Privacy Policy

Last updated 2 October 2026.

This notice covers the Reason & Render website, its enquiry forms and its client support sign-in and request service.

Who handles your information

Reason & Render is operated by an individual who contracts personally and operates from California, United States. Correspondence locality: Al Bahya, Abu Dhabi, United Arab Emirates. This is the correspondence locality, not the operating location.

Project enquiries and support requests are reviewed through our HubSpot account, with internal email notifications sent to the person handling the request. Privacy questions and formal legal requests are handled through contact@reasonandrender.com.

What you submit and why

When you submit an enquiry form, we receive your first and last name, email address, company name and message. Depending on the form, we also receive your selected services, phone number and job title when provided. We use these details to review and respond to your enquiry.

All submitted form fields are sent to HubSpot and stored with the form submission. HubSpot may create or update a contact using your email address. Each submission retains its own details, even when you have contacted us before. An internal submission reference, the source page name and the enquiry page address accompany the request. Query strings and fragments are excluded from the source page address.

Approved clients can submit a support request containing their first and last name, company, subject and message. The server uses the email address from the approved client record. The request is stored as a HubSpot ticket associated with that client contact, together with its source page and internal request reference.

Submitting an enquiry or support request does not subscribe you to marketing. These forms do not send an automatic confirmation email to your submitted address. Please avoid including passwords, payment details or unnecessary sensitive information in your message.

The application sends your form details when you submit. It does not send what you type as you fill in the form. Unsaved form values are held in the open page so you can correct errors or retry; your browser may separately offer autofill or restore a page.

Client sign-in

Client support uses Google or Microsoft sign-in. Authentication takes place with the selected provider; this website does not receive your Google or Microsoft password. The application requests basic OpenID Connect identity information using the openid, email and profile scopes. It does not request access to your mailbox, files or contacts.

We use the provider's stable account identifier and, for Microsoft, its organisation identifier to match an account that has been approved for client support. The approved record links that identity to a client email address and HubSpot contact. Successful sign-in with a provider does not by itself grant client access. The application rechecks approval when protected support features are used.

The website uses necessary authentication and security cookies for sign-in and an encrypted session cookie for an approved client session. Sessions use an eight-hour expiry and may be renewed during use. The application does not retain provider access tokens in the client session. Google and Microsoft separately handle their own account, authentication and security records under their respective privacy arrangements.

Services involved in handling information

Vercel hosts the website and processes form submissions before forwarding them to HubSpot. HubSpot stores enquiries and support tickets in our customer relationship management account and handles internal notifications. Our HubSpot account is configured for EU data hosting; this does not mean every provider operation, support activity or data transfer is confined to the EU.

Upstash stores limited security and delivery metadata used to prevent spam and duplicate submissions. This includes protected hashes of request identifiers and submitted details, rate counters, timestamps and delivery status. The active enquiry and support delivery records do not store your name, readable email address, phone number, company name, job title, selected services or message, and the application does not log the form body.

Umbraco Cloud manages website content and media, such as text, images and videos selected by the site's editors. Published content is retrieved for the website; media requests can be served by the CMS hosting service. The enquiry and support forms send their contents to HubSpot through the website, rather than storing them as CMS page content. CMS editors use a separate authenticated administration service.

Internal email copies are separate from HubSpot records. Our business email uses Google Workspace. Hosting, CMS, CRM, identity, security and email providers process technical information under their own applicable terms and retention arrangements.

Page requests, cookies and measurement

Loading a page sends technical request information, such as an IP address, requested address and browser headers, to the relevant hosting service. The application uses a protected hash of connection information for submission rate limits. Hosting and security logs are separate from the forms' limited delivery records.

Vercel Web Analytics counts aggregate visits and public page views. Vercel Speed Insights measures page loading and responsiveness. These services run automatically on the public website and use cookieless measurement.

Measurement is limited to public content pages on reasonandrender.com. Local, protected preview, CMS draft, login and support pages are excluded. Reports exclude form contents and request references. We send no custom analytics events, advertising pixels, session replay or HubSpot tracking scripts.

Measurement reports use public page addresses without query strings or fragments. We withhold collection when an address or referring address contains unsupported information. Vercel also processes technical request information, browser and device details, approximate location and an initial referrer when present. See Vercel's Web Analytics privacy information and Speed Insights privacy information.

This application does not set marketing cookies or save form answers in browser local storage. It uses browser session storage to restore navigation scroll positions. Your browser may cache page resources such as images and fonts. Client sign-in, CMS draft preview and access to a protected Vercel preview use separate necessary authentication or preview cookies.

Retention and security

We review inactive enquiry correspondence quarterly. At the next review after 12 months without meaningful contact, we delete inactive enquiries under our control, unless a documented legal requirement or legal hold requires retention. Client, contract, tax and financial records follow their own requirements. This does not delete your copies or provider backups.

Completed submission retry records expire after 24 hours. Rate counters use their own hour or day windows. If a delivery result is uncertain, a limited record is kept until the request is reconciled so that a retry does not silently create duplicate requests. These records do not contain your form text.

Access to business records is limited to handling enquiries, supporting clients and operating the service. Provider records, email copies and backups have separate retention periods; deleting a temporary application record does not delete an enquiry or ticket from HubSpot or email.

Privacy questions and requests

You can ask about information held about you, request a correction or ask for deletion. The rights, deadlines and exceptions that apply depend on your location and the applicable law. Nothing in this notice limits mandatory rights that apply to you.

Send privacy questions and formal requests to contact@reasonandrender.com. Please describe the information or request concerned. We may ask for proportionate information to verify the request and identify the relevant records.

We update this notice when the website or its handling of information changes.