Privacy Policy

Introduction

Icarus, Inc. ("Icarus," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at icarus.io (the "Site") or engage with our services.

Please read this Privacy Policy carefully. By accessing or using our Site, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Site.

Data Controller Information

Information We Collect

Information You Provide Directly

We collect information that you voluntarily provide when you interact with our Site:

• Contact Form Submissions: When you submit our contact form, we collect your name, email address, company name (optional), project type selection, and message content.
• Merchandise Purchases: When you purchase merchandise through our integrated Snipcart store, Snipcart (as a third-party payment processor) collects your name, email address, shipping address, and payment information. We receive order details but do not directly process or store your payment card information.
• Email Communications: If you contact us via email, we retain the content of your messages along with your email address and our responses.

Information Collected Automatically

When you visit our Site, certain information may be collected automatically:

• Log Data: Our hosting provider (Cloudflare) may collect standard web log information including your IP address, browser type, referring/exit pages, and date/time stamps.
• Device Information: We may receive information about the device and browser you use to access our Site.

Cookies and Tracking Technologies

Our Site uses minimal cookies and does not employ tracking cookies for advertising or analytics purposes. The cookies we use include:

• Essential Snipcart Cookies: If you use our merchandise store, Snipcart places cookies necessary for shopping cart functionality, session management, and order processing. These cookies are essential for the e-commerce features to work properly.
• Theme Preference: We may store your light/dark mode preference locally in your browser.

We do not use Google Analytics, Facebook Pixel, or similar tracking technologies. We do not engage in behavioral advertising or cross-site tracking.

Third-Party Services

Our Site integrates with the following third-party services:

• Cloudflare: Our Site is hosted on Cloudflare Pages. Cloudflare provides content delivery, security, and performance services. Cloudflare may process standard web traffic data. See Cloudflare's Privacy Policy.
• Snipcart: We use Snipcart for e-commerce functionality. When you make a purchase, Snipcart processes your transaction data. See Snipcart's Privacy Policy.
• Web3Forms: Our contact form submissions are processed through Web3Forms. See Web3Forms' Privacy Policy.
• Google Fonts: We use Google Fonts for typography. When you load our Site, your browser may connect to Google's servers. See Google's Privacy Policy.
• Font Awesome: We use Font Awesome for icons, which may involve loading resources from their CDN. See Font Awesome's Privacy Policy.

How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries and provide customer support
• To process and fulfill merchandise orders
• To communicate with you about our services, including project discussions
• To maintain and improve our Site's functionality and security
• To comply with legal obligations and protect our legal rights
• To detect and prevent fraud or other harmful activities

Legal Bases for Processing (EEA/UK Visitors)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data based on the following legal grounds:

• Consent: Where you have given us explicit consent to process your data (e.g., submitting the contact form).
• Contract Performance: Where processing is necessary to fulfill a contract with you (e.g., processing merchandise orders).
• Legitimate Interests: Where processing is necessary for our legitimate business interests, such as improving our services and ensuring Site security, provided these interests do not override your fundamental rights.
• Legal Obligation: Where we are required to process your data to comply with applicable laws.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected:

• Contact Form Data: Retained for as long as necessary to respond to your inquiry and maintain business records, typically up to 3 years.
• Order Information: Retained for 7 years to comply with tax and accounting requirements.
• Email Communications: Retained for the duration of our business relationship plus any legally required retention period.

Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

• Service Providers: With third-party service providers who assist us in operating our Site and business (as described in the Third-Party Services section), subject to confidentiality obligations.
• Legal Requirements: When required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, where your information may be transferred as a business asset.

International Data Transfers

Icarus, Inc. is based in the United States. If you are accessing our Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using our Site, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules. We take appropriate measures to ensure that your personal data remains protected in accordance with this Privacy Policy.

Your Rights and Choices

All Users

Regardless of your location, you may:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of receiving promotional communications

EEA/UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to data portability
• Right to restrict processing
• Right to object to processing based on legitimate interests
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt out of the sale or sharing of personal information (Note: We do not sell your personal information)
• Right to non-discrimination for exercising your privacy rights
• Right to correct inaccurate personal information
• Right to limit use and disclosure of sensitive personal information

To exercise any of these rights, please contact us at [email protected].

Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, use, alteration, or destruction. Our Site uses HTTPS encryption for all data transmission. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

Our Site is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete that information as quickly as possible. If you believe we have collected information from a child under 16, please contact us immediately at [email protected].

Do Not Track Signals

Some browsers have a "Do Not Track" feature that signals to websites that you do not want your online activity tracked. Since we do not engage in tracking for advertising purposes, our Site functions the same way regardless of your Do Not Track settings.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about our data practices, please contact us: