Privacy Policy

Overview

Setairo (“we”, “us”) is a software development studio. This policy explains what personal data we collect through this website and in the course of our client engagements, why we collect it, how we handle it, and the choices and rights you have. It applies to this website and to the services we provide to our clients.

We collect the minimum data needed to respond to enquiries and operate the site. We do not sell personal data.

Information we collect

• Information you give us. When you contact us through a form or by email, we receive the details you provide — typically your name, email address, company, and the content of your message.
• Technical data. Our servers automatically log request metadata such as IP address, user agent, and timestamps, for security, diagnostics, and abuse prevention.
• Usage analytics. We count page views using self-hosted, cookieless analytics (Umami), running on our own server. It sets no cookies, assigns you no identifier, and does not follow you to other sites; we see aggregate counts, not people. It is on by default and you can switch it off at any time. Preferences you set (such as your light/dark theme) are stored on your device and are not used for tracking. See Analytics and cookies.
• Client project data. While delivering services, we may process data contained in the systems and repositories you grant us access to, strictly under our agreement with you and as a data processor acting on your instructions.

How we use information

• To respond to your enquiries and provide quotes or proposals.
• To deliver, maintain, and improve our services and this website.
• To secure our systems, prevent abuse, and comply with legal obligations.
• To send service-related communications, and — only where you have opted in — occasional updates you can unsubscribe from at any time.

Legal bases

Where the GDPR applies, we rely on: our legitimate interests in running, securing and improving our business — which is the basis for the cookieless page counts described below, and you may object to it at any time using the control in that section; your consent (e.g. subscribing to updates); the performance of a contract with you (delivering services you requested); and legal obligations we are subject to.

Analytics and cookies

This site sets no tracking cookies. Browsing it places no cookie on your device at all; the only cookie we issue is the session for staff who sign in to the admin area, which is strictly necessary for that area to work.

We measure how the site is used with self-hosted, cookieless analytics — no cookies, no device identifier, no cross-site tracking, and no data shared with an advertising network. Because it stores nothing on your device, it does not require your consent; we run it on legitimate interest and disclose it here instead. It is on by default, and you can object at any time — switching it off takes effect immediately, without a reload. For the full detail, see our Cookie Policy.

Manage privacy preferences

How we share information

We share personal data only in these limited cases:

• Service providers (e.g. hosting, email delivery, analytics) that process data on our behalf under contract, restricted to what they need.
• Legal and safety reasons, where disclosure is required by law or to protect rights, property, or safety.
• Business transfers, if we are involved in a merger, acquisition, or asset sale, with notice where required.

We do not sell your personal data or share it for cross-context behavioural advertising.

Data retention

We keep personal data only as long as needed for the purposes above — to answer your enquiry, to meet our contractual and legal obligations, and to resolve disputes. When it is no longer needed, we delete or anonymise it.

Security

We apply appropriate technical and organisational measures — encryption in transit, access controls, and least-privilege practices — to protect personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

International transfers

We may process data in countries other than your own. Where we transfer personal data across borders, we use appropriate safeguards (such as standard contractual clauses) to ensure it remains protected.

Your rights

Subject to applicable law, you may have the right to access, correct, delete, or receive a copy of your personal data; to object to or restrict certain processing; and to withdraw consent at any time (without affecting prior processing). You also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, contact us using the details below.

Children’s privacy

This site and our services are intended for businesses and are not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide a more prominent notice.

Contact us

If you have questions about this policy or a privacy request, contact us at sales@setairo.com, or write to us:

Previous versions

This is the first published version of this policy. Superseded versions will be listed here as it is updated.

Effective date: July 28, 2026