We keep almost nothing.
This site has no analytics, no advertising trackers and no accounts. The only personal data we hold is what you choose to send us through the contact form.
Data controller
LAVA Controls is the data controller for personal data collected through this website. We are based in Dallas, Texas, with an office in London.
Questions, requests or complaints: sales@lavacontrols.com
The contact form
The contact form asks for your name and email address, and optionally your company, phone number, location, what you are building, an approximate screen count and how you heard about us. Only name and email are required.
Submissions are emailed to our sales inbox. There is no database, no CRM sync and no marketing list behind this website. Where we have switched on submission logging on our own server, a copy of the date, email address, company and project description is also appended to a restricted file held outside the public web root, and is deleted once the enquiry is closed.
Our server keeps short-lived technical records to stop spam and abuse: web server logs containing your IP address, and a temporary rate-limiting record. These are automatically discarded and are never used to profile you.
Legal basis and use
We use what you send solely to reply to your enquiry and, where it becomes a project, to carry out the work. Under GDPR our lawful basis is your consent when you submit the form, and legitimate interest in responding to a business enquiry and protecting the site from abuse.
We do not sell personal data, we do not share it for anyone else's marketing, and we do not use it for automated decision-making or profiling.
Text messages
If you give us your mobile number and agree to it, we may send you text messages about a project you are discussing with us — scheduling, site visits, install updates and replies to your questions. Consent is optional and is never a condition of doing business with us.
Mobile numbers and SMS consent are never shared with third parties or affiliates for their marketing or promotional purposes. No mobile information is sold, rented or passed on for lead generation of any kind.
Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help. Opting out of SMS does not affect anything else — we will simply email or call instead.
Who else touches it
We keep the list of third parties as short as we can. Two services run on this site:
Cloudflare Turnstile protects the contact form from bots. It runs a check in your browser and may set a short-lived cookie or equivalent storage. It is a privacy-focused alternative to a CAPTCHA and does not track you across websites.
Google Fonts serves the typefaces used here. Your browser requests those files from Google, which means Google receives your IP address as part of that request.
Email you send us is handled by our mail provider so it can reach our inbox. We use no analytics, advertising, remarketing or social-media tracking of any kind, so there is no cookie banner on this site.
Retention
Enquiries stay in our sales mailbox for as long as the conversation is useful, and are deleted on request. Where an enquiry becomes a project, we keep the correspondence for the life of that relationship and for as long as tax and contract records require.
Server logs and anti-spam records are short-lived and expire automatically.
GDPR and UK GDPR
If you are in the UK, EU or EEA you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, to receive a copy in a portable format, and to withdraw consent at any time.
Email sales@lavacontrols.com and we will respond within one month. Because we hold so little, an erasure request is usually a matter of deleting an email thread.
You also have the right to complain to your data protection authority — the Information Commissioner's Office in the UK, or your national supervisory authority in the EU.
International transfers
We are a US company, so an enquiry sent from the UK, EU or EEA is transferred to and stored in the United States. Where that transfer needs a safeguard under GDPR we rely on the European Commission's Standard Contractual Clauses with our providers.
Updates to this notice
If this notice changes we will update the date at the top of the page. Material changes to how we handle enquiries will be described here rather than made quietly.
