Legal
Privacy policy
A short, plain-language account of what this website collects and what we do with it.
What we collect
When you submit the contact form we collect the name, email address, company or portfolio link, category and message you provide. We do not run advertising trackers, and we do not sell or share personal data with third parties for advertising.
Why we collect it
To reply to your enquiry, prepare a proposal, or assess an application to our engineering network. That is the only purpose. We do not add you to a marketing list unless you explicitly ask us to.
How long we keep it
Business enquiries are retained for 24 months so we can pick up an earlier conversation, then deleted. Talent applications are retained for 12 months, or longer if you ask us to keep you on file. Client project data is governed by the individual engagement agreement and the associated BAA or DPA.
Client and patient data
We do not hold client production data on our own infrastructure. Engagement work happens in the client's cloud accounts and repositories. Where an engagement involves protected health information, a Business Associate Agreement is executed before any access is granted.
Your rights
You can request access to, correction of, or deletion of your personal data at any time by emailing business@mlstacklabs.com. We respond within 30 days. If you are a California resident you have additional rights under the CCPA/CPRA, and we will honor them on the same request.
Cookies
This site sets no analytics or advertising cookies. Any strictly necessary cookies are limited to keeping the site functioning and expire when you close the browser.
Questions about this policy? Email business@mlstacklabs.com.