Privacy Notice

What we collect

Forms. When you ask for a free consultation, send a message, request a website audit, request a package, or leave your email address, we receive what you type: your name, your email address and, where the form asks for them, your phone number, business name, website address, the service or package you picked, and your message.

Quotes and payments. If we send you a quote, the choices you make on your quote page are saved with it. If you pay a deposit or an invoice online, the payment is handled by Stripe: your card details go to Stripe and never reach our servers. We keep a record of what was paid, when, and Stripe's reference for it.

Template previews. On a portfolio template page you can type your website address to see the template with your branding. Our server reads that public page once to pick out your business name, description, phone number, city and logo, shows them to you, and does not save them.

Site usage. We use Vercel Web Analytics to count page views and see which pages and buttons get used. It works without cookies and is designed not to identify individual visitors. Our host also keeps standard server logs (IP address, browser type, time of request).

Business listings. We look for prospective clients ourselves. For that we keep publicly listed business details, such as business name, address, phone number, website, public ratings and a published contact name or email, taken from Google Maps listings and the business's own public website.

Why we collect it

To reply to you, to prepare and send quotes, to do and bill for the work you hire us for, to understand how the site is used so we can improve it, and to contact businesses about our services. We do not sell your information and we do not use it to build advertising profiles. Leaving your email address in a sign-up box is the only thing that adds you to a mailing list.

Who else handles it

We use a small number of outside companies to run the site. Each one receives only what it needs for its job:

Vercel hosts the website, keeps the server logs and provides the analytics described above.

Supabase is our database. It stores audit and package requests, quotes, client and billing records, and the business listings described above.

Resend delivers the emails our forms generate: the notification to us and, for some forms, a confirmation to you.

Stripe processes online payments and holds the card details.

Google provides the mailbox where some form notifications arrive (Gmail), and the Google Maps and PageSpeed services we use to look up public business listings and test how fast a public website loads.

Anthropic provides the AI model described in the next section.

The site's fonts are served from our own domain, not from a font network. We do not share your information with anyone else unless the law requires it.

Use of AI

Our staff use an AI model (Claude, made by Anthropic) to help draft follow-up emails to businesses we have already contacted. To do that, the business's name, type of business, city, a contact's first name and our earlier emails to that business are sent to Anthropic. A person reads and sends every email. What you type into the forms on this site is not sent to an AI model.

Cookies and device storage

We do not use advertising or tracking cookies. If you change the site's language, a cookie named pfp_locale remembers your choice for one year. Your light or dark theme choice is kept in your browser's local storage under pfp-theme. Sign-in cookies are set only for our own staff when they log in to the admin area.

How long we keep it

We keep enquiries, quotes and client records for as long as we need them to reply, do the work and meet our tax and accounting obligations. You can ask us to delete yours sooner, as described below.

Your rights and how to request deletion

You can ask to see, correct or delete the information we hold about you, or tell us to stop contacting you, by emailing [email protected]. We will respond within 30 days. Deletion removes your details from our database and our inboxes. Payment records that we are required to keep for tax purposes are kept for that purpose only, and Stripe keeps its own records of payments under its own policy. If you are in the EU, the UK or California you have additional rights under GDPR and CCPA; the same email address handles those requests.

Children

This site is not directed at anyone under 13, and we do not knowingly collect information from children.

Updates

If this notice changes, the "last updated" date at the top of this page changes with it.