Privacy Policy

Last updated:

This policy explains what [LEGAL ENTITY NAME] ("we", "us") does with personal information collected through this website. It covers this site only — not the websites we build for clients, each of which has its own owner and its own policy.

1. What we collect

Information you give us

When you submit the build request form, we collect what you enter: your name, email address, phone number, business name and details, service descriptions, pricing you want displayed, branding preferences, and anything you type into the free-text fields.

If you become a client we also process the content you send us for the build — logos, photographs, copy, and domain credentials where you choose to share them.

Information collected automatically

Our host records standard server logs, which may include IP address, browser type, pages requested, and timestamps.

We do not use analytics or tracking cookies on this website.

[If you later switch analytics on — set GA_MEASUREMENT_ID in assets/config.js — this paragraph must be replaced. Name the provider, say what it collects, state whether IP anonymisation is enabled, and add the provider to Section 3 and the cookie names to Section 4. A policy that denies tracking you are doing is worse than no policy.]

What we do not collect

We do not collect payment card details on this website. Payments are handled by a third-party processor (Section 3) which receives them directly. We do not knowingly collect special-category information such as health, biometric, or precise geolocation data.

2. How we use it

• To prepare and send you a quote.
• To build, revise, and deliver your website.
• To invoice you and keep the records the law requires us to keep.
• To respond when you contact us.
• To display completed work in our portfolio, unless you ask us in writing not to.

We do not sell your personal information, and we do not share it for advertising. We will not add you to a marketing list from a build request without asking you first.

3. Who else sees it

We use a small number of third-party services. Each receives only what it needs:

• Form delivery — [Web3Forms]: receives your form submission and forwards it to us by email.
• Email — [Google Workspace / Gmail]: stores our correspondence with you.
• Payments — [Stripe]: collects and processes your payment details directly. We receive confirmation and the last four digits, never the full card number.
• Hosting — [Cloudflare Pages]: serves this website and keeps server logs.
• Typefaces — Fontshare (Indian Type Foundry): fonts load from their CDN, which means your browser makes a request to them and they may see your IP address.
• [Phone — e.g. OpenPhone / Grasshopper]: handles calls and text messages to our business number, including voicemail and transcripts.

We may also disclose information where the law requires it, or to protect our rights or someone's safety.

4. Cookies and browser storage

We do not use advertising or tracking cookies.

The build request form stores your progress in your browser's local storage so a closed tab does not lose your answers. That data stays on your device — it is not sent to us until you submit the form, and it is cleared when you do. Your light/dark theme preference is stored the same way. You can clear both at any time through your browser settings.

5. How long we keep it

• Enquiries that do not become projects: [12] months, then deleted.
• Client project files and correspondence: [3] years after completion, so we can support the site and answer questions.
• Invoices and financial records: [7] years, or as long as tax law requires.

You can ask us to delete your information sooner — see Section 6.

6. Your rights

You may ask us to:

• Tell you what personal information we hold about you.
• Correct anything inaccurate.
• Delete your information, where we are not required to keep it.
• Stop using it for a particular purpose.

Email [PRIVACY EMAIL] and we will respond within [30] days. We will not charge you or treat you differently for exercising these rights.

[If you later exceed the CCPA/CPRA thresholds — broadly, $25M annual revenue or the personal information of 100,000+ California consumers — additional obligations apply and this section needs expanding. Review with counsel as the business grows.]

7. Security

The site is served over HTTPS. We limit access to your information to people who need it, and we choose third-party providers that maintain their own security practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Please do not send passwords or account credentials by email. If we need access to a domain or host, we will tell you a safer way to share it.

8. Children

This site is intended for business owners and is not directed at children under 13. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

9. Changes to this policy

If we change this policy we will update the date at the top of this page. Material changes will be communicated to active clients directly.