Privacy policy

Last updated 8 September 2026

This site collects very little. There is no analytics, no advertising, no tracking of any kind, and it loads nothing from a third-party server while you read it. The only personal data VividLabs receives is what you choose to send through the contact form or by email.

Who is responsible for your data

VividLabs is a software studio operated by Prajwal Thapa from Kathmandu, Nepal. For anything you send us, we are the data controller. Reach us at vividsodalabs@gmail.com.

What we collect

• Contact form submissions.The name, email address, and message you enter. Nothing on the form is collected that you did not type into it.
• Email you send us.If you write to us directly, we hold that correspondence and whatever it contains.
• Server logs.Our host records standard technical request data (IP address, browser user agent, page requested, timestamp) as part of serving and protecting the site. We do not use these logs to build a profile of you.

Cookies

This site sets no cookies and runs no tracking scripts. It stores one thing in your browser: your light or dark theme preference, kept inlocalStorageso the site does not flash the wrong theme on your next visit. That value never leaves your device and is not sent to us or anyone else. You can clear it any time through your browser settings.

Why we use it, and on what legal basis

We use what you send us for exactly one purpose: to read your enquiry and reply to it. Where the GDPR applies, our legal basis is Article 6(1)(b), taking steps at your request before entering into a contract. For general enquiries that do not lead to one, it is Article 6(1)(f), our legitimate interest in responding to people who contact us. We do not use your data for marketing, and we do not send newsletters.

Who else processes it

• Formspree receives and forwards contact form submissions on our behalf, acting as our data processor. Formspree stores submission data on AWS servers in the United States and relies on Standard Contractual Clauses for transfers out of the EU. See the Formspree privacy policy.
• Netlify hosts this site and processes the server logs described above. See the Netlify privacy policy.

That is the complete list. We do not sell personal data, we do not share it with advertisers or data brokers, and we do not disclose it to anyone else except where the law requires it.

International transfers

We are based in Nepal and our processors operate in the United States, so if you contact us from the European Economic Area or the United Kingdom, your data will be transferred outside it. Where those transfers are made through Formspree and Netlify, they are covered by Standard Contractual Clauses.

How long we keep it

Formspree holds submissions according to the retention period of our plan with them, after which they are removed from their system. The email copy we receive is kept for up to 24 months from our last contact with you, so we have a record of the conversation, and is then deleted. If a project goes ahead, the relevant correspondence is retained for as long as we need it for that engagement and any legal or accounting obligation attached to it. You can ask us to delete your data sooner at any point.

Your rights

Depending on where you live, you may have some or all of the following rights over your personal data:

• Access: ask for a copy of the personal data we hold about you.
• Rectification: ask us to correct anything inaccurate.
• Erasure: ask us to delete your data.
• Restriction: ask us to stop using your data while a concern is resolved.
• Portability: receive your data in a portable, machine-readable format.
• Objection: object to our processing your data on legitimate-interest grounds.

To exercise any of them, email vividsodalabs@gmail.com. We will respond within 30 days, and there is no charge. If you are in the EEA or UK and believe we have handled your data improperly, you also have the right to complain to your national data protection authority.

Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it.

Security

The site is served over HTTPS with a strict Content Security Policy and standard security headers. It is a static site with no database and no user accounts, so there is no store of personal data here to breach. What you send reaches us through Formspree and our email, protected by their security measures and ours.

Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top. Material changes will be described here rather than made quietly.

Contact

Questions about any of this go to vividsodalabs@gmail.com.