Back to the studio

Legal

Privacy Policy

What I collect through this site, why, how long I keep it, and what you can ask me to do about it. Short, because there genuinely isn't much of it.

Draft — not yet in force. This is a starting template, not legal advice. The highlighted values still need your details — particularly the providers you actually use — and it should be reviewed against the privacy law that applies to you. Remove this notice once that's done.

01Who Is Responsible for Your Data

This site is run by LEGAL NAME OR COMPANY, trading as Designs by Hunter Curtis, of BUSINESS ADDRESS. I decide how and why personal information on this site is handled — in data-protection language, I am the controller.

For anything in this policy, email hunter.curtisdesigns@gmail.com.

02What I Collect

Only what you actively send me. There are no tracking pixels, advertising tags or third-party profiling scripts on this site.

When You Use the Inquiry Form

  • Your name and email address — required, so I can reply.
  • Your business name and current website, if you give them.
  • What you need, your timeline and budget range, if you select them.
  • Whatever you write in the message, and how you found me.

When You Sign an Agreement

Your name, organization, address, email and phone; the name of whoever approves the work; your typed signature; and, as a record of the signature, the time you signed, your IP address and your browser. These are kept with the signed agreement.

When You Email Me Directly

Your address and whatever the message contains.

Technical Information

My host keeps standard server logs, which may include IP addresses, for security and troubleshooting.

Visit Counting

This site counts its own visits so I can see how many people find it and which pages they read. No cookies are set and nothing is stored in your browser. Each visit records the page, the site that referred you, your device type and your country. To count unique visitors, your IP address and browser are turned into a one-way code, salted with a secret that changes every day, so you can't be identified or followed from one day to the next. Your IP address itself isn't stored. Counts are kept for about thirteen months.

03Why I Use It, and on What Basis

  • To answer your inquiry. Taking steps at your request before entering a contract — you asked me to get in touch.
  • To carry out work for you. Performing our contract.
  • To keep records of quotes, invoices and tax. A legal obligation.
  • To keep the site secure and working. My legitimate interest in running it safely.

I do not sell your information, and I won't add you to a mailing list from an inquiry. If I ever start a newsletter you'll have to ask for it.

04Who It Reaches

Your information is handled by the services I use to run the studio. Each acts on my instructions:

  • Inquiries, client records and signed agreements — stored in a database run by Supabase, on behalf of this site.
  • Online payments — Stripe, which processes card and bank payments and stores payment details. Card numbers go straight to Stripe and never reach this site. Stripe also uses the information to prevent fraud, under its own privacy policy.
  • Email — EMAIL PROVIDER, where messages are received and stored.
  • Hosting — Vercel, which serves this site and keeps server logs.
  • Accounting — ACCOUNTING TOOL, for invoices and records.

Some of these may process data outside your country. Where that happens, it relies on the safeguards those providers have in place.

Otherwise I share nothing, except where the law requires it.

05How Long It's Kept

  • Inquiries that don't become projects — kept for PERIOD, then deleted.
  • Client project records — kept for the length of the project and PERIOD afterwards, so I can support the work.
  • Invoices and financial records — kept as long as tax law requires, currently PERIOD.

06Cookies

This site sets no cookies of its own and uses no advertising or analytics cookies. Nothing here follows you to other sites.

The only cookies here belong to the studio owner's own login, and are set only after logging in. Visitors never receive them. Visit counting, described above, uses no cookies at all.

If you pay online, you're taken to Stripe's own payment page, which sets its own cookies to process the payment and prevent fraud.

07Your Rights

Depending on where you live, you may have the right to:

  • Ask what personal information I hold about you, and get a copy.
  • Have inaccurate information corrected.
  • Ask me to delete it, where I have no continuing reason to keep it.
  • Object to or restrict how I use it.
  • Receive it in a portable format.
  • Withdraw consent, where consent is what I relied on.

Email me and I'll action it within N days. There's no charge, and I won't treat you differently for asking.

08Security

This site is served over HTTPS, and the services I use are reputable providers with their own protections. That said, no method of transmitting data over the internet is completely secure, so please don't send anything highly sensitive — passwords, card numbers, identity documents — through the inquiry form.

09Children

This site isn't aimed at children and I don't knowingly collect information from anyone under AGE. If you believe a child has sent me information, email me and I'll delete it.

10Complaints

If you think I've mishandled your information, tell me first — I'd rather put it right directly. You also have the right to complain to your data protection authority, which is REGULATOR.

11Changes to This Policy

If this policy changes, the new version appears here with an updated date below. Significant changes affecting existing clients will be sent by email.

Last updated: DATE · Version 1.0