Legal

Privacy Policy

Last updated: March 2026  ·  Applies to: www.chromaport.co

1. Who We Are

ChromaPort is a free colour-tool web application operated by Rehoboth Contracting Services LLC trading as ChromaPort (hereafter "ChromaPort", "we", "us", or "our"), based in the United Kingdom.

For the purposes of UK data protection law, Rehoboth Contracting Services LLC t/a ChromaPort is the data controller for personal data collected through this website.

Contact us about privacy Email: hello@chromaport.co
We aim to respond within 30 days.

2. What Data We Collect and Why

2.1 Support & Contact Enquiries

When you use the support or contact form on our website, we collect:

Legal basis: Legitimate interests (to respond to your enquiry and improve the service). We will not use this data for marketing without your separate consent.

2.2 Payment Information (Optional Donations)

ChromaPort is free to use. If you choose to make an optional "pay what you like" contribution, payments are processed by Stripe, Inc. We do not collect, store, or have access to your payment card details — these are handled entirely by Stripe under their own privacy policy.

Legal basis: Contract performance (to process your voluntary payment).

2.3 Analytics & Usage Data

We use Vercel Web Analytics to understand how visitors interact with ChromaPort. Vercel Analytics is designed to be privacy-friendly: it does not use cookies, does not track users across websites, and does not create individual user profiles. Data collected includes approximate location (country level), browser type, device type, and pages visited.

Legal basis: Legitimate interests (to monitor site performance and improve the user experience).

2.4 Technical Data

When you visit ChromaPort, our hosting provider (Vercel) may automatically collect standard server log data including your IP address, browser type, pages visited, and timestamps. This is used for security and to keep the service running.

Legal basis: Legitimate interests (security and service maintenance).

3. Data We Do Not Collect

4. How Long We Keep Your Data

Data typeRetention period
Support / contact emailsUp to 2 years, or until your request is resolved
Stripe payment recordsRetained by Stripe per their policy (typically 7 years for legal compliance)
Analytics data (Vercel)Up to 12 months, aggregated — no individual profiles
Server logsUp to 90 days (Vercel platform default)

5. Who We Share Your Data With

We do not sell your personal data. We share limited data only with the following trusted service providers:

Third partyPurposeLocation
Vercel, Inc.Website hosting and privacy-first analyticsUnited States
Stripe, Inc.Optional payment processingUnited States

6. International Data Transfers

Our hosting (Vercel) and payment processing (Stripe) services are based in the United States. Transfers of personal data to these providers are made under appropriate safeguards, including the UK International Data Transfer Addendum (IDTA) or standard contractual clauses as applicable. Both Vercel and Stripe maintain UK/EU-compliant data processing agreements.

7. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

To exercise any of these rights, contact us at hello@chromaport.co. We will respond within one calendar month.

8. How to Complain

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

We would, however, appreciate the chance to address your concerns directly before you contact the ICO — please email us first.

9. Cookies

ChromaPort uses only functional, strictly necessary cookies. Vercel Analytics does not use cookies. See our Cookie Policy for full details.

10. Links to Other Websites

Our website may contain links to external sites. This privacy policy does not apply to those websites and we are not responsible for their content or privacy practices.

11. Children's Privacy

ChromaPort is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Significant changes will be communicated via a notice on the website.