This site is a portfolio, a contact form and a mailing list. It has no accounts, no store and no advertising tags. Nothing that identifies you is collected unless you send it to us, or agree to analytics first.
Parabox Digital is a web design and development studio based in Sacramento, California, United States. We are the party responsible for the personal information described here: the controller, in the language of the European and UK regulations, and a business under California law.
Questions, requests or complaints about this policy go to hello@paraboxdigital.com.
This policy covers paraboxdigital.com and the Parabox QR Studio at qr.paraboxdigital.com: the two sites themselves, and the inquiries that reach us through them.
It does not cover work we carry out inside a client's own systems. On a client project we normally act as a processor on that client's instructions, and their privacy notice governs the data involved. It also does not cover sites we link to, including LinkedIn and Instagram. Once you follow a link out, that company's policy applies. Nor does it cover the scan counts behind a client's own tracked QR codes: those are that client's records, kept on their instructions, and their notice governs them.
The contact form asks for three things: your name, your email address, and a description of what you're trying to build. Everything in that message is up to you, so please leave out anything sensitive you would rather not put in an email.
Form submissions are transmitted through Web3Forms, a form delivery service, which passes the message to our inbox. We use it so the site can send mail without running a server of its own.
If you email or call us directly instead, we hold whatever you send: your address or number, and the contents of the exchange.
The studio letter is a separate thing entirely, and is covered in the next section.
The signup in the footer asks for one thing: an email address. No name, no company, nothing else. It is used to send the monthly letter and for nothing else. We do not sell it, rent it, or pass it to anyone who wants to sell you something.
The list is run on Mailchimp, and your address is stored there. Nothing from Mailchimp loads while you are reading this site. The signup carries no script: pressing Subscribe hands the address to Mailchimp directly and opens their own confirmation page in a new tab, which is the first and only moment they are contacted. Mailchimp then emails you a confirmation link, and no letter is sent until you follow it. An address that is never confirmed stays on Mailchimp's side as an unconfirmed record and receives nothing; ask us and we will delete it.
Mailchimp records the ordinary things a mailing service records about the letters it sends (whether one was opened, and which links in it were followed), so we can tell whether anyone is reading. It is told nothing about what you do on this website, and the analytics described below are told nothing about the letter.
Every letter carries an unsubscribe link, and one press is enough. You can also write to us and we will take the address off. Subscribing and inquiring are separate: sending the contact form does not put you on the list, and leaving the list does not affect an enquiry.
Some information arrives simply because the page loaded. None of it is used to build a profile of you.
Nothing analytical loads until you accept it. Google Analytics and Microsoft Clarity are not in the page as it arrives; the scripts are injected only after you press Accept, and no request is made to googletagmanager.com or clarity.ms before that. Decline, and they are never fetched at all.
If you accept:
Clarity is also told a few plain facts about the page you were shown, so that a heatmap can be read one condition at a time rather than as an average of all of them: which page of this site it was, whether it was light or dark, whether a colour palette was on, which city the corner clock is showing, roughly how wide your window was, and whether you asked your system for reduced motion. It is told the same about what happened on the page: that the contact form was started, stopped by a validation error, or sent; which project row was opened on the work index; which discipline filter was pressed; and, if you arrived at an address that does not exist, which link you took out of the error page. Every one of these describes the page. None describes you, and none carries anything you typed.
Your answer covers the QR Studio too. The generator at qr.paraboxdigital.com runs the same two tools behind the same banner, and reads the same answer, so accepting or declining in one place settles it for both. You are asked once.
The cookies those two set:
We run no advertising, remarketing or conversion tags of any kind. You can change your answer at any time: , or clear the cookies from your browser settings.
Six values are kept in your browser's local storage. These are not cookies, and they are readable only by this site. Five of them never leave your device. The sixth is the last one below, and it is sent only in the one case described there.
Clearing your browser's site data removes all six, along with the consent cookie in section 06, and the banner will ask again on your next visit.
The site also runs optional interaction scripts: a custom cursor, display easter eggs, and a draggable element on the error page. These run entirely in your browser, store nothing, and send nothing to us.
Where the UK or EU GDPR applies, our legal bases are:
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. No data from this site is traded, rented or handed to advertisers.
It does pass through the suppliers who make the site work, each acting on our instructions:
We may also disclose information where the law requires it, or to establish or defend a legal claim.
These suppliers are based in the United States, so information about visitors in the UK, EEA or Switzerland is transferred there. Where those transfers require a safeguard, they rely on the European Commission's Standard Contractual Clauses or an equivalent approved mechanism.
The site is served over HTTPS, and form submissions are encrypted in transit. Access to the inbox and analytics accounts is limited to the people who need it and protected by two-factor authentication.
No method of transmission over the internet is completely secure, and we can't guarantee absolute security, but we can tell you plainly what we hold, which is the list above and nothing more.
Wherever you are, you can ask us to tell you what we hold, send you a copy, correct it, or delete it. Write to hello@paraboxdigital.com and we'll respond within 30 days.
California residents have the right to know the categories and specific pieces of personal information collected, the sources and the purpose; the right to delete; the right to correct; and the right to opt out of sale or sharing, though as above, we do neither. You may use an authorised agent, and we will never treat you differently for exercising any of these rights.
UK, EEA and Swiss residents additionally have the right to object to or restrict processing, the right to data portability, the right to withdraw consent at any time, and the right to complain to your supervisory authority: the ICO in the UK, or your national data protection authority in the EEA.
We do not currently respond to browser Do Not Track signals. Because analytics stay off until you accept them, declining the banner achieves the same result.
This site is aimed at businesses and is not directed at children. We don't knowingly collect information from anyone under 16. If you believe a child has sent us something, write to us and we'll delete it.
If what we collect changes, this page changes with it, and the date at the top moves. Material changes to how we handle information already collected will be flagged on the site rather than made quietly.
Parabox Digital
Sacramento, California, United States
Email hello@paraboxdigital.com
Phone +1 279 280 6322
This page describes how Parabox Digital handles information on this website. It is not legal advice, and it does not form part of any contract.