Feanor Services LLC respects your privacy. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the rights you have. It applies to our website at feanorservices.com and to the Feanor service ("the Service").
The data controller for personal information processed about visitors to our website and individuals who contact us is Feanor Services LLC, a limited liability company organised under the laws of the State of New Mexico, United States ("Feanor", "we", "us", "our"). When we process personal data on behalf of a Feanor customer (for example, data extracted from that customer's connected systems), the customer is the controller and Feanor acts as a processor under our Data Processing Addendum.
You can contact us about privacy at [email protected].
This policy covers:
It does not change how Feanor processes data on behalf of a customer under a signed customer agreement and Data Processing Addendum. In that case, the customer's privacy notice governs.
We do not seek to collect special-category data under GDPR (for example, health, racial or ethnic origin, political opinions, religion, biometric data) or sensitive personal information under US state laws (for example, government IDs, precise geolocation, contents of mail or messages where treated as sensitive). If such data appears in customer-connected sources, we provide controls so customers can redact or exclude it.
We use personal information to:
If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases:
You can ask us about the legitimate interest analysis we have performed for a particular processing operation by writing to [email protected].
We do not sell your personal information. We share it only as follows:
An up-to-date list of sub-processors is available on request from [email protected] and in Annex III of our Data Processing Addendum.
Feanor is based in the United States and may process personal data in the United States and other countries where our service providers operate. When we transfer personal data out of the EEA, the UK or Switzerland to a country that has not been recognised as providing an adequate level of protection, we use appropriate safeguards, including the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum, where applicable), supplemented by additional measures as necessary. You can request a copy of the safeguards we use by writing to [email protected].
We keep personal information only for as long as necessary for the purposes described in this policy, to comply with our legal obligations, to resolve disputes and to enforce our agreements. Specific retention periods depend on the type of data, the nature of the relationship, and applicable legal requirements. When personal data is no longer needed, we delete it or de-identify it.
We use administrative, technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure or destruction. These include encryption in transit, access controls, audit logging, security monitoring, regular reviews and employee training. No system is perfectly secure: if you have reason to believe that your interaction with us is no longer secure, please contact us immediately.
Subject to applicable law, you have the right to:
To exercise any of these rights, write to [email protected]. We respond within one month and, where required, will verify your identity before acting on a request.
Depending on the US state where you reside, you may have specific rights under laws including the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, and similar state laws. These rights may include:
To exercise these rights, write to [email protected]. You may use an authorised agent; we will require proof of authorisation. We do not discriminate against you for exercising your privacy rights.
Our website uses a small number of cookies and similar technologies to operate the site, remember your preferences, and measure how the site is used in aggregate. We do not use third-party advertising cookies. Where required by law, we ask for your consent before setting non-essential cookies. You can control cookies through your browser settings; disabling cookies may impair some features of our site.
We honour the Global Privacy Control (GPC) signal from your browser as a request to opt out of the sale or sharing of personal information for residents of states that recognise it.
Feanor is a business-to-business service. It is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.
We do not use personal information to make decisions that produce legal or similarly significant effects on individuals based solely on automated processing, except as expressly permitted by law and with appropriate safeguards. AI-generated outputs of the Service are reviewed and governed by our customers in accordance with their own policies and our Service controls.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. If the changes are material, we will provide notice that is reasonable under the circumstances, including by posting on our website or by email where appropriate.
For privacy questions, requests or complaints:
If we cannot resolve your concern, you may also contact your data protection or consumer-protection authority.