic, Google Cloud API (strictly routed through secure enterprise zero-data-retention endpoints where applicable).
- Payment Gateways: Stripe, PayPal, and WooCommerce-compatible gateways. Organic Web never stores, processes, or captures raw credit card numbers on our servers.
7. Limitation of Liability & Disclaimers
Under all circumstances, Organic Web’s cumulative financial liability for any claim arising out of a specific contract or advisory engagement shall be strictly capped at the total amount actually paid by the client to Organic Web for the specific milestone or service phase under dispute during the three (3) months preceding the incident.
8. Acceptance Testing, Scope Creep & Warranty
To maintain amicable, conflict-free project delivery, software milestones follow a structured acceptance protocol:
- Acceptance Period: The client is granted seven (7) business days upon milestone staging deployment to test functionality against the agreed specification. If no written bug report is submitted within this window, the deliverable is deemed accepted.
- Warranty Period: We provide a complimentary 14-day warranty following final launch to resolve reproducible bugs directly traceable to our written code.
- Scope Creep Policy: New features or alterations outside the written specification are estimated separately at our transparent hourly rates and agreed in writing prior to execution.
9. Dispute Resolution & Governing Law
We prioritize direct collaboration and good-faith negotiation to resolve any operational discrepancies. Before initiating formal litigation or arbitration:
- Both parties agree to participate in an informal resolution dialogue between project leads within fifteen (15) days of written notice.
- Any disputes arising from freelance platform contracts (Upwork, Fiverr) shall be adjudicated in accordance with the established arbitration procedures of the respective platform.
- Direct corporate contracts are governed in accordance with international commercial legal standards with venue designated in the mutual service agreement.
10. Data Subject Rights & Contact Information
Under GDPR and international privacy legislation, you maintain comprehensive rights regarding your personal information, including:
- Right to access personal data held about you.
- Right to rectification of inaccurate records.
- Right to erasure (“Right to be Forgotten”) of contact inquiries.
- Right to withdraw consent at any time without penalty.
To exercise any rights, request data removal, or submit legal questions, contact our data protection team directly:
Entity: Organic Web Engineering
Direct Legal Email: privacy@organicweb.tech
General Inquiries: hello@organicweb.tech
Web Portal: organicweb.tech
