Privacy Policy

Sonlens ("Company," "we," "our," or "us") respects the privacy of our website visitors, prospective clients, and business partners. This Privacy Policy outlines how we collect, process, store, and protect information when you visit our website (sonlens.com), submit project inquiry forms, request software consultations, or enter into technical service agreements with our digital agency.

By utilizing our website, interacting with our digital channels, or providing information to us, you acknowledge the data collection and usage practices described in this Privacy Policy.

As a specialized web design and engineering company, we collect personal and operational data necessary to scope, communicate, and deliver technical solutions:

• Developer Status: Sonlens acts exclusively as a software developer, technical contractor, or systems integrator. We do not own, manage, or control the customer data that the Client collects or processes through their completed web application.
• Client Compliance Duty: The Client is solely responsible for creating, posting, and enforcing their own Privacy Policy, Cookie Policy, terms of use, and GDPR/CCPA compliance notices for their live platform.
• No Liability for Client Data Breaches: Sonlens shall have no liability or legal responsibility whatsoever for privacy violations, data leaks, GDPR penalties, or unauthorized data exposure occurring on Client-owned servers, third-party databases, or Client live environments.

We use the information gathered from prospective and active clients strictly for legitimate agency and operational purposes:

• Proposal Scoping & Estimates: Evaluating technical requirements, formulating Statements of Work, and generating accurate pricing and timeline proposals.
• Service Execution: Provisioning code repositories, setting up development and staging environments, configuring CMS schemas, and testing software integrations.
• Project Communications & Billing: Delivering sprint status updates, milestone completion notices, invoices, and payment receipts.
• Agency Marketing & Case Studies: Featuring completed project summaries, anonymized performance metrics, and client logos in our portfolio (in accordance with our Terms of Service), and sending occasional agency engineering newsletters (from which recipients may unsubscribe at any time).
• Security & Abuse Mitigation: Protecting our website against automated spam, DDoS attempts, injection attacks, and malicious requests.

Sonlens does not disclose your personal information to third parties except for vetted infrastructure subprocessors and technical service vendors required to operate our business and deliver services:

Sonlens is not responsible for the independent operational practices, privacy standards, or service disruptions of third-party service providers.

Sonlens maintains robust procedural and technical defenses designed to safeguard data against unauthorized access, loss, or disclosure:

• Encrypted data transmission utilizing HTTPS / TLS 1.3 protocol standards.
• Two-Factor Authentication (2FA) enforced on all primary development and code management tools.
• Isolation of client staging environments and strict credential handling guidelines.
• Routine code auditing, dependency security patches, and sanitization protocols.

We retain client and inquiry data only for as long as necessary to fulfill the commercial purposes outlined in this Policy, comply with financial audit standards, resolve technical disputes, or preserve code version histories:

• Inquiry Records: General form submissions and estimates are retained for up to twenty-four (24) months to facilitate ongoing sales discussions.
• Financial & Contractual Records: Statements of Work, change orders, and payment records are preserved for a minimum of seven (7) years to satisfy statutory tax and commercial requirements.
• Code Repositories & Portfolio Assets: Project source code backups and design assets may be retained indefinitely in private archives for warranty support, version provenance, and portfolio representation rights.

Depending on your jurisdiction (such as under GDPR, CCPA, or applicable regional data laws), you may possess specific rights regarding your personal information:

• Right of Access: Request confirmation of whether we process your personal data and obtain a summary copy.
• Right to Rectification: Request correction of inaccurate, outdated, or incomplete contact details.
• Right to Erasure: Request deletion of your personal contact records, subject to our statutory retention requirements for financial and contract records.
• Marketing Opt-Out: Unsubscribe from non-essential agency marketing announcements at any time using the link in the message footer.

To submit a data access or correction request, please write to our privacy team at info.sonlens@gmail.com.

Sonlens reserves the right to modify or update this Privacy Policy at any time to reflect advancements in technology, adjustments in our service portfolio, or changes in legal regulations. When amendments are enacted, the "Last Revised" date below will be updated accordingly. Continued use of our website or services following an update constitutes acceptance of the amended Policy.

For inquiries or legal notices regarding this Privacy Policy, please reach out to our team at info.sonlens@gmail.com.