Privacy Policy

This Privacy Policy describes how EdgeWorks LLC collects and handles personal data in connection with the corporate website at edgeworks.digital, and with correspondence and enquiries about the company. Services we deliver under contract, and any product we may sell in future, are covered by their own agreements and policies. See section 09.

01Who we are

EdgeWorks LLC ("EdgeWorks", "we", "us") is a limited liability company formed under the laws of the State of Wyoming, United States, on 19 August 2026, under filing number 2026-002060294. Our registered agent is Registered Agents Inc, 30 N Gould St Ste R, Sheridan, WY 82801, United States. For any matter described in this policy you can reach us at info@edgeworks.digital.

EdgeWorks is the data controller for personal data processed in connection with this website and with enquiries made to us.

02What this policy covers

This policy applies to personal data we process when you:

• Visit edgeworks.digital;
• Contact us by email (for example, at info@edgeworks.digital) for commercial, partnership, vendor, due-diligence, or other enquiries; or
• Correspond with us in any other way in connection with the company itself.

If we go on to work together, the personal data we process in delivering that work is covered by the agreement between us rather than by this policy.

03What we collect

When you visit the website

This website is a set of static pages. It does not require an account, it sets no cookies of its own, and it runs no advertising, profiling, or cross-site tracking. We do not currently operate any visitor analytics on it. If we add analytics in future, we will use a cookie-free, aggregate-only service and will update this policy before doing so.

Cloudflare, who operate the infrastructure that serves this website, may process limited technical information (such as IP address and user-agent) for the purpose of delivering the site, mitigating abuse, and maintaining network security. This processing is governed by the Cloudflare Privacy Policy.

When you contact us

If you email us, we receive and store:

• Your email address and any name you provide;
• The content of your message and any attachments;
• Metadata associated with the message (timestamps, routing headers).

We use Google Workspace (Google Ireland Limited) as our business email provider. Your message is stored in our mailbox and processed in line with Google's security and data-protection commitments.

04Why we process it, and our legal basis

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Legitimate interests (Art. 6(1)(f)), for responding to correspondence and operating the company. Our interest is in running and communicating about the business, and we have considered the limited, non-intrusive nature of this processing against your rights and interests.
• Performance of a contract or taking pre-contractual steps (Art. 6(1)(b)), where you contact us about a potential commercial arrangement, engagement, or vendor relationship.
• Legal obligation (Art. 6(1)(c)), where we must retain records, for example for tax or corporate compliance.

05Who we share it with

We do not sell personal data, we do not share it for cross-context behavioural advertising, and we do not use it for advertising of any kind. We share personal data only with:

• Google Ireland Limited, email hosting (Google Workspace);
• Cloudflare, Inc., website hosting and DNS;
• Stripe, Inc., payment processing, where and when we take payment from you;
• Professional advisors (accountants, lawyers) where necessary and under confidentiality;
• Regulatory or law-enforcement authorities where we are legally required to do so.

06International transfers

EdgeWorks is established in the United States, which is outside the European Economic Area and the United Kingdom. Our email provider (Google Ireland Limited) stores mailbox data on servers that may be located in the EU, the UK, or the US.

EdgeWorks is not currently certified under the EU-US Data Privacy Framework. Where personal data is transferred from the EEA or the UK to us, or onward to a jurisdiction that has not received an adequacy decision, the transfer is protected by the Standard Contractual Clauses approved by the European Commission, together with the UK International Data Transfer Addendum where applicable. These form part of our agreements with the service providers named in section 05.

07How long we keep it

We keep correspondence for as long as it is useful for the purpose of the conversation, and afterwards for a reasonable period to allow for follow-up, record-keeping, or legal obligations. In practice this is up to 6 years after the last contact, aligned with usual statutory limitation periods.

You can request earlier deletion at any time. See section 08.

08Your rights

If you are in the UK or the European Economic Area

You may:

• Ask what personal data we hold about you (right of access);
• Ask us to correct inaccurate or incomplete data (rectification);
• Ask us to delete data where we no longer have a valid reason to keep it (erasure);
• Ask us to restrict or object to certain processing;
• Receive a copy of data you provided to us in a portable format (portability);
• Withdraw any consent you gave, where processing is based on consent;
• Lodge a complaint with your data-protection authority. In the United Kingdom this is the Information Commissioner's Office. In the EEA it is the supervisory authority for your country of residence.

If you are in the United States

Residents of California and of other states with comprehensive privacy laws may have the right to know what personal information we have collected, to request its correction or deletion, to receive a copy of it, and to be free from discrimination for exercising those rights. You may also have the right to opt out of the sale or sharing of personal information and of targeted advertising. We do not sell or share personal information and we do not carry out targeted advertising, so there is nothing for you to opt out of, but the other rights are available to you on request.

How to exercise any of these rights

Email info@edgeworks.digital. We aim to respond within 30 days. We may need to verify your identity before acting on your request. You may use an authorised agent where the law allows it.

09Services and products

This policy covers the corporate website and enquiries about the company. It does not cover:

• Client work. Where we deliver digital marketing, consulting, or development work under contract, personal data processed in the course of that engagement is governed by the agreement between us, under which we normally act as a processor on the client's instructions.
• Products. EdgeWorks is developing one software product, EntityLinks. It has not launched and processes no personal data today. When it launches it will publish its own privacy policy at entitylinks.com, which will govern data processed within that product.

10Children

EdgeWorks does not knowingly collect personal data from children under 16. Our website, services, and products are aimed at agencies and businesses, not at consumers or minors.

11Security

We apply reasonable technical and organisational measures to protect personal data, including TLS for data in transit, access controls on our email and storage systems, and multi-factor authentication for administrative accounts. No system is entirely secure. If we ever become aware of a data breach that affects your personal data, we will notify you and the relevant supervisory authority where required by law.

12Changes to this policy

We may update this policy from time to time. The "Effective" date at the top of the page shows the current version. Material changes will be announced on the homepage or by direct notice where we have your contact details.

13Contact