Privacy Policy.Zero-cookie architecture.

ABULARA operates on a strict zero-cookie philosophy. We do not set, read, or store tracking cookies, third-party advertising identifiers, or behavioral tracking pixels on your device.

Any client-side preference (such as your chosen visual theme, dark or light mode) is stored purely in local storage in your browser and is never transmitted to our servers or third parties.

When you choose to contact ABULARA via our project enquiry form (/contact), we collect only the necessary details you explicitly provide: your name, work email address, company name, requested services, estimated budget range, desired project start timeline, and descriptive message.

This information is collected exclusively to review your project brief, assess alignment, and provide a direct commercial response. We do not use your contact information for unsolicited marketing newsletters or sales calls.

Form submissions are transmitted over encrypted HTTPS directly to our secure Supabase Edge Function (submit-enquiry). Submissions are durably persisted in an access-controlled database governed by Row Level Security (RLS) policies.

Access to enquiry records is restricted to authorized company principals via secure server-side credentials. Operational alerts are dispatched using Resend with TLS encryption.

We practice defense-in-depth: database keys are never exposed in public client bundles, request payloads are capped at 16 KB, and rate-limiting utilizes one-way SHA-256 hashes rather than storing raw IP addresses.

We never sell, rent, monetize, or disclose your personal information or project details to third-party data brokers, advertisers, or unaffiliated commercial entities.

We routinely execute bilateral Non-Disclosure Agreements (NDAs) prior to receiving proprietary business information or confidential research datasets.

Our website does not load invasive behavioral trackers or session recorders. When anonymous performance metrics are gathered, our client-side systems strictly honor Do Not Track (DNT) and Global Privacy Control (GPC) browser signals.

Any event tracking is completely anonymized, stripping personal identifiers, messages, and email addresses before dispatch.

Regardless of your geographic location, you retain full rights over your personal data. You may request verification of what information we hold, request corrections, or request immediate and permanent deletion of your enquiry records.

To request deletion or verification of your data, simply email us at [email protected] with the subject line 'Data Deletion Request'. We process all verified requests within two business days.

This policy is effective as of October 2026. Any future revisions will be published directly to this page with an updated modification date.

For any inquiries regarding our privacy standards or data security practices, please contact us directly at [email protected].