Privacy Policy

01Who this policy covers

This Privacy Policy explains how Chunk Technologies LLC (“Chunk Technologies”, “we”, “us”) handles personal data when you visit chunktechnologies.com (the “Website”), contact us, or deal with us as a prospective or current business customer or supplier.

This policy covers only this Website. Other sites we operate or link to, such as Chunkmint.dev, have their own notices; opening a link takes you away from this Website.

02Controller identity and contact

• Legal name: Chunk Technologies LLC
• Jurisdiction: Limited liability company organized in Wyoming, United States
• Registered address: 30 N Gould St Ste Nm, Sheridan, Wyoming 82801, USA
• Website: chunktechnologies.com
• Wyoming registration (filing) number: 2026-002123515
• Contact email for legal, privacy and all other matters: daniel@chunktechnologies.com

Privacy contact (including data subject requests): daniel@chunktechnologies.com.

• Data Protection Officer: we have not appointed a DPO.
• EU representative (Article 27 GDPR): none appointed, because we treat our management in Poland as an EU establishment (see below).

Management from Poland, and whether we need an EU representative

Chunk Technologies is established in the United States. The GDPR applies to a non-EU business if it offers goods or services to people in the EU, or monitors their behaviour in the EU (Article 3(2)), or if it processes personal data in the context of an establishment in the EU (Article 3(1)). Where Article 3(2) applies, Article 27 requires a representative in the EU unless processing is occasional, unlikely to result in a risk to individuals’ rights and freedoms, and does not involve large-scale special-category data. Whether either test is met depends on facts such as where our management is actually located, whether we target EU customers, and how our products work. We will appoint and publish a representative where the law requires it.

Our business is managed from Poland. We therefore treat Poland as the place of our establishment in the EU for GDPR purposes (Article 3(1)), which means no Article 27 representative is needed, and the Polish supervisory authority (the President of the Personal Data Protection Office, UODO) is our competent authority. If that assessment changes, we will update this policy and appoint a representative if required.

03Personal data we collect

Data you give us

• Inquiry emails: your name, email address, and whatever else you choose to include, such as your company, project details, budget and timing, and any attachments. Please do not include passwords, credentials or sensitive information.
• Correspondence: anything you send us by email or other channels, and our notes about the conversation.
• Contract and billing data if you become a customer: business contact details, billing details, tax identifiers and records of the engagement.

Data collected automatically

• Technical and log data that is processed when your browser requests pages: IP address, date and time, requested URL, browser and device type and referring page. This is generated by the hosting infrastructure that serves the Website: Vercel Inc. (United States) hosts the Website, and its infrastructure keeps request logs for security and operations.
• Cookie-choice record: one item in your browser’s local storage records your consent choices (see the Cookie Policy). It stays in your browser and is not sent to us as part of normal browsing.

What we do not collect through the Website

The Website does not currently use analytics, advertising, session-recording, social media or other third-party tracking tools, does not set cookies, and does not load third-party fonts from external servers (fonts are served from our own domain). We do not intentionally collect special-category data (such as health data or political opinions) or children’s data. If this changes we will update this policy and obtain consent where required before any tracking starts.

04Where the data comes from

• You, when you email us or deal with us.
• Your browser and device, automatically, when you visit the Website.
• Your organization, where a colleague gives us your business contact details for a project or contract.

05Why we use personal data and our legal bases

Where the GDPR or UK GDPR applies, we need a legal basis under Article 6. Our purposes and bases are:

Where we rely on legitimate interests, we weigh them against your rights and interests; you can object as explained in section 9. We do not send marketing emails today. We plan to in future. When we do, we will send them only to people who have given us prior consent (opt-in), or where applicable law allows it for existing customers, as the ePrivacy rules and Article 398 of the Polish Electronic Communications Law require (and the CAN-SPAM Act for US recipients). Every message will include a simple way to unsubscribe, and you can object to marketing at any time. The legal basis will be your consent (Art. 6(1)(a)) or, where the law permits, our legitimate interest (Art. 6(1)(f)). We will describe the details at the point where you sign up.

You are not obliged to contact us, but we cannot respond to an inquiry without your name and email address.

06Who receives your data

We share personal data only as needed and with service providers bound by contract to protect it. We do not sell personal data. Recipients are:

This list reflects the Website as built today. It must be completed and confirmed before publication.

07International transfers

Chunk Technologies is based in the United States, so personal data you send us from the European Economic Area (EEA), the United Kingdom or Switzerland is received and processed in the United States, and possibly in other countries where our providers operate. The legal framework for transfers is:

• EU–US Data Privacy Framework. The European Commission adopted an adequacy decision for the EU–US Data Privacy Framework on 10 July 2023, covering organizations that self-certify. Chunk Technologies is not certified under the Data Privacy Framework. The decision remains under challenge before the Court of Justice (Case C-703/25 P) and its validity could change.
• Standard Contractual Clauses. Where we use providers outside the EEA that are not covered by an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses (Article 46(2)(c) GDPR), the UK Addendum where relevant, and supplementary measures after assessment.
• Derogations. Where you ask us to take steps before a contract, a transfer may be necessary for that purpose (Article 49(1)(b)); we use derogations only for occasional transfers.

You can ask for a copy of the safeguards we use by contacting us.

08How long we keep data

We keep personal data only for as long as needed for the purposes in section 5, and then delete or anonymize it. The periods are decisions for the business and have not yet been set:

09Your rights

Under the GDPR and UK GDPR, you have the following rights, subject to the conditions and exceptions in the law:

• Access to your data and a copy of it (Art. 15).
• Rectification of inaccurate or incomplete data (Art. 16).
• Erasure in certain cases (Art. 17).
• Restriction of processing in certain cases (Art. 18).
• Data portability of data you provided, where processing is based on contract or consent and is automated (Art. 20).
• Objection to processing based on legitimate interests, on grounds relating to your situation, and to direct marketing at any time (Art. 21).
• Withdraw consent at any time, without affecting earlier processing (Art. 7(3)).

Residents of US states with consumer privacy laws may have similar rights. Wyoming has no general consumer privacy statute. Other states’ laws (for example the California Consumer Privacy Act) apply to businesses above specified revenue or data-volume thresholds; as of the date of this policy we do not believe we meet them, but we will give equivalent rights on request to any individual where we reasonably can, and we do not sell or share personal information for cross-context behavioural advertising.

10How to exercise your rights

• Email daniel@chunktechnologies.com or write to Chunk Technologies LLC, 30 N Gould St Ste Nm, Sheridan, Wyoming 82801, USA, stating what you want and the email address you used with us.
• We may ask for information to confirm your identity, and will not use it for anything else. You do not need to pay a fee unless a request is manifestly unfounded or excessive.
• We will respond without undue delay and within one month of receipt. We may extend this by up to two further months for complex or numerous requests, and will tell you within the first month if we do (Art. 12(3)).
• If we refuse a request, we will explain why and how you can complain.

11Complaints to a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU/EEA country where you live, work or where the alleged infringement took place (Art. 77 GDPR). A list of authorities is available from the European Data Protection Board. In Poland, the authority is the President of the Personal Data Protection Office (UODO). As our business is managed from Poland, UODO is our competent authority. UK residents may contact the Information Commissioner’s Office. US residents may contact their state attorney general or the Federal Trade Commission. We would appreciate the chance to resolve your concern first.

12Security

We use technical and organizational measures appropriate to the risk, including restricting access to our mailboxes to people who need them, serving the Website over an encrypted HTTPS connection, and keeping its software dependencies up to date. No online service is completely secure.

Personal data breaches

If a breach of personal data occurs, we will investigate and contain it. Where the GDPR applies and the breach is likely to result in a risk to individuals, we will notify the competent supervisory authority without undue delay and where feasible within 72 hours of becoming aware (Art. 33), and notify affected individuals without undue delay where the risk is high (Art. 34). For residents of US states, we will make the notifications required by state breach-notification laws, including Wyoming Statutes sections 40-12-501 to 40-12-502 where they apply. Where we process data as a processor, we will notify the customer without undue delay.

13Profiling and automated decisions

We do not use profiling or automated decision-making that produces legal or similarly significant effects on you. The Website does not build advertising profiles. If this changes we will update this policy and, where required, obtain consent and give you the right to human review.

14Children’s privacy

The Website and our Services are intended for adults and are not directed at children. We do not knowingly collect personal data from anyone under 16 (or the lower age that applies in your country under Art. 8 GDPR), and in particular not from children under 13 as defined by the US Children’s Online Privacy Protection Act. If you believe a child has given us personal data, contact us and we will delete it.

15Website data and future products and customer data

This policy describes the Website as built today. Products such as HeyServe (hosting automation) and Chunkmint.dev are described on the Website but are separate offerings. We will publish product-specific privacy notices before any product collects personal data from users, and customers’ data will be processed as follows:

When we act as a processor and you are an end user of a customer, please contact that customer about your rights; we will assist the customer as the DPA requires.

16Changes and contact

We may update this policy as the Website, our services or the law change. The “Last updated” date shows the current version, and we will give prominent notice of material changes. Cookies and similar technologies are explained in the Cookie Policy.

Privacy questions: daniel@chunktechnologies.com, or by post to Chunk Technologies LLC, 30 N Gould St Ste Nm, Sheridan, Wyoming 82801, USA.