bobbalexandersolutions.com (the “Site”) is operated by Bobb Alexander Solutions. This policy explains what data the Site collects, how we use it, and your rights. It covers the Site only. (Our Yorùbá language app, Oluko, will have its own privacy policy at launch.)
1. Who We Are
The Site is operated by Bobb Alexander Solutions (“we,” “us,” or “our”), a software and applied-AI consultancy based in the United States.
Contact for privacy matters:
Email: [email protected]
Mailing Address: 971 US Highway 202N, Ste N, Branchburg, NJ 08876, USA
2. What Data We Collect
The Site is a marketing and digital-products website. It has no user accounts and sets no analytics or advertising cookies. We collect only the following:
Data you provide directly:
- Contact form (and case-study mini-forms): your name, email address, project type, and message. The case-study mini-forms collect email only. Submissions are processed by Formspree and delivered to us by email.
- Direct email: whatever you choose to include when you email us.
- Purchases: when you buy a product, your name, email, payment card data, and billing address are collected and processed by Stripe on Stripe-hosted checkout pages. We receive your name, email, and transaction records — never your full card number.
Data collected automatically:
- Server logs: IP address, browser/user-agent, timestamps, and pages requested — standard DigitalOcean hosting logs.
What we do not collect: no accounts, no analytics, no advertising or tracking cookies, no sensitive data, and no children’s data.
3. How We Use Your Data
We use the data we collect to:
- Respond to your inquiries, questions, and support requests
- Process and deliver product purchases, and provide receipts
- Operate, secure, and maintain the Site
- Detect, investigate, and prevent security incidents and fraudulent activity
- Comply with applicable legal obligations
We do not use your data for advertising, and we do not sell it.
4. Cookies and Tracking Technologies
The Site uses only cookies that are strictly necessary for it to function. We do not use analytics, advertising, or tracking cookies, and we set no non-essential cookies. Because of this, the Site does not display a cookie consent banner and there is nothing for you to opt into or out of.
Checkout is handled on Stripe-hosted pages; any cookies set during checkout are set by Stripe on its own domain. For more detail, see our Cookie & Tracking Notice.
Do Not Track (DNT): The Site sets no non-essential cookies, so there is no tracking to suppress in response to a DNT signal.
Global Privacy Control (GPC): Because we do not sell or share personal data or engage in targeted advertising, there is no sale/share processing for a GPC signal to opt out of.
5. Legal Bases for Processing (GDPR)
This section applies to users in the EU, EEA, and UK.
| Purpose | Legal Basis |
|---|---|
| Responding to your inquiries | Contract / steps prior to a contract (Art. 6(1)(b)), or legitimate interests (Art. 6(1)(f)) |
| Processing and delivering purchases | Contract (Art. 6(1)(b)) |
| Security, fraud prevention, Site operation | Legitimate interests (Art. 6(1)(f)) |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
6. Data Retention
We retain personal data only as long as necessary for the purposes described in this policy, unless a longer period is required by law:
| Data Category | Retention Period |
|---|---|
| Contact-form and email submissions | 2 years from last contact |
| Purchase and transaction records | 7 years (tax and accounting) |
| Server logs and backups | 35 days |
When data is no longer needed, we delete or anonymize it securely.
7. Data Sharing
We do not sell your personal data. We share data only in these limited circumstances:
- Service providers and sub-processors: the third parties that help us operate the Site (see our Sub-processor Disclosure) — currently DigitalOcean, Stripe, and Formspree. They are contractually required to protect your data and may only process it to perform services on our behalf.
- Legal requirements: when disclosure is required by law, regulation, court order, or government authority, and only to the extent required.
- Business transfers: in a merger, acquisition, or sale of assets, your data may transfer to the successor, subject to equivalent protections. We will provide notice before your data becomes subject to a different privacy policy.
- With your explicit consent.
We do not share personal data for third-party advertising.
8. International Data Transfers
Bobb Alexander Solutions is based in the United States. If you access the Site from the EU, EEA, or UK, your data may be transferred to and processed in the US. Where such transfers occur, we rely on Standard Contractual Clauses entered into with our service providers. You may request information about these safeguards by contacting [email protected].
9. Your Rights
EU / EEA / UK Users (GDPR)
You have the right to access, correct, delete, restrict, port, and object to processing of your personal data, and to withdraw consent where processing is consent-based. To exercise any of these, contact us at [email protected]. We will respond within one month, as required by the GDPR (extendable where the law permits, with notice). You may also lodge a complaint with your local supervisory authority; a list is available at edpb.europa.eu.
California Residents (CCPA / CPRA)
California residents have the right to know what personal data we collect, use, and disclose; to delete it; and to correct it. We do not sell or share personal data for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights. To submit a request, contact [email protected]. We will respond within 45 days, extendable by a further 45 days where reasonably necessary.
Other US State Privacy Rights
If you reside in a US state with a comprehensive privacy law — including New Jersey, Colorado, Connecticut, Virginia, Texas, Oregon, Delaware, or Maryland — you may have rights to access, correct, delete, and port your personal data, and to opt out of the sale of personal data, targeted advertising, and certain profiling. We do not sell personal data, engage in targeted advertising, or conduct such profiling. We do not process sensitive personal data without opt-in consent. Where required, we honor a valid Global Privacy Control signal as an opt-out of sale/share and targeted advertising. To exercise these rights, contact [email protected]; if we decline, you may appeal by replying with the subject line “Privacy Appeal.”
10. Security
We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS), restricted access to systems that hold personal data, and reliance on reputable infrastructure and payment providers that maintain their own security programs.
No system is entirely secure. If you believe your data has been accessed without authorization, contact us immediately at [email protected]. In the event of a breach that poses a risk to your rights, we will notify affected individuals and relevant authorities as required by applicable law.
11. Children
The Site is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If we learn that we have done so, we will delete it promptly. If you believe a child has provided personal data to the Site, contact [email protected].
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date above. For material changes, we will provide reasonable notice through the Site.
13. Contact Us
For questions about this policy, to exercise your rights, or to report a concern:
Bobb Alexander Solutions
Email: [email protected]
Address: 971 US Highway 202N, Ste N, Branchburg, NJ 08876, USA
We aim to acknowledge privacy inquiries within 3 business days. (This is our service commitment; statutory response deadlines under the GDPR and CCPA are stated in Section 9.)