Portfolio / Privacy Policy

Privacy Policy

How Arctic Wallaby handles your data across portfolio and AI engineering projects.

Last updated October 2025
Contact lucashadin@gmail.com

Data Collection

What information we collect and how we use it.

Analytics & Usage Data

  • Google Analytics: Anonymous page views, user interactions, and engagement metrics (only with your consent)
  • Performance data: Page load times, error rates, and technical performance metrics
  • Usage patterns: Which projects visitors explore, time spent on pages, and navigation paths

Contact Information

  • Email addresses: When you contact us via email or contact forms
  • Communication content: Messages, inquiries, and project discussions
  • Professional information: LinkedIn profiles, CV downloads, and career-related communications

Project-Specific Data

  • Ask Your Docs: Uploaded documents, chat conversations, and search queries
  • Present For Me: Voice recordings, presentation topics, and generated content
  • User preferences: Settings, consent choices, and feature usage

Data Usage

How we use your information to improve our services.

Service Improvement

  • Analyzing which projects and features are most valuable to visitors
  • Optimizing website performance and user experience
  • Understanding technical requirements and user needs

Communication

  • Responding to inquiries and project discussions
  • Providing technical support and guidance
  • Sharing relevant updates about AI engineering projects

AI Project Functionality

  • Processing documents for search and retrieval (Ask Your Docs)
  • Generating presentations and voice cloning (Present For Me)
  • Maintaining user sessions and project state

Data Protection

How we keep your information secure and private.

Technical Safeguards

  • Encryption: All data transmission uses HTTPS/TLS encryption
  • Access controls: Limited access to personal data on a need-to-know basis
  • Secure storage: Data stored in secure, encrypted databases and cloud services
  • Regular updates: Security patches and system updates applied promptly

Privacy by Design

  • Minimal collection: We only collect data necessary for service functionality
  • Consent-based tracking: Analytics only run with explicit user consent
  • Data minimization: Personal data is deleted when no longer needed
  • Transparent practices: Clear communication about data usage

Third-Party Services

  • Google Analytics: Privacy-friendly configuration with IP anonymization
  • OpenAI: API calls for AI functionality with data processing agreements
  • ElevenLabs: Voice processing with appropriate data handling
  • Cloud providers: Secure hosting with industry-standard security measures

GDPR Compliance

Your rights under the General Data Protection Regulation (GDPR).

Your GDPR Rights

  • Right of access: Request copies of your personal data
  • Right to rectification: Correct inaccurate or incomplete data
  • Right to erasure: Request deletion of your personal data
  • Right to restrict processing: Limit how we use your data
  • Right to data portability: Receive your data in a structured format
  • Right to object: Opt out of certain data processing activities
  • Rights related to automated decision-making: Human review of automated decisions

Legal Basis for Processing

  • Consent: Analytics tracking and optional features (withdrawable at any time)
  • Legitimate interests: Website security, service improvement, and business operations
  • Contractual necessity: Providing requested AI engineering services
  • Legal obligation: Compliance with applicable laws and regulations

Data Protection Officer

  • Contact: lucashadin@gmail.com (subject: "GDPR Request")
  • Response time: We respond to GDPR requests within 30 days
  • Verification: Identity verification may be required for security
  • Supervisory authority: Right to lodge complaints with your local DPA

Your Rights

Control over your personal data and privacy choices.

Access & Control

  • View your data: Request a copy of all personal data we hold about you
  • Update information: Correct or update your personal details
  • Delete data: Request deletion of your personal information
  • Data portability: Export your data in a machine-readable format

Consent Management

  • Analytics consent: Accept or reject tracking at any time via the consent banner
  • Cookie preferences: Manage cookie settings through your browser
  • Communication preferences: Opt out of marketing communications
  • Project data: Delete uploaded documents and generated content

Contact & Complaints

  • Direct contact: Email lucashadin@gmail.com for privacy inquiries
  • Response time: We respond to privacy requests within 30 days
  • Data protection authority: Right to lodge complaints with supervisory authorities
  • Legal basis: Processing based on consent, legitimate interests, and contractual necessity

Data Retention

How long we keep your information.

Analytics Data

  • Google Analytics: 26 months (configurable, can be shorter)
  • Performance metrics: 12 months for technical optimization
  • Usage patterns: Aggregated and anonymized after 6 months

Communication Data

  • Email correspondence: 3 years for business relationship management
  • Project discussions: 5 years for ongoing collaboration
  • Contact information: Until you request deletion or withdraw consent

Project Data

  • Uploaded documents: Until you delete them or request removal
  • Voice recordings: Deleted after presentation generation (unless retained for improvement)
  • Generated content: 30 days unless you choose to keep it longer
  • User accounts: Until account deletion or 2 years of inactivity

International Transfers

How we handle data transfers across borders.

Service Providers

  • Google Analytics: Data processed in the United States with appropriate safeguards
  • OpenAI: API calls may involve data processing in the United States
  • ElevenLabs: Voice processing may involve international data transfer
  • Cloud hosting: Data may be stored in EU, US, or other regions

Safeguards

  • Standard Contractual Clauses: EU-approved data transfer mechanisms
  • Adequacy decisions: Transfers to countries with adequate data protection
  • Technical measures: Encryption and access controls for international transfers
  • Regular reviews: Ongoing assessment of transfer mechanisms and risks

Updates & Contact

How we communicate changes and handle privacy inquiries.

Policy Updates

  • Notification: Significant changes will be communicated via email or website notice
  • Version control: This policy is versioned and dated for transparency
  • Continued use: Using our services after updates constitutes acceptance
  • Material changes: Major changes may require renewed consent

Contact Information

  • Privacy inquiries: lucashadin@gmail.com
  • Data requests: Include "Privacy Request" in the subject line
  • Response time: We aim to respond within 30 days
  • Verification: We may need to verify your identity for data requests

Legal Basis

  • Consent: For analytics and optional features
  • Legitimate interests: For service improvement and security
  • Contractual necessity: For providing requested services
  • Legal compliance: Where required by applicable laws

Questions about privacy?

We're committed to transparency and protecting your privacy. Get in touch with any questions.