Legal
Privacy policy
01The short version
We collect what you send us so we can reply and build your website. We don't sell or share it for advertising, we don't use tracking cookies, and you can ask us to delete it at any time.
02What we collect
| Category | Examples | Where it comes from |
|---|---|---|
| Identifiers and contact details | Name, email address, business name | You, through the contact form or email |
| Project information | What you want built, budget, timeline, your current website, files and content you send us | You |
| Communications | Emails between us | You and us |
| Payment records | Amounts, dates, invoice details. Card details are handled by Stripe and never reach us. | Stripe |
| Technical data | IP address, browser type, pages requested, time of request | Your browser, automatically |
We don't ask for sensitive personal information (such as health data, government ID numbers or precise location). Please don't send it.
03How we use it, and why
- To reply to your enquiry and give you a quote. Because you asked us to (steps before a contract).
- To build, host and support your website, and to bill you. To perform our contract with you.
- To keep records for tax and accounting. Because the law requires it.
- To keep the service secure, prevent abuse and fix problems. Our legitimate interest in running a safe service.
We only email you about your enquiry or project. If we ever send a newsletter, it will be opt-in and every message will have an unsubscribe link.
04Who we share it with
We don't sell your personal information, and we don't share it for cross-context behavioral advertising. We use these service providers, who process data for us under contract:
- Railway: application hosting and database (United States).
- Cloudflare: email sending and routing, network security.
- Stripe: payments, if you pay online.
We may also disclose information if the law requires it, to protect people from harm, or as part of a sale or transfer of the business (you would be told).
05Sites we host for clients
For a website we build for you, you decide what it collects from your visitors, and you are responsible for your own privacy notice and for your visitors' rights. We process your visitors' data only to host the site, as your service provider. Visits are counted in aggregate; we don't build profiles of your visitors.
06Cookies
pagedock.app sets one cookie: a sign-in cookie for our admin area, which is strictly necessary. There are no analytics, advertising or tracking cookies. We honor Global Privacy Control signals, although we don't sell or share data in the first place.
07How long we keep it
- Enquiries that don't become a project: deleted within 12 months of our last message.
- Client project emails and files: for as long as we work together, plus 3 years so we can help with changes.
- Invoices and payment records: 7 years, for tax law.
- Server logs: up to 90 days.
08Security
Data is sent over HTTPS, stored with access limited to the studio owner, and handled by providers with established security programs. No system is perfectly secure. If a breach affects your personal information, we will tell you as the law requires.
09Your rights
Wherever you live, you can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct it;
- delete it;
- stop using it for a particular purpose.
Email [email protected] from the address we know you by. We'll confirm we've received your request within 10 business days and answer within 30 days (45 for California residents; we may extend once if a request is complex, and we'll tell you). We won't treat you differently for using these rights. You can use an authorised agent; we may ask them for proof of permission.
California residents have these rights under the CCPA, as amended by the CPRA. People in the EU, UK and EEA also have the right to data portability, to object, and to complain to their local data protection authority. Your data is stored in the United States; where required, our providers use standard contractual clauses for international transfers.
10Children
Our services are for businesses and adults. We don't knowingly collect information from children under 16. If you believe a child has sent us information, email us and we'll delete it.
11Changes
If we change this policy we'll update the date at the top. If we change how we use information you've already given us in a significant way, we'll email you first.
12Contact
Adam Proksch, doing business as Pagedock, Novato, California, USA. Email [email protected].