Privacy

What happens to what you type here.

Short, because there is not much to say. We collect what you put in the form, we use it to build your prototype and to reply to you, and we do nothing else with it.

The short version

  • No cookies. None at all, which is why you have not been asked to accept any.
  • No analytics. We do not count visits, and there is no third-party script on any page of this site.
  • One form, one purpose. What you send is read by one person, used to build the thing you asked for, and not passed to anyone for marketing.

What we collect, and why

The form asks eleven questions about your business and one about how to reach you. Most of it is information about a business rather than about a person: what it does, what the site should achieve, how it should look. The parts that are about you are your name, your email address and optionally a phone number, and they sit at the end of the form for that reason.

We read it to decide whether we can help, and to build the prototype if we go ahead. We do not add you to a mailing list, we do not sell it, and we do not share it with anyone for marketing.

Where it goes

The form is handled by Formspree, a form service, which passes your answers to our email at drcolvin@p3mai.com. Formspree stores submissions on its own systems, which are in the United States.

Formspree states that it holds a SOC 2 Type 2 report from an independent auditor, and that it encrypts submissions at rest and in transit. That is their account of themselves, not ours — we have read what they publish and have not inspected their systems.

One thing we have asked for and not yet seen. Formspree states publicly that it relies on Standard Contractual Clauses as a data processor — the usual legal mechanism for a transfer out of the UK and EU. We have asked them for the signed agreement that actually puts those clauses in place, because a statement on a company’s website is not a contract. We would rather leave this paragraph in public than claim cover we have not seen.

If the form cannot reach us

If the form service is unavailable, the page falls back to building your answers into a file and offering it to you as a download, so an hour of typing is never lost to a failure you cannot see. That copy is yours and goes nowhere until you send it.

How long we keep it

If we build you a demonstration, your answers are kept alongside it as the record of what you asked for — that is what makes it explicable later.

If we do not go ahead, we delete what you sent. We keep one anonymous line so we can count what we were asked for and what we turned away: the date, a few words about the trade, and the reason. It holds no name, no email address and no telephone number, and nothing in it could identify you.

Two deadlines, and both of them delete rather than keep. If we agree to build something and have not started within a week, we delete what you sent and tell you. And once the demonstration is online, if we hear nothing for a week we take it down and delete your contact details with it — a demonstration is built to be thrown away. You are welcome to come back at any time and we will put it back up.

Asking us to delete it

Email drcolvin@p3mai.com and we will delete what we hold and confirm that we have. You do not need to give a reason.

Who we are

ProtoSandpit is a product of P3MAI, a consultancy based in Dubai, United Arab Emirates. The same address above reaches us for anything on this page.

Changes to this page

If what we do changes, this page changes first — not afterwards. It said, truthfully, that this form sent nothing anywhere right up until the day it started sending, and it was rewritten before that happened rather than after.

It carries no “last updated” date on purpose, because a date is easy to bump without changing anything and tells you nothing about whether the words below it are still true.