Privacy
Southern Sun LLC is a one-person practice run by Gabriel Mongalo in the United States. In this policy, I and Southern Sun mean that company, which is the controller of the information described here.
This page covers information collected through southernsun.dev, including the AI Reception page at /voice. It does not cover data held inside AI systems I build for clients, where I act on the client's instructions under our agreement, and it does not cover call recordings, transcripts or caller details handled by the AI Reception service — those are governed by the agreement with the client whose calls they are.
What this site collects
Anything you send me. If you use the contact form, I receive your name, email address and message. The form is delivered to my inbox by Resend. If you email me directly at hello@southernsun.dev or voice@southernsun.dev, I receive whatever you write. I use this to reply to you and to discuss working together.
Booking a call. The booking button opens a Cal.com embed, and that embed loads only when you click it. Until then, nothing on this site contacts Cal.com. Once you click, Cal.com receives your IP address and browser information and may store data on your device. If you go on to book, it collects your name, email address, timezone and anything you enter, on their systems under their own privacy policy, and the meeting is created in Google Calendar and Google Meet. If you would rather not load Cal.com at all, email me instead — it reaches the same place.
Analytics. Pages are measured with Vercel Web Analytics, which records the page path, referrer, filtered query parameters, device type, operating system, browser, timestamp, and an approximate location derived from your IP address, which can be as specific as a city. It does not use cookies. Visitors are counted using a hash generated from the request, which Vercel discards after 24 hours, so it does not build a profile of you across other websites. On the /voice page I also record three anonymous events: that a booking link was clicked, that an email link was clicked, and that the pricing calculator was used. Those events carry no information about who you are.
Server logs.This site is hosted on Vercel, which keeps standard request logs — IP address, user agent, requested URL and timestamp. These exist so the site can be run, debugged and protected from abuse, and are retained on Vercel's schedule, typically around 30 days.
Fonts and icons. Typefaces load from Google Fonts and Fontshare, and icons from the jsDelivr CDN. Each of those receives your IP address and browser information as part of serving those files.
What this site does not do
- No advertising, retargeting, or cross-site tracking pixels.
- No selling of personal information, and no sharing of it for cross-context behavioural advertising — including in the previous twelve months.
- No account creation, and no payment details taken on this site.
- No collection of sensitive personal information, and no automated decision-making that produces legal or similarly significant effects.
Why I am allowed to hold it
If you are in the UK or the European Economic Area, the law asks me to name a legal basis for each use. Mine are: taking steps at your request before entering a contract, and performing that contract, when you contact me or book a call; my legitimate interests in running, securing and improving this site, understanding aggregate traffic, and keeping records of who I have spoken to; your consent, where consent is required, which you can withdraw at any time; and compliance with legal obligations such as tax and accounting rules.
Cookies and similar technologies
Southern Sun sets no cookies of its own, and the analytics described above are cookieless. Simply reading this site stores nothing on your device. The one thing that can is the Cal.com booking embed, which is third-party code and may set cookies or store data in your browser — and it is loaded only if you click the booking button, so that is your decision to make rather than one made for you. Email me instead and it never loads at all.
Who else sees it
I use a small number of service providers, each of which handles information on my behalf or under its own policy: Vercel (hosting and analytics), Resend (contact form delivery), Cal.com (scheduling), Google (fonts, and Calendar and Meet for booked calls), Fontshare (fonts) and jsDelivr (icons). I do not give your information to anyone else for their own marketing.
I may disclose information where I am legally required to — a court order, a valid legal request, or where it is necessary to establish or defend a legal claim, or to protect the rights and safety of others. If Southern Sun is ever sold, merged, or transfers its business, records may pass to the acquirer, who would remain bound by this policy for information collected under it until you are told otherwise.
Where it goes
Southern Sun operates from the United States, and the providers above are largely US-based, so information collected here is processed in the United States. Where information is transferred out of the UK or the EEA, that transfer relies on the safeguards those providers put in place — most commonly the European Commission's Standard Contractual Clauses and the UK Addendum. Ask me and I will point you to the mechanism for a given provider.
How long it is kept
- Enquiries and email correspondence: up to 24 months after our last exchange, unless we go on to work together.
- Records of client work, including contracts and invoices: seven years, to meet tax, accounting and legal-claim requirements.
- Server logs: as long as Vercel retains them, typically about 30 days.
- Analytics: retained in aggregate form, with no identifier tying it to you.
Ask me to delete what I hold about you and I will, unless I am required to keep it or need it to establish or defend a legal claim — in which case I will tell you what I am keeping and why.
How it is protected
The site is served over HTTPS, the providers above are established services with their own security programmes, and access to my inbox and accounts is limited to me and protected by strong authentication. No method of transmission or storage is perfectly secure, so I cannot guarantee absolute security — please do not send me passwords, payment card numbers, government identifiers or other sensitive material through the contact form or by unencrypted email.
Your rights
Whoever and wherever you are, you can ask me what I hold about you, ask me to correct it, ask me to delete it, or ask for a copy. Email hello@southernsun.dev and I will act on it.
UK and EEA.You have the right to access, correct, erase, restrict and object to my processing of your personal data, including objecting to processing based on legitimate interests; the right to data portability; and the right to withdraw consent where I rely on it, without affecting what was done before you withdrew it. You also have the right to complain to your local supervisory authority — in the UK, the Information Commissioner's Office at ico.org.uk. I would rather you came to me first, but that right stands either way.
California. You have the right to know what personal information I have collected, used and disclosed and why; to request deletion; to request correction; and to be free from discrimination for exercising any of these rights — exercising them changes nothing about how I deal with you. Because I do not sell or share personal information and do not collect sensitive personal information, there is nothing for you to opt out of or limit. You may use an authorised agent, who will need to show they are acting for you.
Making a request. Email me from the address you have used with me, or give me enough detail to match your request to my records — I may need to ask a question or two to confirm it is you, which is a safeguard for you rather than an obstacle. I will respond within 30 days, and within 45 days for California requests, and will tell you if I need longer. Requests are free unless they are manifestly unfounded or repetitive.
Children
This is a business site and is not directed to children. I do not knowingly collect information from anyone under 16. If you believe a child has sent me information, email me and I will delete it.
Do Not Track and Global Privacy Control
There is no consistent industry standard for responding to Do Not Track browser signals, so this site does not respond to them. Because I do not sell or share personal information, a Global Privacy Control signal has nothing to opt you out of here.
Other sites
This site links to places I do not control — GitHub, LinkedIn, Cal.com, and client work. Their privacy practices are their own, and this policy does not cover them.
Changes
If this policy changes, the updated version appears on this page with a new date at the top. If a change materially affects how I use information you have already given me, I will tell you by email where I have your address.
Contact
Southern Sun LLC · Attn: Gabriel Mongalo · hello@southernsun.dev