Legal
What we collect, what we don't, and who else touches it.
We are a small hardware company, not an advertising business. We collect what we need to sell you an instrument and support it, and nothing else. This page says exactly what that is.
The site is a static page hosted on Cloudflare Pages. Loading it does not create an account, set a cookie, or store anything in your browser.
Cloudflare, as our host and CDN, processes standard request data — your IP address, the page requested, your browser's user-agent string and timestamps — to serve the page and to protect the site from attack. That is a normal function of a web server and we do not combine it with anything else or use it to identify you.
The page loads typefaces from Google Fonts. Google receives your IP address as part of that request. If you'd rather it didn't, a content blocker will stop it and the page still works.
Our contact form is processed by Web3Forms, which receives what you type — your name, email address, chosen subject and message — and delivers it to us by email. We use it so that we can receive messages without publishing an address that gets scraped.
We use what you send only to answer you. We keep correspondence for as long as it's useful for support and warranty purposes, which for a product with a one-year warranty means at least 2 years. Ask us and we'll delete it sooner.
You can always email us directly instead, at hello@overheadworks.com.
Checkout happens on Shopify, not here. When you buy, Shopify collects your name, email address, shipping and billing address, and payment details, and processes the payment through its payment providers. We never see or store your card number.
We can see your order details — what you bought, where it went, your contact details — because we need them to ship the instrument and support it afterwards. Shopify processes this data as our service provider, and its own privacy policy also applies to the checkout.
We keep order records for as long as tax and accounting law requires, which is typically seven years.
To show you the traffic above your own house, Alpha has to know where your house is. During setup you enter a location and a home airport, and the instrument sends that location to our service to request the relevant traffic and weather.
Mail sent to our overheadworks.com addresses is routed by Cloudflare Email Routing to a personal inbox. Cloudflare processes the message in transit to deliver it.
We do not run a marketing mailing list at this time. If we start one it will be opt-in, and unsubscribing will be one click.
Only the service providers we need to run the business, and only for that purpose:
We will also disclose information if we're legally required to. We do not sell personal information, and we do not share it for cross-context behavioural advertising.
Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email hello@overheadworks.com and we'll respond within 30 days. We won't charge you and we won't treat you differently for asking.
If you're in the EU or UK, our lawful bases are performance of a contract (fulfilling your order), legitimate interests (answering your messages, keeping the site up), and legal obligation (tax records). You have the right to complain to your data protection authority.
If you're in California, you have the rights described above under the CCPA/CPRA. We have not sold or shared personal information in the preceding twelve months.
Our controller of record is OverHead Works, LLC, REGISTERED ADDRESS.
Alpha is sold to adults and this site is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, email us and we'll delete it.
If we change this policy we'll update the date here and, for anything significant, say so on the site. Last updated EFFECTIVE DATE.