Privacy Policy

Who we are

thecrvl.com is operated by TheCRVL LLC (“TheCRVL,” “we,” “us”), a business accelerator based in Honolulu, Hawaiʻi. You can reach us at nox@thecrvl.com.

This policy explains what information we collect when you visit the Site or contact us through it, why we collect it, who we share it with, and what choices you have.

The short version

• We collect what you give us through the contact form, plus the basic technical data any web server receives.
• We do not use cookies, analytics, or advertising trackers on the Site. If that ever changes, this policy changes first.
• We do not sell your information.
• We use a small number of service providers to host the Site, deliver email, and block bots.
• You can ask what we have about you, ask us to correct it, or ask us to delete it.

The rest of this page is the detail.

What we collect

Information you give us

When you use the contact form, we receive whatever you enter. Typically that is:

• Your name
• Your email address
• Your phone number, if you choose to give it
• Your message, including anything you choose to describe about your business, goals, or project

We ask only for what we need to understand your inquiry and respond. Please do not send sensitive personal information (government ID numbers, financial account details, health information, and the like) through the form. We do not need it and would rather not have it.

Information collected automatically

Like any website, the Site’s hosting infrastructure receives basic technical information when your browser loads a page or submits a form. This includes your IP address, browser type and version, device type, the pages you request, the time of the request, and the page that referred you. This is standard web server request data. We use it to keep the Site running, diagnose problems, and protect the Site from abuse.

Bot protection

We protect the contact form from automated abuse using rate limiting and a hidden form field that people never see and automated scripts tend to fill in. Neither tracks you nor identifies you.

We may additionally enable Cloudflare Turnstile, which distinguishes people from automated scripts by evaluating signals from your browser and is designed to do so without tracking you across websites. Turnstile is not currently enabled on the Site. If we enable it, Cloudflare’s handling of that data will be governed by Cloudflare’s own privacy policy, and we will update the effective date of this policy.

What we do not collect

• We do not set cookies.
• We do not use Google Analytics or any other analytics service.
• We do not use advertising pixels, retargeting, or cross-site tracking.
• We do not use session recording or heat mapping tools.
• We do not collect precise location data.

Because we do not track you, “Do Not Track” and Global Privacy Control browser signals do not change anything about how the Site behaves. There is nothing to opt out of.

How we use your information

We use the information you provide to:

• Read and respond to your inquiry
• Send you an automated confirmation that we received your message, where automated confirmations are enabled
• Evaluate whether we are a fit for what you are trying to do
• Follow up with you about your inquiry
• Keep records of our communications with you

We use technical data to:

• Operate, secure, and maintain the Site
• Detect and prevent spam, abuse, and automated attacks
• Enforce rate limits on the contact form
• Investigate problems if something breaks

We may also use information where the law requires it, for example to respond to a valid legal request or to protect our rights.

We do not use your information for automated decision-making or profiling.

Marketing email

Contacting us through the form does not sign you up for a mailing list. If we ever offer a newsletter or send marketing email, it will be opt-in, every message will include an unsubscribe link, and we will honor unsubscribe requests promptly.

Who we share information with

We do not sell, rent, or trade your personal information. We share it only in these situations:

Service providers. We use a small number of companies to run the Site. They process information on our behalf and under our instructions:

• Vercel hosts the Site and processes the technical request data described above, including server logs. If email delivery is temporarily unconfigured, the contents of your form submission may also be written to those operational logs so that your inquiry is not lost. Those logs are short-lived and are not used for any other purpose.
• Resend delivers email: the notification sent to us when you submit the form, and the automated confirmation sent to you where those are enabled. Your form contents pass through Resend’s systems to reach us.
• Cloudflare provides Turnstile bot protection for the contact form when it is enabled. It is not enabled today.

Each of these providers has its own privacy policy governing how it handles data.

Legal requirements. We may disclose information if required by law, subpoena, or court order, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

Business changes. If TheCRVL is ever sold, merged, or reorganized, information may be transferred as part of that transaction. We would tell you before your information became subject to a different privacy policy.

At your direction. If you ask us to share something, we will.

How long we keep it

Contact form submissions. We keep your inquiry and our correspondence for as long as needed to respond and evaluate it, and for 12 months afterward for record-keeping. If your inquiry turns into an engagement, those records become part of our client file, which is kept for the duration of the relationship and as required by law afterward.

Technical logs. Hosting logs are retained according to Vercel’s retention practices. These are short-term operational logs, not long-term storage.

You can ask us to delete your information sooner. See “Your choices and rights” below.

Your choices and rights

You can ask us to:

• Tell you what personal information we have about you
• Correct information that is wrong
• Delete your information
• Stop contacting you

Email nox@thecrvl.com and we will respond within 30 days. We may need to verify that you are who you say you are before acting on a request, which usually means replying from the email address you originally used. We will not treat you differently for exercising these rights.

California residents. The California Consumer Privacy Act applies to businesses above certain size thresholds. TheCRVL is currently below those thresholds, but we honor the requests above for everyone regardless. We do not sell or share personal information as those terms are defined under California law, and we have not done so in the preceding 12 months.

Visitors from the European Economic Area, United Kingdom, or Switzerland. We are a Hawaiʻi business and do not specifically target those regions, but if you are located there and contact us, we process your information on the basis of our legitimate interest in responding to your inquiry, or to take steps toward a contract at your request. You have the rights described above, plus the right to object to or restrict processing and the right to complain to your local data protection authority. Your information will be processed in the United States.

Children

The Site is intended for businesses and adults. It is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has submitted information through the Site, contact us and we will delete it.

Case studies and testimonials

The Site features case studies about client work and may feature testimonials, including video. We publish these only with the permission of the people and businesses involved. If you are featured and want something changed or removed, email nox@thecrvl.com and we will act on the request. Details in case studies (names, results, timelines) describe specific past engagements and are not a promise about yours.

Security

We take reasonable measures to protect your information, including encrypting connections to the Site (HTTPS), limiting who can access inquiries, and using reputable providers. No system is perfectly secure, and we cannot guarantee that unauthorized access will never happen. If we learn of a breach affecting your personal information, we will notify you as required by Hawaiʻi law and any other law that applies.

Links to other sites

The Site may link to other websites, including client sites, social media, and the sites of our providers. We do not control those sites, and this policy does not cover them.

Changes to this policy

If we change this policy, we will update the effective date at the top. If the change is material (for example, if we begin using analytics or cookies), we will post a notice on the Site before the change takes effect. Continuing to use the Site after that means you accept the updated policy.

Contact

Questions about this policy or your information:

TheCRVL LLC

nox@thecrvl.com