This policy explains how [legal business name], doing business as CraftedWeb Studio (“CraftedWeb,” “we,” “us”), handles information when you visit this website or use our services.
Information this website handles
The project inquiry form asks for your name and email address, and lets you optionally provide your phone number, business name, package of interest, and project details. We use these details to review and respond to your inquiry and, if you choose to proceed, to prepare a project proposal.
When you visit the site, the website host may process technical request information such as your IP address, browser, device, requested page, and request time in server or security logs. Confirm the provider and its log retention period before launch: [hosting provider and applicable log-retention period].
The client portal is being prepared and is not active until account setup is complete. When enabled, Supabase will process sign-in information and project details so clients can access their own project updates. This may include an account email address, project name, package, status, next step, and published website link. A server-side billing connection will associate a client account with a Stripe customer record; payment card details remain with Stripe. See Supabase’s Privacy Policy and the Stripe Privacy Policy. Update this notice if the portal’s data fields or providers change.
Fonts and other service providers
This site loads fonts from Google Fonts. A request to Google’s font service may disclose technical connection information, including your IP address and browser request details. See Google’s Privacy Policy. If fonts or other external services change, update this section.
We do not currently use advertising pixels or analytics on this site. The inquiry form is handled by Formspree. Formspree receives the information you submit, stores submissions in its service, and may send notifications to the email configured for this form. Formspree may also process technical information about form requests. Its own practices are described in the Formspree Privacy Policy. Formspree’s handling and retention are subject to its policy and service settings.
How we use information
We use information you send to respond to inquiries, prepare project proposals, provide contracted design or hosting services, communicate about billing and support, protect the site and services, and meet legal obligations. We do not sell personal information collected through this site.
Payments
Stripe checkout is not currently connected. When payment processing is added, Stripe will handle payment details through its checkout or payment services. We expect to receive transaction and subscription status information needed to administer projects and hosting; we do not intend to store full payment card numbers on our own systems. This section must be checked against the final Stripe integration and linked to the applicable Stripe privacy information before payments begin.
Retention and security
We keep inquiry, project, billing, and support information only as long as needed for the purposes described above, to maintain business records, resolve disputes, and meet legal obligations. The exact retention periods and deletion process must be set before launch: [retention schedule and deletion contact/process].
We use reasonable safeguards appropriate to the information and services we operate. No method of online storage or transmission can be guaranteed completely secure.
Your choices and requests
Depending on where you live, you may have rights to request access to, correction of, or deletion of certain personal information, or to exercise other privacy choices. Contact us to make a request. We will verify and handle requests as required by applicable law.
Privacy contact: [privacy contact email and mailing address]. Identify the business’s applicable jurisdictions and add any required local notices or opt-out links before launch. California privacy rules, for example, can require a privacy policy and a notice at or before collection for businesses subject to the law; requirements depend on the business and its data practices. California Privacy Protection Agency guidance.
Children’s privacy
This site and services are intended for businesses and adults. We do not knowingly request personal information from children through this site. If you believe a child has sent us information, contact us using the details above.
Changes to this policy
We may update this policy as the site and services change. The updated date at the top of this page will show when revisions were made. If a change materially affects how information is handled, we will provide any notice required by law.
This is a working draft, not legal advice. Do not publish it until the highlighted items are completed and the disclosures accurately describe the live website, hosting provider, and payment setup.