This policy explains what personal data LocalizeMe collects when you visit this website or contact us, why we collect it, who processes it on our behalf, and what rights you have. We have tried to describe what actually happens rather than what is legally convenient.

Who is responsible

LocalizeMe is the controller of any personal data described here.
Contact for any privacy question or request: Thu Nguyen — hello@localizeme.org

This site is published at localizeme.org, localizeme.asia and localizeme.site. This policy covers all three.

What we collect, and when

1. When you use the contact form

The form asks for your name, email address, the service you're interested in, the languages you need, and your message. We use this solely to reply to your enquiry and, if it becomes a project, to run that project.

  • Legal basis: steps taken at your request prior to entering a contract (GDPR Art. 6(1)(b)), and our legitimate interest in responding to business enquiries (Art. 6(1)(f)).
  • Where it goes: the form is processed by a serverless function on Cloudflare Pages, then sent as an email through Brevo (Sendinblue GmbH) to a Google Workspace / Gmail mailbox we monitor. We do not store submissions in a separate database.
  • How long we keep it: the email stays in our mailbox. Enquiries that don't lead to work are deleted within 12 months. Project correspondence is kept as long as needed for the work and any legal or tax retention period that applies to it.

2. When you simply visit a page

This site sets no cookies and stores nothing in your browser.

Our host, Cloudflare, processes your IP address in order to deliver the page and to protect the site from abuse. We also see Cloudflare Web Analytics, which is cookieless and reports only aggregate figures — page views, country, referring site, device type. It does not identify individual visitors and we cannot use it to track you across sites.

3. Resources loaded from third parties

Being straightforward about this, because it is the part most policies bury: some page assets are loaded from other companies' servers, and your browser contacts them directly. That means your IP address is transmitted to them when a page loads.

  • Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — typefaces used across the site.
  • Clearbit Logo API (logo.clearbit.com) — company logos shown on the home page.

We are working to self-host these assets so that no third-party request is made from your browser at all. If you would like to know the current status, just ask.

4. If we email you

We sometimes contact companies and individuals directly about our services. Where we do, the personal data involved is normally a business contact address obtained from a public source such as a company website, a public professional profile, or an industry directory.

If you have received an email from us and want to know specifically where we obtained your address, ask and we will tell you. If you would rather we deleted your details and did not contact you again, say so and we will do it — no reply or justification needed from you.

Outgoing mail is sent through Brevo, which may record whether a message was delivered, opened or clicked.

Who processes data for us

  • Cloudflare, Inc. — website hosting, security, cookieless analytics.
  • Sendinblue GmbH (Brevo) — email delivery for the contact form and outgoing mail.
  • Google Ireland Ltd. — the mailbox that receives enquiries; Google Fonts as described above.

These providers act on our instructions. Some are based outside the EU/EEA or transfer data there; those transfers rely on the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

What we never do

  • We do not sell or rent personal data.
  • We do not use advertising or cross-site tracking pixels.
  • We do not add people to a marketing list without their agreement.
  • We do not use client content to train machine-learning models.

Confidentiality of material you send us

Files sent for translation frequently contain confidential or unpublished material. We treat them as confidential by default, share them only with the linguists assigned to the work — who are under confidentiality obligations — and delete them on request. We are happy to sign an NDA before you send anything.

Your rights

If you are in the EU, EEA or UK, the GDPR gives you the right to:

  • ask what personal data of yours we hold, and get a copy;
  • have inaccurate data corrected;
  • have your data deleted;
  • restrict or object to our processing — including objecting to any direct contact from us;
  • receive your data in a portable format;
  • know the source of your data where we did not obtain it from you (Art. 14(2)(f)).

Write to hello@localizeme.org and we will act on it within 30 days. There is no charge, and you do not need to explain why.

You also have the right to complain to a data protection authority — in the EU, the one for your country of residence.

Changes

If this policy changes materially we will update the date at the top of the page. This is version 1.0, published 13 August 2026.