Privacy policy
1. Who we are
This Privacy Policy explains how Sphere Omnia, Inc. ("Sphere", "we", "us") handles personal data when you visit enterthesphere.com (the "Site"). Sphere Omnia, Inc. is a Delaware corporation. Our address is 2810 N Church St., PMB 36678, Wilmington, DE 19802, USA.
We are the controller of the personal data described here. You can reach us about privacy at Legal@sphereholdings.co.
This policy covers the Site only. It does not cover products or services we provide under separate agreements.
2. Who this applies to
We welcome visitors from around the world. If you are in the European Economic Area (EEA), the United Kingdom or Switzerland, we handle your data in line with the GDPR and, where relevant, the UK GDPR. Section 9 sets out your rights.
3. What we collect
We keep collection small. The Site has no accounts, no advertising pixels, no embedded video or social widgets and no third-party fonts.
Information you send us. If you use a contact form, we collect your name and email address (required) and your organisation, subject and message (optional). You choose what to write, so please do not include sensitive information. The Site does not store form submissions. Each one is sent as a single email to our contact inbox, and your email address is set as the reply-to address.
Technical data. When you load a page, our hosting provider and our image provider receive standard request data, including your IP address, browser type, device details, the page requested and the time. This is how any website works, and it is also how we keep the Site secure.
Usage data, only if you accept analytics. If you accept the Analytics category in our cookie banner, we use PostHog to collect anonymous usage data. This covers page views and page exits, page addresses and referrers, the text of elements you click, and a single event recording that a contact form was submitted (without its contents). Ad-click identifiers such as gclid and fbclid are masked. Your IP address is processed to work out your country, and [we do not keep the IP address]. We do not identify you by name or email, and we do not create visitor profiles. Session recording, heatmaps and surveys are switched off.
What we do not collect. We do not knowingly collect special categories of personal data through the Site, and we do not sell your personal data.
4. Cookies and similar technologies
When you first visit, a banner asks for your choice. Accept all, Reject all and Manage preferences carry equal weight. You can change your choice at any time through the Cookie Preferences link in the footer.
Strictly necessary cookies do not need consent. Analytics cookies are not set, and the analytics code is not even downloaded, unless you accept. Withdrawing consent deletes the analytics cookie and session storage and reloads the page. Our server also refuses to forward analytics data from a browser that has not consented.
We use the following cookies and browser storage items.
cc_cookie. Strictly necessary. Remembers your cookie choice. Set only after you accept or reject. Lasts 6 months.
ph_[project key]_posthog. Analytics, with your consent. Holds the PostHog anonymous visitor ID and session ID. Lasts 1 year.
ph_[project key]_* (session storage). Analytics, with your consent. Holds properties of the current session. Lasts until the tab closes.
__ph_opt_in_out_[project key]. Analytics, with your consent. Records that you withdrew consent and holds no identifier. Lasts [duration].
Sphere editors who open a draft preview may also receive two session cookies, io.prismic.preview and __prerender_bypass. These are never set for public visitors. In preview mode, the Prismic toolbar loads from Prismic's domains, and any cookies set there belong to Prismic.
5. Why we use your data
Replying to your enquiry. We use your name, email, organisation, subject and message. Our legal basis is legitimate interests in answering people who contact us, or steps you ask us to take before entering a contract.
Delivering and securing the Site. We use your IP address, browser and device details and request data. Our legal basis is legitimate interests in running a secure website.
Remembering your cookie choice. We use the cc_cookie cookie. Our legal basis is legitimate interests and, where required, necessity for the service you requested.
Understanding how the Site is used. We use anonymous usage data and a country derived from your IP address. Our legal basis is your consent, which you can withdraw at any time.
Where we rely on legitimate interests, we have weighed them against your rights and expect the impact on you to be low. You can object at any time (see Section 9).
We do not use your data for automated decisions with legal or similarly significant effects. We do not use it for advertising.
6. Who receives your data
We share data only with service providers that help us run the Site. They act on our instructions under data processing terms.
Google Cloud (Firebase App Hosting). Hosts the Site. It receives every request, including IP addresses, in standard server logs. Location: United States (Iowa).
Prismic. Content management and image delivery. It receives your IP address and browser details when images load. It sets no cookies on visitors. Location: United States.
Resend. Delivers contact form emails. It receives your name, email, organisation, subject and message. Location: United States.
PostHog. Anonymous analytics, only with your consent. It receives pseudonymous IDs, page activity and your IP address to derive country. Location: United States.
We may also disclose data if the law requires it, to protect our rights or safety, or in connection with a merger, sale or financing involving Sphere. We do not sell personal data or share it for cross-context behavioural advertising.
7. International transfers
Sphere is based in the United States, and all processing described here takes place in the United States. If you visit from the EEA, the UK or Switzerland, your data is transferred to the United States. We rely on [Standard Contractual Clauses and/or the EU-US Data Privacy Framework, as applicable to each provider] and, where needed, additional safeguards. You can ask us for a copy of the relevant safeguards at Legal@sphereholdings.co.
8. How long we keep data
Contact enquiries. The Site keeps no copy. The email sits in our contact inbox for 24 months after our last exchange with you, then we delete it unless we need it for a legal reason or an ongoing relationship.
Server logs. Kept by our hosting provider for 12 months under its standard settings.
Cookies. For the durations listed in Section 4.
Analytics. Anonymous usage data is kept for 12 months in PostHog.
9. Your rights
If the GDPR or UK GDPR applies to you, you have the right to ask for access to the personal data we hold about you, ask us to correct data that is wrong, ask us to erase your data, ask us to restrict how we use it, receive the data you gave us in a portable format, and object to processing based on legitimate interests. You can also withdraw consent at any time, without affecting what happened before.
To use any of these rights, email Legal@sphereholdings.co. We may ask you to confirm your identity. We will reply within one month. For consent to analytics, you can also use the Cookie Preferences link in the footer.
You also have the right to complain to your local data protection authority. In the EEA, you can find yours on the website of the European Data Protection Board. In the UK, it is the Information Commissioner's Office. We would appreciate the chance to fix the problem first, so please contact us.
Providing data through our contact form is voluntary. Without your name and email we cannot reply to you.
10. US state privacy rights
Residents of some US states have rights to know, correct, delete and obtain a copy of their personal data, and to opt out of sale, sharing and targeted advertising. We do not sell personal data or share it for targeted advertising. To make a request, email Legal@sphereholdings.co. We will not treat you differently for using these rights.
11. Security
We use reasonable technical and organizational measures to protect personal data, including encrypted connections and limiting what the Site collects and stores. No system is completely secure, so we cannot guarantee absolute security.
12. Children
The Site is meant for business audiences and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you think a child has sent us data, email Legal@sphereholdings.co and we will delete it.
13. Changes to this policy
We may update this policy as the Site or the law changes. The date at the top shows the latest version. For material changes, we will say so on the Site. If a change affects consent, we will ask you again.
14. Contact
Sphere Omnia, Inc. 2810 N Church St., PMB 36678 Wilmington, DE 19802, USA Legal@sphereholdings.co