Website privacy
Website Privacy Policy
Last updated: September 28, 2026
This policy explains how Quinn Favo handles personal information submitted or processed through consultant.quinnfavo.com. It covers consulting leads, contact and app-support forms, the AI chat assistant, analytics, technical logs, and scheduling links. Individual Android and Wear OS apps have separate privacy notices.
Controller
Who is responsible for this website
For the website processing described here, Quinn Favo is the person responsible for deciding why and how the information is used.
Privacy requests can be sent to quinn@quinnfavo.com.
Scope
What this policy covers
This notice applies to the consulting website and its website-level features. It does not replace the privacy notice for an individual mobile or Wear OS application.
Information
What the website processes
The site is designed to collect only the information needed to respond to inquiries and support requests, operate interactive features, maintain security, and understand site performance.
Contact and consulting inquiries
The contact form sends the name, email address, selected project type, and message you provide through Formspree so the inquiry can be received and answered. Please do not submit passwords, API keys, regulated records, confidential client data, or production secrets through this form.
App-support submissions
App-support submissions can include the information you choose to provide, an optional reply email, report details, app/version/source/context metadata, and optional diagnostics that you paste yourself. Quazmoz Android and Wear OS apps do not automatically upload diagnostics into the website support form.
AI chat assistant
If you use the chat assistant, your message, recent conversation history supplied by the browser, and any supported interactive diagram state are sent to the configured Google Gemini API so the assistant can respond. The site application does not intentionally persist the conversation as a user account or chat archive.
For abuse prevention and rate limiting, the server also processes request metadata such as IP address and may store short-lived hashed request identifiers. Current rate-limit windows are short-lived rather than used to build a visitor profile.
Analytics, performance, and hosting logs
Vercel hosts the site and provides analytics, Speed Insights, serverless execution, and platform logs. Technical data can include IP address, user agent, request path, timestamps, performance measurements, error details, and similar request metadata used for reliability, security, debugging, and aggregate site measurement.
Google Analytics is optional. The Google tag is not loaded unless you choose “Allow analytics” in the site's Analytics choices. That preference is stored locally in your browser and can be changed later from the footer. If enabled, Google Analytics may process browser and device information, page views, approximate location derived from network information, and cookies or similar identifiers under Google's terms and your browser settings. This website-level measurement is separate from installed Quazmoz apps.
Scheduling and outbound links
Consulting booking links point to Calendly and include source/campaign parameters so a booking can be attributed to this website. If you continue to Calendly, the booking information you enter is processed by Calendly under its own privacy terms. GitHub, YouTube, LinkedIn, Google Play, and other external destinations likewise operate under their own policies when you choose to visit them.
Why information is used
- Responding to consulting inquiries, messages, and app-support requests.
- Taking steps you request before entering into a consulting contract.
- Providing the website chatbot and interactive features you choose to use.
- Scheduling and preparing for discovery calls.
- Maintaining site security, preventing abuse, and enforcing rate limits.
- Debugging failures and improving reliability, speed, and content.
- Maintaining records needed for legitimate business, legal, tax, or dispute purposes.
Lawful bases where UK data law applies
- Steps before a contract / contract: responding to a consulting request, scoping work, or administering an engagement.
- Legitimate interests: operating, securing, measuring, improving, and supporting the website and responding to ordinary business inquiries.
- Legal obligation: retaining or disclosing records where required by applicable law.
- Consent: where a feature or processing activity specifically asks for consent and consent is the appropriate basis.
The appropriate basis depends on the context and the information involved. Consent is not treated as the default basis for every website interaction.
Service providers
Who receives website information
The website uses a small set of providers to host the site, deliver forms, answer AI-chat requests, and schedule calls.
- Vercel: hosting, serverless functions, analytics, Speed Insights, security, and technical logs.
- Google Analytics: website visitor and page-view measurement via the Google tag; it is not an SDK inside MedTick.
- Formspree: delivery and handling of contact and app-support form submissions.
- Google Gemini API: processing chatbot messages and recent conversation context when chat is used.
- Calendly: scheduling information when you follow a booking link and submit booking details.
I do not sell personal information collected through this website. External sites you choose to visit are independent services and are not treated as processors of this website merely because they are linked.
Retention
How long information is kept
Retention depends on the purpose of the record rather than keeping website data indefinitely.
- Contact, lead, and support correspondence is generally kept while the inquiry is active and may be retained for up to 24 months after the last meaningful interaction for follow-up, support history, and business records, unless a longer period is reasonably required.
- Records that become part of a consulting engagement, invoice, contract, tax record, dispute record, or legal obligation may be retained for the applicable business or legal retention period.
- The website application does not intentionally keep a permanent user-facing archive of chatbot conversations. Short-lived rate-limit identifiers expire with the active rate-limit window; provider-side processing and logs remain subject to the relevant provider's settings and terms.
- Hosting, security, analytics, and error records are retained according to operational need and the configured retention capabilities of the applicable platform.
Information may be deleted sooner when it is no longer needed and no legal, security, accounting, support, or dispute reason requires retention.
International processing
Service providers may process data in other countries
Cloud and SaaS providers can process information in countries different from where you live.
Where UK data protection law applies to an international transfer, the transfer should rely on an applicable adequacy decision or appropriate contractual/organizational safeguard available through the relevant provider arrangement. You can contact me for current information about the providers used for a particular website interaction.
Your rights
Access, correction, deletion, restriction, objection, and portability
Privacy rights vary by location and by the lawful basis used, but you can always contact me with a privacy request.
- You can ask for access to personal information held about you.
- You can ask for inaccurate or incomplete information to be corrected.
- You can ask for deletion or restriction in circumstances where the applicable law provides that right.
- You can ask for portable copies of qualifying information where the portability right applies.
- You can withdraw consent for processing that relies on consent, without affecting processing that was lawful before withdrawal.
Right to object
Where processing relies on legitimate interests and applicable law gives you the right to object, you may object to that processing. Send the request to quinn@quinnfavo.com and explain the processing you are objecting to.
To make a request, email quinn@quinnfavo.com with the subject line “Website privacy request” and enough context to identify the interaction or information involved.
Complaints
Raise a privacy concern
If you believe information has been handled incorrectly, contact me first so the issue can be investigated.
If UK data protection law applies and you remain dissatisfied after raising the issue, you may also have the right to complain to the UK Information Commissioner's Office (ICO).
Policy changes
This policy may be updated when the website, providers, data flows, legal requirements, or retention practices change. The latest version will be posted on this page with an updated date.