Legal

Privacy Policy

Last updated: 14 August 2026

Legal review required: bracketed placeholders such as [Jurisdiction] must be completed and this document approved by qualified counsel before publication.

1. Scope

This Privacy Policy explains how TypeCraft Engineering (“TypeCraft”, “we”, “us”) processes personal data when you browse this website, submit a commission enquiry, or engage us to design, extend, or engineer a typeface. It applies to processing carried out under the laws of [Jurisdiction].

2. Data we collect

2.1 Data you provide

  • Identity and contact data: name, employer, role, and work email address.
  • Enquiry content: the scripts, weights, deployment environments, timelines, and brief details you describe.
  • Engagement data: contract signatories, billing contacts, and correspondence exchanged during a commission.

2.2 Data collected automatically

  • Technical data: IP address, browser type, device type, and pages requested.
  • Aggregate usage data used to measure page performance. We do not operate advertising trackers or sell behavioural profiles.

3. Purposes and legal bases

  • To respond to enquiries and prepare proposals — performance of a contract or steps taken at your request.
  • To deliver, invoice, and support a commission, including source-file escrow and glyph maintenance — performance of a contract.
  • To maintain website security and integrity — legitimate interests, balanced against your rights.
  • To meet accounting, tax, and IP record-keeping duties — compliance with a legal obligation in [Jurisdiction].

4. Confidentiality of client material

Brand briefs, unreleased identity material, and draft designspaces are treated as confidential information under the governing commission agreement. Access is restricted to the assigned drawing and engineering team, and specimen work is published only with written client consent.

5. Disclosure to third parties

We disclose personal data only to: (a) processors providing hosting, email, accounting, and source-escrow services under written data-processing terms; (b) professional advisers bound by confidentiality; and (c) authorities where disclosure is required by law in [Jurisdiction]. We do not sell personal data.

6. International transfers

Where personal data is transferred outside [Jurisdiction], we rely on an adequacy decision or on standard contractual clauses together with a transfer risk assessment, as required by [Jurisdiction] law.

7. Retention

  • Unsuccessful enquiries: 24 months from last correspondence.
  • Commission records, contracts, and IP assignments: the term of the licence plus the limitation period applicable in [Jurisdiction].
  • Accounting records: the statutory retention period in [Jurisdiction].

8. Your rights

Subject to the law of [Jurisdiction], you may request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interests. Requests should be sent to jobs@galavox.online and are answered within the statutory deadline. You may also lodge a complaint with the supervisory authority in [Jurisdiction].

9. Security

Source files, designspaces, and client correspondence are stored on access-controlled systems with encryption in transit and at rest, least-privilege permissions, and versioned backups. No transmission method is entirely secure, and we cannot guarantee absolute security.

10. Cookies

This website uses strictly necessary cookies for routing and security only. Where consent is required in [Jurisdiction] for any additional cookie, it will be requested before that cookie is set.

11. Changes and contact

Material changes will be posted on this page with an updated revision date. Privacy enquiries: jobs@galavox.online.