Privacy Policy

We collect information in two ways:

Information you give us. When you fill out a contact or discovery form, we collect the details you submit - typically your name, email address, company name, and the message or answers you provide. We use this solely to respond to your inquiry.

Information collected automatically. When you visit our site we may collect standard web-log data such as your IP address, browser type, referring URL, and pages viewed. We also use third-party analytics tools (described below) to understand how visitors use the site in aggregate.

We use analytics and similar technologies to understand site performance, improve buyer journeys, and measure which pages and calls to action lead to qualified inquiries. Some analytics runs by default on a business-to-business legitimate interest basis. When you click "Accept" on our cookie banner, we may enable fuller attribution, ads-related consent signals, and personalization features.

Google Analytics 4 (GA4) - measures page views, conversion events, campaign attribution, device/browser context, and engagement patterns. We do not send raw form messages, company names, phone numbers, names, or email addresses in custom event payloads. If enhanced conversion data is used after consent, email data is hashed before being sent to Google. You can opt out at any time via Google's opt-out browser add-on.

Microsoft Clarity - records anonymised session replays and heatmaps to help us identify usability issues and high-intent page paths. We pass Clarity consent signals using its Consent Mode API. Clarity does not capture passwords or payment details. See Microsoft's Privacy Statement for full details.

Vercel Analytics & Speed Insights - lightweight performance metrics collected by our hosting provider. No cookies are set; data is aggregated and anonymous.

Cloudflare Web Analytics- privacy-first page and performance analytics collected through Cloudflare's browser beacon when configured. This helps us understand page views, referrers, and Web Vitals without using visitor cookies.

If you click "Decline", analytics measurement may still run, but ads storage, user-data signals, and personalization storage stay denied. Your preference is saved in your browser for future visits.

We use the information we collect to:

• Respond to enquiries and discovery requests.
• Understand how visitors use our site so we can improve it.
• Monitor site performance and diagnose technical issues.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

Contact form submissions are retained for as long as necessary to handle your enquiry and any follow-up relationship, typically no longer than 3 years. Analytics data is retained according to the default settings of each analytics provider (typically 14 months for GA4).

Every page request to thelobbi.io is logged at our edge by Cloudflare and at our hosting layer by Vercel. Each log entry includes your IP address, the URL you visited, your user agent, and timing data. These logs are forwarded to Axiom, our log retention service, where they are retained for 30 days. We use them to investigate security incidents, debug performance issues, and improve the site.

When we investigate a specific security incident, we may enrich an IP address through third-party services that return city-level geographic information, the network operator, and whether the IP is associated with known abusive activity. The third-party services we may use for enrichment are MaxMind (geographic), AbuseIPDB (abuse reputation), GreyNoise (scanner classification), and IPQualityScore (proxy and VPN classification). None of them receive your other browsing activity - only the IP address being investigated. We do not receive street addresses, individual identities, or contact details from any of these services.

You can request a copy of any data we hold about your IP, or its deletion, by emailing [email protected]. We respond within 30 days.

Depending on your location you may have the right to access, correct, or delete personal data we hold about you, or to object to or restrict certain processing. To exercise any of these rights, email us at [email protected] and we will respond within 30 days.

California residents: you have the right to know what personal information is collected, to opt out of its sale (we do not sell personal information), and to non-discrimination for exercising your rights under the CCPA.

Our site may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies.

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the site after changes are posted constitutes acceptance of the updated policy.

Questions about this policy? Reach us at [email protected].