1. Responsible entity and privacy contact
MYRIAD GLOBAL LLC is the identified entity managing inquiries received through this website. It is organized in Missouri, registration LC014773712, with a declared principal office at 117 S Lexington St Ste 100, Harrisonville, MO 64701-2443, United States.
For privacy requests, email contact@myriadglobalagency.com with a subject such as “Privacy.” No data protection officer or EU representative is represented as appointed without confirmation.
2. Information received
The form requests full name, work email, company, country, service of interest, and project description. Website and estimated budget are optional. Inquiry language and the time of recording are also retained.
Direct email or telephone exchanges may contain information you choose to provide. Technical services may receive connection information such as IP address, browser details, and security events; their exact logging practices remain to be inventoried.
Do not include passwords, identity documents, complete banking details, or sensitive information in the project description. Provide only what is relevant to your inquiry.
3. Purposes and legal bases
Contact details and project information are used to understand your needs, respond, and prepare a potential engagement. For individuals covered by GDPR, steps toward a contract at their request may fall under Article 6(1)(b); for someone contacting us on a business’s behalf, a legitimate interest may be appropriate after assessing the relevant interests and rights.
Abuse prevention and security may also rely on legitimate interests, subject to validation. Legally required retention depends on applicable legislation. The form checkbox acknowledges the stated use; it is not consent for every possible purpose or a substitute for assessing the lawful basis.
The form does not automatically subscribe you to a newsletter. Any future direct marketing must have an appropriate legal basis, comply with local rules, and provide required choices. Where processing relies on consent, it may be withdrawn without affecting the lawfulness of prior processing.
4. Recipients and service providers
Inquiries are stored in a protected Lovable Cloud environment with no read access for website visitors. Agency-authorized personnel should access information only as needed for their work.
Lovable hosts the website and Lovable Cloud stores inquiries. Hostinger is identified as the domain provider, not the form host. Google Fonts currently delivers the Manrope font remotely and may receive technical information needed for that request. Email providers and any professional advisers must be identified according to actual use.
The form records an inquiry; it currently has no configured automatic email notification or CRM integration. Any disclosure required by law or an authority must be assessed against the relevant obligation. Public access to inquiries is not authorized.
5. International processing
The agency is a US company serving multiple markets. Its location alone does not establish the data storage region or every destination of information. These matters and downstream providers must be confirmed with service providers.
Where GDPR applies and information is transferred outside the European Economic Area, the situation requires a mechanism under Chapter V, such as an applicable adequacy decision or appropriate safeguards, including standard contractual clauses and necessary assessments. No particular mechanism, certification, or exclusively European hosting is asserted as already established.
6. Retention
An inquiry should be kept only as long as necessary for follow-up and a potential business relationship, then deleted or archived where a documented legal requirement or need justifies doing so. Numerical retention periods, archiving rules, and backup cycles remain to be set by the agency.
The absence of a validated period is an issue to resolve before final publication, not permission for indefinite retention. Contact the agency to ask about your inquiry or request deletion, subject to applicable legal obligations.
7. Your rights
Where GDPR applies and subject to its conditions, you may request access, correction, erasure, restriction, portability, and object to certain processing. You may withdraw consent where it is used. These rights are not absolute and depend on the circumstances.
Send requests to the privacy contact. Proportionate identity verification may be needed; do not send an identity document unsolicited. Requests must be handled within applicable statutory deadlines; no additional commercial service deadline is promised here.
Where GDPR applies, you may complain to a competent supervisory authority, including where you habitually reside, work, or where the alleged infringement occurred. In the US, rights and remedies depend on federal and state laws that actually apply; a website visit alone does not establish applicability of a particular regime.
8. Security and incidents
The form uses server-side validation and antispam checks; inquiries are not publicly viewable. These measures cannot guarantee zero risk. Access management, backups, and incident handling must be documented with providers.
Following an incident, the agency must assess applicable notification duties, including relevant US rules and GDPR Articles 33 and 34 where their conditions are met.
9. Cookies, children, and automated decisions
The cookie policy distinguishes technical mechanisms from advertising and analytics tools. No profiling or automated decision feature producing legal effects on visitors has been identified in the current form.
The website addresses business users and does not offer a service intended for children. Contact the agency if a child’s information has been sent in error. Expansion into services directed at minors requires a specific review.
10. Changes and sources
Any new booking, CRM, advertising, or analytics integration requires review of this policy and, where needed, updated disclosures and choices. The policy must reflect use on the final domain, not only the development configuration.