This document describes exactly what this site does with your data. It is written against the site's actual code, not a template: if a processing activity is not listed here, it does not happen.
1. Who is responsible
MILLIMETER Global LLC., a company incorporated in Texas, United States, headquartered in Houston (“MILLIMETER”, “we”). Contact for anything about your data, including exercising your rights: info@millimeterbycasanova.com.
2. What we collect
| Data | When | Required |
|---|---|---|
| Name and email | Contact and careers forms | Yes |
| Phone, studio or company, project location, role | Contact form | No |
| Message content | Contact form | Yes |
| City and country, area of interest, introduction | Careers form | No |
| Résumé (PDF file, with everything it contains) | Careers form | Yes |
| IP address | Every visit, in server logs; and to rate-limit forms | Automatic |
We use no third-party analytics, no advertising pixels, no profiling and no automated decision-making. There is no Google Analytics, no Meta Pixel, no heatmaps and no session recording.
3. Why we use it
- To answer your enquiry and continue the commercial conversation you started.
- To assess your application, if you send one, and to contact you about the selection process.
- Site security: the IP address is used to rate-limit form submissions and stop automated abuse.
4. Who processes it
Only the providers strictly required for the site to work:
| Provider | Function | Location |
|---|---|---|
| Railway | Website hosting and server logs | United States |
| Resend | Email delivery of the contact and careers forms, including the attached résumé | United States |
| GoDaddy | Domain registration and DNS | United States |
| WhatsApp (Meta) | Only if you press a WhatsApp button: the chat opens in their app | United States and others |
The WhatsApp and Instagram buttons are plain links: this site loads nothing from Meta while you browse. Fonts, images and videos are served from this domain.
5. Your rights
Depending on where you live, privacy laws such as the EU General Data Protection Regulation (including in Spain), the UAE Personal Data Protection Law, Colombia’s Law 1581 of 2012 and US state laws (for example California under the CCPA/CPRA and Texas under the TDPSA) give you the right to know and access the personal information we hold, to correct it, to delete it, to obtain a portable copy, and to opt out of its sale, sharing for cross-context behavioral advertising, or profiling.
- We do not sell personal information and do not share it for targeted advertising. There is therefore nothing to opt out of; we also honor Global Privacy Control (GPC) signals by default because no tracking exists.
- We do not collect sensitive personal information on purpose. Please do not include it in your message or résumé.
- To exercise any right, write to info@millimeterbycasanova.com from the address you used with us. We respond within 45 days, free of charge, and we will not discriminate against you for exercising your rights. You may use an authorized agent. If we deny a request you may appeal by replying to our answer.
6. How long we keep it
- Form enquiries: for the duration of the commercial conversation and up to 24 months after the last contact.
- Applications and résumés: up to 12 months from receipt, unless you ask us to delete them sooner.
- Server logs: retained by Railway under its own retention policy.
- Cookie-notice preference: in your browser until you clear site data.
7. Security
- All traffic is encrypted over HTTPS (HSTS).
- Every form field is validated and length-limited on the server, not just in the browser; submissions are rate-limited per IP.
- The site sends strict security headers, including a restrictive Content Security Policy.
- We store nothing in a database of our own: enquiries and applications travel by email to the company inbox.
- Résumés are never stored on the website: they are processed in memory, checked (PDF signature, size, no encryption, no embedded scripts or attachments), renamed and sent by email.
8. Children
This site is aimed at architecture, design and construction professionals. It is not directed to children under 13 and we do not knowingly collect their data.
9. Changes
If anything material changes — for example if analytics are ever added — this page and its date are updated before the change takes effect. See also the cookie policy.
Last updated: 2026-10-20