Privacy Policy

Destm Technologies ("Destm", "we", "us") operates https://destm.com. We build and ship AI-native commerce systems for retail brands. This policy covers data we collect through this website and through engagements with our clients and prospects.

• Form submissions. When you submit the AI Audit form, contact form, or any other form, we collect the information you provide (name, email, company, phone, free-text fields).
• Analytics. If you accept cookies, Google Analytics 4 collects standard web-analytics data via Google Tag Manager — page views, referrer, device class, country, scroll depth, button clicks. IP addresses are anonymized.
• Server logs. Our hosting provider records standard request logs (IP, user-agent, timestamp) for security and debugging. Retention 365 days.

• To respond to your inquiries and qualify leads.
• To improve the website (which pages convert, where users drop off).
• To send a one-time follow-up email related to the form you submitted. We do not put you on a marketing list without explicit opt-in.

• Google Analytics 4
• Google Tag Manager
• LinkedIn Insight Tag
• Vercel hosting
• Resend (transactional email)

Cookies and analytics fire only after you accept consent. See our Cookie Policy for the full list and how to revoke consent.

EU / UK (GDPR): You have the right to access, rectify, erase, restrict, object to processing, and request portability of your personal data. Lawful basis for our processing is (a) consent (analytics cookies), (b) legitimate interest (form follow-up to qualify a business inquiry), and (c) contractual necessity (when you become a client). You can withdraw consent at any time without affecting the lawfulness of prior processing.

California (CCPA / CPRA):You have the right to know what we collect, request deletion, correct inaccuracies, opt out of any "sale" or "share" of personal information (we do neither), and limit the use of sensitive personal information (we do not collect any). We will not retaliate against you for exercising these rights.

Exercise any of these rights: email [email protected] from the address you submitted (or another address you can verify ownership of). We respond within 30 days. There is no fee.

Our hosting and analytics vendors process data in the United States. For EU/UK users, this transfer is governed by the EU Standard Contractual Clauses (SCCs) in each vendor's Data Processing Addendum. We do not transfer data to jurisdictions without an adequacy decision or equivalent safeguards.

This site is intended for business users. We do not knowingly collect personal data from anyone under 16. If you believe a minor has submitted information, contact us at [email protected] and we will delete it.

Form submissions are kept for 365 days unless you become an active client (in which case engagement-related data is kept per the governing MSA). Analytics data follows GA4 default retention.

All traffic is HTTPS. Form submissions are stored encrypted at rest. We do not sell, rent, or share your data with third parties beyond the named vendors above. Access to personal data is restricted to staff who need it for the purposes described in this policy.

We may update this policy as the site or our practices change. Material changes will be noted by updating the "last updated" date at the top. Continued use of the site after a change constitutes acceptance of the updated policy.

Questions or rights requests: [email protected] or [email protected].