For review: Working draft. Have a qualified privacy lawyer review for Anguilla-specific data-protection requirements, GDPR applicability for EU visitors, and any local data-residency obligations before publishing.
1. Who we are
Evoluut, located at 2nd Floor, James Ronald Webster Building, The Valley, Anguilla AI-2460, is the data controller for personal information collected through this website and during our engagements. Contact: info@evoluut.ai.
2. Information we collect
We collect the minimum information needed to provide our services. Specifically:
- Contact information — name, business name, email address, phone number, when you contact us, fill in a form, or purchase a service.
- Project content — logos, photos, text, product details, social links, domain/hosting access, and other materials you provide for your Website Package or custom engagement.
- Payment information — handled entirely by our merchant service provider, 4CSweb, which is PCI DSS compliant. We do not see, store, or have access to your full credit/debit card details. We receive only the metadata needed to confirm payment (transaction reference, amount, status, last four digits of the card, if shared).
- Technical information — IP address, browser type, device type, and usage analytics collected automatically when you visit the site, via Google Analytics 4 and Google Tag Manager (see section 6).
3. How we use information
We use your information to:
- Deliver the services you purchased (Website Packages, custom engagements, ongoing maintenance).
- Communicate with you about your project, our services, and updates we think you'd want.
- Process payments through 4CSweb.
- Improve the website and our service quality.
- Comply with legal, tax, and accounting obligations.
- Prevent fraud, abuse, or breaches of our Terms.
4. Payment information and card data
All credit and debit card transactions are processed by 4CSweb, our PCI DSS compliant payment service provider. When you pay for a service through Evoluut:
- Cardholder data is collected directly by 4CSweb's secure hosted payment page or API.
- Evoluut never receives, stores, transmits, or processes raw card data on its own systems.
- 4CSweb's security measures are described in their own merchant and customer-facing privacy and security disclosures.
See our Security Policy for the technical detail.
5. Sharing of information
We do not sell your personal information. We share it only with:
- Service providers we use to operate our business — hosting (Hostinger), payment processing (4CSweb), email (info@evoluut.ai), and any third-party tools required to deliver your project. Each provider receives only the data they need and is contractually obligated to protect it.
- Analytics providers — Google, which provides Google Analytics 4 and Google Tag Manager and processes site-usage data on our behalf to help us measure and improve the site (see section 6).
- Legal or regulatory authorities when required by Anguillan law, court order, or to protect our rights, property, or safety.
6. Cookies and analytics
The Evoluut website uses a small number of cookies, in two categories:
- Functional — e.g. remembering whether you've chosen the dark or lite theme. These keep the site working as expected.
- Analytics — we use Google Analytics 4 (loaded via Google Tag Manager) to understand how visitors use the site: pages viewed, approximate location derived from IP address, device and browser type, and on-page interactions. This helps us improve the site. Google processes this data on our behalf and may set its own cookies. See Google's Privacy Policy and how Google uses data from sites that use its services.
Your choice: analytics loads only if you accept it in the cookie banner shown on your first visit. If you decline, no analytics cookies are set and no data is sent to Google. You can also disable cookies in your browser at any time (some features may not work without functional cookies), or opt out of Google Analytics specifically with the Google Analytics Opt-out Browser Add-on. We do not use cross-site advertising or retargeting cookies.
For review: Analytics is gated behind a cookie-consent banner — it does not load until the visitor accepts. Have a qualified lawyer confirm this meets GDPR/PECR for your audience (e.g. that declining is as easy as accepting, and that consent is recorded as required).
7. Data retention
We retain personal information for as long as needed to deliver your project and meet our legal obligations:
- Client records (contact details, project files, communications) are retained for the duration of our engagement and for 7 years thereafter for tax, accounting, and legal-defense purposes.
- Payment records (transaction metadata, not card data) are retained per 4CSweb's policies and applicable financial regulations.
- Marketing / contact-only data (enquiries that didn't become engagements) is retained for up to 24 months unless you ask us to delete it sooner.
For review: Adjust retention periods if your accountant or solicitor advises differently.
8. Your rights
You have the right to:
- Access — request a copy of the personal information we hold about you.
- Correct — ask us to fix inaccurate or incomplete information.
- Delete — ask us to delete information we no longer need to retain.
- Object — ask us to stop processing information for marketing or analytics purposes.
- Port — request your data in a portable format.
To exercise any of these rights, email info@evoluut.ai. We aim to respond within 30 days.
9. Security
We protect personal information through industry-standard safeguards: HTTPS/TLS encryption for all data in transit, hosting on an ISO 27001 certified platform (Hostinger), restricted access to client data on a need-to-know basis, and PCI DSS compliant payment handling via 4CSweb. See our Security Policy for details.
10. Children
Evoluut services are not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.
11. International transfers
Evoluut operates from Anguilla. Some of our service providers (Hostinger, 4CSweb) may process your data outside Anguilla. By using our services, you consent to this transfer where required by law.
12. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be highlighted where reasonable.
13. Contact
For privacy questions or to exercise your rights, contact info@evoluut.ai or +1 (264) 772-5886.