bonofici
Alamas Labs, Inc. · last updated 2 September 2026

Privacy Policy

1.Introduction

Alamas Labs, Inc., a Delaware corporation trading as bonofici ("bonofici", "we", "us"), operates this website. This policy explains what personal data we collect through it, why, and what rights you have.

Where we process data on behalf of a client under a signed services agreement, we act as a processor and that agreement governs. This policy covers the data we control ourselves — principally website visitors and people who contact us.

2.Information We Collect

2.1 Information you provide

If you email us, we receive your name, email address, and whatever you choose to include — typically your company, role and what you are looking to hand over. This site has no account, no login and no payment form.

2.2 Information collected automatically

We collect the following when you visit:

  • pages visited, referring URL, and time of visit;
  • approximate country, derived from IP address;
  • browser type and version, operating system, and device type;
  • interaction data captured by a session-recording script: pointer movement, clicks and scroll behaviour on the page.

Session recording is used to understand how this page is read so we can improve it. It does not record keystrokes, and this site has no fields to type into.

2.3 Client data

Data belonging to client organisations — the records inside the work we perform — is processed only under the relevant services agreement, is segregated per client, and is never used to train systems for another client or for our own purposes.

3.How We Use Information

We use personal data to:

  • respond to enquiries and carry on a commercial conversation;
  • understand how the site is used and improve it;
  • maintain the security and integrity of the site;
  • comply with legal obligations.

We do not sell personal data. We do not share it with advertising networks, and we do not use it for behavioural advertising.

4.How We Share Information

We share personal data only with service providers acting on our instructions (see clause 5), with professional advisers under a duty of confidence, where required by law or valid legal process, and with an acquirer in connection with a merger or sale of the business.

5.Third-Party Services

Analytics and session recording. We run our own analytics on infrastructure we control, rather than a third-party advertising platform. It provides the data described in clause 2.2.

Hosting. This site is served by Cloudflare, which processes request metadata including IP address in order to deliver and protect the site.

Email. Correspondence you send us is held in our business mailbox.

6.Data Retention

Analytics and session-recording data are retained only as long as they remain useful for improving the site. Correspondence is retained for as long as we have a live conversation or engagement with you, and thereafter for as long as needed to meet legal and accounting obligations.

7.Data Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit, access control on a least-privilege basis, and segregation of client data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8.Your Rights and Choices

Subject to your jurisdiction, you may have the right to:

  • access the personal data we hold about you, and receive a copy;
  • have inaccurate data corrected;
  • have data deleted;
  • restrict or object to processing, including our use of analytics;
  • withdraw consent where processing relies on it.

Write to hello@bonofici.com to exercise any of these. We will respond within the period required by applicable law. You can also block analytics at the browser level, and we honour the Global Privacy Control signal where your browser sends it.

9.International Data Transfers

We operate from the United States and use providers that may process data in other countries. Where personal data is transferred out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses.

10.European Privacy Rights (GDPR)

10.1 Legal bases

We rely on legitimate interests to operate, secure and improve the site and to respond to business enquiries; contract where processing is necessary to perform an engagement; and legal obligation where the law requires it.

10.2 Additional rights

You have the right to data portability and the right to lodge a complaint with your local supervisory authority. We would ask you to raise it with us first.

11.California Privacy Rights (CCPA/CPRA)

In the preceding twelve months we have collected identifiers (email address, IP address) and internet activity information (pages visited, interaction data). We have not sold or shared personal information as those terms are defined under the CCPA, and we do not process sensitive personal information for the purpose of inferring characteristics. California residents may request access, deletion, or correction, and will not be discriminated against for exercising those rights.

12.Children's Privacy

This site is directed at businesses and not at children. We do not knowingly collect personal data from anyone under 16. If you believe we have, write to hello@bonofici.com and we will delete it.

13.Changes to This Policy

We may update this policy. The date at the top of this page records the last revision. Material changes will be communicated to anyone with a live engagement.

14.Contact

Alamas Labs, Inc., trading as bonofici. Privacy questions and rights requests go to hello@bonofici.com. We have not appointed a Data Protection Officer, as we are not required to.