Privacy

The short version

We collect what you send us and almost nothing else. There are no advertising cookies, no tracking pixels, no data brokers, and nothing is sold or shared for marketing. If you never fill in a form, we hold no personal information about you at all.

What we collect, and when

Contact form

Your name, email, and whatever you type. Used to reply to you.

Project brief (/start)

Name, email, and optionally business name, phone, and the details of what you want built. Used to quote and to do the work.

Bookings

Handled by Cal.com. They take your name, email, and answers to the booking questions so the appointment can exist.

Payments

Handled by Stripe. Card details go to Stripe and never touch this site. We see the amount, whether it succeeded, and the email you paid with.

Server logs

Your IP address is recorded against form submissions. This is the only way to stop a bot filling the form ten thousand times, and it is kept for that reason alone.

Cookies

This site sets no advertising or tracking cookies.

If you sign in to the internal portal or the representative portal, a session cookie is used to keep you signed in. That is strictly necessary for the thing you asked to do, and it is removed when you sign out.

Page analytics, where enabled, are collected without cookies and without any identifier that follows you between sites.

Who else handles your data

We use a small number of processors. Each one is here because the site cannot work without it, not because it is convenient.

Cloudflare

Serves the website and filters abusive traffic.

Supabase

Stores form submissions. Hosted in the United States.

Cal.com

Runs the booking calendar.

Stripe

Takes payments. Stripe holds the card details; we never do.

How long we keep it

Enquiries and project briefs are kept while there is a live conversation and for as long as we may need them for tax and accounting records. Anything that leads nowhere is deleted once it is clearly cold.

Ask us to delete your information and we will, unless we are legally required to keep a record of a transaction.

Your rights

You can ask what we hold about you, ask for it corrected, or ask for it deleted. Email us and a person will action it — there is no form to fill in and no account to create.

If you are in California, the CCPA gives you these rights explicitly, and also the right not to be discriminated against for using them. We do not sell personal information, so there is nothing to opt out of.

If you are in the UK or EU, the UK GDPR and GDPR give you the same rights plus the right to complain to your data protection regulator.

Security

Form submissions go straight to a database that has no public read access — a visitor can submit and can never read anything back, including their own submission. Internal pages are separated from client-facing ones at the database level, not just in the interface.

We never ask for and never store passwords, API keys, or card numbers. If a form ever seems to ask you for one, do not enter it and tell us.

Changes

If this policy changes in a way that matters, the date at the top changes with it.