Privacy Policy

CASRA Systems ("CASRA", "we") operates casrasystems.com. This policy describes what we collect through this site, why we collect it, and the rights you hold over it. The short version: we collect what you type into our intake forms, we use it to evaluate and respond to your request, and we do not sell it.

What we collect

The site sets no cookies and runs no advertising trackers. We receive personal data in two ways:

• Form submissions: the booking and contact forms collect the fields you see: name, email, company, market, engagement type, budget range, timeline, and your written objective or message.
• Hosting logs: our hosting provider records standard technical data such as IP address, user agent, and requested pages for security and reliability. We do not use this data to profile visitors.

How we use it

Submission data is used to evaluate fit, scope, and system direction for a potential engagement, and to reply to you. If an engagement proceeds, it becomes part of the project record under the signed agreement. We do not sell personal data, and we do not share it with advertising brokers.

Who processes it

Form submissions are stored by Netlify, our hosting and form-handling provider, and delivered to our team inbox. These providers process data on our behalf under their own security and privacy commitments. We share personal data with no one else unless required by law.

Job applications

If you apply for a role through the careers pages, we collect what that application asks for: your name, contact details, country and timezone, education and work history, links you choose to give us, your answers to the role questions, and the CV or resume you upload. We use it to assess your application and to contact you about it, and for nothing else. It is never used for marketing and it is never sent to the advertising platforms we use elsewhere on this site.

The careers pages say that we keep applications and come back to people later when suitable work exists, so we will be specific about what that means: we retain applications, including uploaded CVs, for up to 24 months from the date you apply, then delete them. You can ask us to delete yours sooner at any time and we will do it without asking why. Applications are stored with Netlify, our hosting and form provider, and read by our team.

Please do not include information we have not asked for, in particular anything about your health, ethnicity, religion, political views, or any other special category data. We do not want it and we do not need it to assess you. A draft of an in-progress application is also saved in your own browser so you can finish it later; that copy never leaves your device and clearing your browser data removes it.

Retention

We keep submissions for as long as needed to evaluate and service a request, and delete them on request at any time. Job applications are covered by the 24 month limit above. Do not submit passwords, secrets, customer exports, or regulated records through the public forms; sensitive material belongs in a secured onboarding channel after an agreement is in place.

Your rights under GDPR

If you are in the European Economic Area or the United Kingdom, we process your data on the basis of legitimate interest (responding to a request you initiated) or your consent. You have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to processing. You also have the right to lodge a complaint with your local supervisory authority.

Your rights under CCPA

If you are a California resident, you have the right to know what personal information we hold about you, to request its deletion, and to not be discriminated against for exercising those rights. We do not sell or share personal information as defined by the CCPA, so there is nothing to opt out of.

Exercising your rights

Email [email protected] from the address you submitted and tell us what you want done. We verify by reply and act on verified requests within 30 days.

Children

This site is a business service and is not directed to anyone under 16. We do not knowingly collect data from children.

Changes

If this policy changes, the new version is posted here with an updated effective date. Material changes to how submitted data is handled will be noted at the top of this page.