Privacy
What personal data is handled, why, for how long, and how to have it deleted.
Effective 30 July 2026. This notice covers the pneumatheorem.org website, the purchase of a report, and correspondence. It sits alongside the Terms of Sale, which govern what is sold and on what licence.
Who is responsible
PneumaTheorem, Inc., a corporation incorporated in Delaware, United States. Correspondence, including any request under this notice, to [email protected].
The company is operated by one person. That is relevant here because it determines what this notice can honestly promise: there is no data protection department, and requests are answered by the same person who writes the reports.
What is collected
When you buy
Your email address, name, and organisation name, entered at checkout. Payment is processed by Stripe: card details are given to Stripe and are never seen or held here.
When you write
Whatever an email contains — address, name, signature block, and the content of the message. Nothing further is collected from correspondence.
In material you supply
Drawings, occupancy figures and programme information supplied for an assessment. These may contain personal data incidentally — a name on a drawing, a contact on a plan.
No account is created, no profile is built, and no tracking or analytics is run on this site.
What it is used for
To answer your enquiry, to perform the engagement you commission, to issue and deliver the report, and to keep the records that a business is required to keep. Nothing else.
It is not sold. It is not shared with anyone other than the processors named below. It is not used for marketing, and no marketing is sent. Material supplied for an assessment is used for that assessment and is not published, shown to third parties, or used as an example — a commitment also recorded in the Terms of Sale.
Who else sees it
Stripe processes payments and holds the payment data associated with a purchase. The email provider carries correspondence. No one else receives personal data, and it is not transferred to any other party for any purpose.
A report names the organisation it is licensed to. It does not name individuals unless you ask for a named recipient to appear on it.
Where it is processed
By a company incorporated in the United States, and in practice from Taiwan, where the operator is resident. This is stated as a fact about where the work happens so that you can take it into account.
How long it is kept
Correspondence that does not lead to a purchase is kept only as long as the exchange is live.
Material supplied for an assessment, and the record of what was issued, are retained so that the assessment can be reproduced or extended later. That is the point of retention: a report that cannot be reproduced is a report you cannot rely on afterwards.
All of it is deleted on written request. Where deletion would leave a report unreproducible, that consequence is explained before it is carried out, and the decision remains yours.
Your rights
You may ask what is held about you, ask for it to be corrected, and ask for it to be deleted. Requests are answered within a reasonable period and without charge, by email to the address above.
If you are in the United Kingdom or the European Union, you also have the right to complain to your national data protection authority. That right exists whether or not you raise the matter here first.
Cookies and third-party requests
This site sets no cookies, runs no analytics, and makes no third-party requests. Fonts and images are served from this domain. Nothing about your visit is transmitted anywhere.
Changes
If this notice changes, the effective date above changes with it. A purchase is governed by the Terms of Sale in force when it was made; this notice describes current practice.