Privacy
Updated 19 October 2026
This notice covers this website, business enquiries and applications for sales collaboration. It explains what we actually collect and how you can control its use.
SITEPEAK LLC75 E 3rd St, Sheridan, WY 82801, USA
Contact the controller
For access, correction, deletion, consent withdrawal or other privacy questions, use our contact form and write “Privacy request”. You can also write to the business address above. Provide enough information to locate your submission; we may request proportionate verification, not unnecessary identity documents.
Contact →Contact choices and withdrawal
The forms now require one combined acknowledgement covering this privacy information, contact about the current submission and future SitePeak services/offers or collaboration updates. It is recorded as a required combined acceptance, not as an independent optional marketing opt-in.
What you provide
Enquiries contain your name, email, message and any optional phone number, business/website, preferred contact method, preferred contact time/time zone and future-contact choice. Applications contain contact details, optional social/messaging details, country of work, time zone, languages and levels, role, experience, equipment, availability, answers, optional professional profile/CV URL, referral source and future-opportunities choice. You may optionally upload a PDF CV with its filename and professional information. A Netlify function sends it directly to the private sales Telegram bot, without a public Netlify Forms download. The form stores its filename and application reference. If CV delivery fails after saving, the application remains and the document can be retried. File contents are not saved in browser drafts; select the file again after refreshing or changing language. We do not request identification, bank, tax or health documents. Do not include sensitive information or third-party customer data.
Purposes and legal bases
We use enquiries to respond, discuss a proposal and take steps requested before a contract; applications to consider a possible collaboration and arrange human discussion (Article 6(1)(b) GDPR where applicable). Necessary security, spam prevention and proportionate claim handling rely on legitimate interests (Article 6(1)(f)); required records on legal obligations (Article 6(1)(c)). Recording a required combined acknowledgement does not by itself establish valid marketing consent. Promotional contact still requires an applicable lawful basis and compliance with electronic communications rules.
Storage, recipients and Telegram
Netlify hosts the site, processes forms, stores submissions and applies spam/security checks. The submitted fields are also copied through a SitePeak bot into the owner’s private Telegram conversation. Telegram cloud/bot messages are not end-to-end encrypted. Access is limited to people authorised to handle the enquiry or application and necessary service providers/advisers. We do not publish submissions or use these answers for automated hiring decisions or AI candidate scoring. Selection is human; technical spam checks may reject a submission.
International processing
The controller is a US LLC and the current Netlify function runs in the United States. Netlify and Telegram may process data outside the EEA. Relevant provider terms and transfer information are linked below; request details of the applicable transfer mechanism or safeguards through the contact form. Do not assume that Telegram offers EEA-only storage or end-to-end encryption for bot notifications.
How long we retain information
There is no single arbitrary 12-month expiry for an active customer relationship. We keep necessary relationship records while services, requested discussions, support, contractual duties or justified legal record-keeping require them. We review the continuing need at least annually and remove or anonymise records when their purpose ends, subject to necessary legal holds. Closed applications are not retained indefinitely merely because they may be useful later. Optional future-contact records remain only while consent and a relevant purpose continue; inactivity and relevance are reviewed at least annually. Withdrawal stops consent-based contact; a minimal suppression record may remain to honour your choice. Deletion must cover both Netlify and the Telegram copies under our control. This notice does not create an unlimited right to retain data.
Future contact is your choice
The forms now require one combined acknowledgement covering this privacy information, contact about the current submission and future SitePeak services/offers or collaboration updates. It is recorded as a required combined acceptance, not as an independent optional marketing opt-in. You may withdraw without penalty through the contact form or in a reply to SitePeak. Withdrawal does not invalidate earlier lawful processing. A changed notice does not extend earlier time-limited consent or permit unrelated purposes. Your chosen contact channel’s own terms also apply.
A sale or restructuring of SitePeak
Necessary relationship records may be disclosed confidentially during genuine due diligence or transferred to a lawful business successor, with minimisation, access restrictions and an appropriate legal basis. This is not permission to sell lists freely, contact people for unrelated purposes or retain every record forever. Where required, the new controller must inform you and respect existing rights, objections and consent limits.
Your rights
Subject to applicable conditions, you may request access, correction, erasure, restriction and portability, and object to legitimate-interest processing. You may always object to direct marketing and withdraw consent. We normally respond within one month; lawful extensions require an explanation. You may complain to your competent data protection authority, including in your EEA country of residence, work or the alleged infringement.
Browser storage and technical data
The site uses session storage for unfinished form drafts, progress and interface preferences; drafts are cleared after successful submission or when the browser session is cleared. Hosting/security providers may handle IP addresses, request logs and device/browser information for delivery, abuse prevention and diagnostics. The form source field records your selected source or an allowed source/utm_source value, not an unrestricted copy of the URL. Choosing “Ads” or “Instagram” alone does not install advertising tracking.
Required fields and changes
Required fields are needed to process the request or assess availability; optional fields can be omitted. No offer of employment or service contract is created by submitting a form. We update this notice when processing changes and seek fresh consent where required. Service contracts and later onboarding may require a separate notice for additional records.