Privacy Notice

1. Scope

This notice applies to The 3Lotus’s studio website at the3lotus.com and its contact form. It does not describe the practices of any future mobile application. Future products may have separate, product-specific privacy notices before they are made available.

The website is operated by The 3Lotus LLC, based in Raleigh, North Carolina, United States.

2. Information we process

Information you provide

When you use the contact form, we process your name, email address, enquiry reason, message, privacy acknowledgement, and any other information you voluntarily include in your message.

Technical information

Cloudflare processes your IP address and basic request or network metadata to deliver and secure the website. The contact endpoint also processes a request timestamp and uses an IP-derived key for abuse prevention.

The rate-limit system keeps only a short-lived counter associated with a one-way hashed, website-scoped client key. It does not store your name, email address, enquiry reason, message, or other form content. The counter expires automatically after approximately 10 minutes.

We do not intentionally use website analytics, advertising trackers, session replay, or marketing cookies on this website.

3. Why we process information

We process information to:

• review and respond to enquiries;
• operate, maintain, and secure the website;
• prevent spam, abuse, and malicious requests;
• handle privacy or legal requests; and
• maintain necessary business and legal records.

Depending on the circumstances, this processing supports the action you asked us to take, our legitimate operational and security interests, or legal obligations that apply to us. This description is general and is not jurisdiction-specific legal advice.

4. Service providers and international processing

We use the following providers for the current website:

• Cloudflare for website hosting, delivery, security, Pages Functions, request processing, and rate limiting.
• Resend for transactional delivery of contact-form enquiries to the studio’s private inbox.

These providers process information according to their roles and their applicable contractual and privacy terms. Resend receives the contact details and message needed to deliver the enquiry, along with a submission timestamp, site origin, and necessary delivery metadata. We do not enable open or click tracking for these contact emails.

We do not sell personal information or share it for behavioral advertising. Providers may process information in the United States or other locations where they operate, subject to safeguards required by applicable law.

5. Retention

We generally retain contact enquiries for up to 12 months from submission so we can respond and maintain appropriate business records. We may keep relevant information longer when reasonably necessary for an ongoing exchange, a legal obligation, fraud prevention, a dispute, or recordkeeping.

Rate-limit counters expire automatically after approximately 10 minutes. The website does not store contact submissions in a database.

6. Your choices and requests

Depending on where you live and the circumstances, you may ask to access, correct, or delete your personal information, or request restriction of or object to certain processing. Where applicable, you may also withdraw a request or consent without affecting earlier lawful processing.

Use the website contact form and select “Privacy or legal request.” We may need enough information to understand and verify your request. Applicable law may limit or provide exceptions to some requests.

7. Security and children

Security

We use reasonable administrative, technical, and organizational safeguards appropriate to this website. No method of transmission or storage can be guaranteed completely secure.

Children

This studio website is not directed to children under 13, and we do not knowingly solicit personal information from children through it. If you believe a child has submitted information through the contact form, please contact us using the method below.

8. Changes and contact

We may update this notice as the website or our practices change. When we publish an update, we will revise the effective date shown above.

For privacy or legal questions, use the website contact form and select “Privacy or legal request.” We do not publish the private recipient address.