Draft — pending legal review, not yet in force

Last updated 21 August 2026

Privacy & accessibility

Short version: the only information collected here is what you type into a form. It is not sold, not shared with advertisers, and not used to build a profile of you.

1. What is collected

Only what you submit through a form on this site. Nothing is gathered in the background.

Enquiry form Your name, email address, the category you selected, and the message you write.
Contributor form (lab) Your name, email address, area of interest, and a description of work you have done.
Server logs [HOSTING NOT CHOSEN — most hosts record IP address, timestamp, and browser string automatically. This clause must be completed once hosting is decided.]

There is no tracking, no advertising pixel, and no cookie set by this site. If analytics are ever added, this page is updated before they go live, not after.

2. Why, and what happens to it

To reply to you. That is the whole purpose. Your message is read by Panisse Padilla and no one else.

Your details are not added to a mailing list unless you explicitly ask to be. There is no newsletter to be silently subscribed to.

3. How long it is kept

Enquiries that do not become working relationships are deleted after [RETENTION PERIOD — recommend 12 months]. If we work together, records are kept for as long as the engagement runs plus [PERIOD].

You can ask for your information to be deleted sooner, at any time, and it will be.

4. Who else sees it

Three third parties are involved in running this site. None of them receive your enquiry content except where noted.

[FORM PROCESSOR] Receives and delivers form submissions. Not yet chosen — see LAUNCH-CHECKLIST item 1.
[HOSTING PROVIDER] Serves the pages. Not yet chosen.
Google Fonts Typefaces load from Google's servers, which means your browser makes a request to Google and Google can see your IP address. This happens on every page. Fixable by self-hosting the fonts — recommended before launch, and it removes this disclosure entirely.
TidyCal (advising only) If you book a session, TidyCal handles the booking and receives whatever you enter into it. Their privacy policy governs that, not this one.

Nothing is sold. Nothing is shared with advertisers or data brokers.

5. If you are under 18

This site is aimed at people considering or attending medical school, and some of you are still in high school. That matters legally and it matters practically.

[DECISION REQUIRED — this section cannot ship as-is.] Choose one:

Whichever is chosen, a parent or guardian may contact us to see, correct, or delete anything submitted by their child, and it will be actioned without argument.

6. Your choices

Write to contact@pmpadilla.com and you can ask to see what is held about you, correct it, delete it, or have it sent to you in a portable form. No reason is required and there is no charge.

Depending on where you live you may have additional rights — Florida residents, residents of other US states with privacy statutes, and anyone in the EU or UK. [Scope to be confirmed with counsel: does this practice take clients outside the US? If yes, GDPR applies and this section needs to be considerably longer.]

7. Security

The site is served over HTTPS. Form submissions travel encrypted. That said, no method of transmission is perfectly secure, and you should not send anything genuinely sensitive — medical records, financial details, identity documents — through a web form. If something like that needs to be shared, ask and a better channel will be arranged.

8. Changes

If this policy changes materially, the date at the top changes and the change is described here rather than quietly folded in.


Accessibility

This site is built to WCAG 2.2 Level AA as a target. Concretely, that means:

Target, not a claim of perfection. If something here is difficult or impossible for you to use, say so at contact@pmpadilla.com and it will be fixed — that is a faster route to a real improvement than any audit.