Good Chaos (“we”, “us”) is a motorsport design studio based in Austin, Texas. This policy explains what personal data we collect when you use wearegoodchaos.com, why we collect it, and the choices and rights you have. It is written to meet the EU/UK General Data Protection Regulation (GDPR) and applicable US state privacy laws, including the California Consumer Privacy Act (CCPA/CPRA).

01 — Who is responsible for your data

Good Chaos is the data controller for personal data collected through this website. You can reach us about anything in this policy through our contact page or on WhatsApp at +1 619 962 4046.

02 — What we collect

Information you give us. When you send a project enquiry or a careers application, we collect what you enter: your name, email address, company or organisation, portfolio, social and resume links, the role you are applying for and your message.

Information collected automatically. Our hosting provider records standard technical data such as IP address, browser type, device and pages requested, for security and to keep the site running. If you allow optional cookies, we may also collect anonymous usage statistics (see section 06).

We do not knowingly collect data from children under 16, and we do not collect sensitive categories of personal data.

03 — How and why we use it

We use your data to reply to enquiries and prepare proposals (legal basis: steps prior to a contract), to review job applications (legitimate interests / pre-contract), to keep the website secure and working (legitimate interests), and to understand how the site is used and improve it (your consent, which you can withdraw at any time).

We do not sell your personal data, and we do not share it for cross-context behavioural advertising.

04 — Who we share it with

We share data only with service providers that help us run the studio and this website, such as our website host and form provider (Webflow), email and file-storage tools. They process data on our instructions under data processing terms. We may also disclose data where required by law.

05 — International transfers

We are based in the United States, and our providers may process data in the US and other countries. Where data from the EU, EEA or UK is transferred, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.

06 — Cookies

Essential. Needed for the site to work, for example remembering your cookie choice and keeping forms secure. These are always on.

Analytics (optional). Help us understand which pages are useful. They are only set if you click “Accept all” on our cookie notice.

You can change your choice at any time with the “Cookie settings” link below, or by clearing cookies in your browser. We honour Global Privacy Control (GPC) signals as an opt-out.

Cookie settings →

07 — How long we keep it

Enquiries and client correspondence: up to 3 years after our last contact, longer where needed for an active project or legal obligations. Careers applications: up to 12 months, unless you ask us to delete them sooner. Analytics data: no longer than 14 months.

08 — Your rights

Depending on where you live, you can ask to access, correct, delete or receive a copy of your data, object to or restrict our use of it, and withdraw consent at any time. California residents can also ask what we collect and request deletion, and will not be treated differently for using these rights.

To make a request, contact us through our contact page. We will reply within one month (45 days for CCPA requests). If you are in the EU/EEA or UK, you also have the right to complain to your local data protection authority.

09 — Security

The site is served over HTTPS and we limit access to personal data to the people who need it. No method of transmission is completely secure, but we work to protect your data.

10 — Changes

We may update this policy from time to time. The date at the top shows when it last changed.