Privacy Policy
Short version: we collect only what we need to reply to you and build your site, we don't sell it, and you can ask us to delete it at any time.
1. What we collect
We only collect information you hand us, plus basic technical data that any website receives automatically.
- Information you give us. When you request a free mockup or send a message, we collect your name, business name, phone number, email address, trade, service area, and anything you write in the message field.
- Information about your visit. Our hosting provider automatically logs standard technical data — IP address, browser type, device type, pages viewed, and the site that referred you. We use this to keep the site running and to understand roughly how many people visit.
We do not ask for or knowingly collect sensitive information such as Social Security numbers, government ID numbers, health information, or precise geolocation.
2. How we use it
We use your information to:
- Reply to your message and answer your questions.
- Build the free mockup you asked for.
- Prepare quotes, contracts, and invoices if you become a client.
- Provide ongoing service — hosting, updates, and support — for client sites.
- Keep our own site secure, working, and free of spam.
- Meet our legal, tax, and accounting obligations.
We do not send marketing email to people who only requested a mockup unless they ask us to. If we ever do start a newsletter, every message will have a one-click unsubscribe link.
3. Who we share it with
We do not sell your personal information, and we never have. We share it only with the service providers we need to run the business, and only to the extent they need it:
- Form processing. Messages sent through our contact and mockup forms are delivered through Formspree, which forwards them to our email.
- Email and file storage. Standard business email and cloud storage providers.
- Website hosting. The provider that serves this site and our clients' sites.
- Payment processing. If you become a client, an invoicing or payment provider handles your billing details. We never store full card numbers ourselves.
- Fonts. This site loads typefaces from Google Fonts, which receives your IP address as part of that request.
We may also disclose information if the law requires it, or if it's necessary to protect our rights, our clients, or someone's safety.
4. Cookies & analytics
This site does not set advertising or tracking cookies. It does not use cookies to build a profile of you across other websites.
If we add website analytics in future, we'll update this section to name the tool and explain what it measures before turning it on.
5. How long we keep it
We keep inquiry information for as long as it's useful to follow up — generally up to two years — and then delete it. Client records (contracts, invoices, and the material needed to run your site) are kept for the length of the engagement plus the period our tax and accounting obligations require, typically seven years. You can ask us to delete your information sooner; see below.
6. How we protect it
Every site we build and manage is served over HTTPS with a valid SSL certificate. We keep accounts behind strong, unique passwords with two-factor authentication where it's offered, and we limit access to the people who actually need it. No system is perfect, and we can't promise absolute security, but we take it seriously and we'll tell you promptly if something goes wrong that affects your information.
7. Your rights
Wherever you live, you can email us and ask to:
- See what information we hold about you.
- Correct anything that's wrong.
- Delete your information, unless we're legally required to keep it.
- Opt out of any marketing communication.
We'll respond within 30 days and we won't charge you or treat you differently for asking. Depending on where you live, you may have additional rights — for example, residents of California, Virginia, and Colorado have specific rights under state privacy laws, and residents of the EU and UK have rights under the GDPR, including the right to data portability and to lodge a complaint with a supervisory authority.
8. Client site data
If we build and manage a website for your business, we may process information that your customers submit through it — contact form entries, quote requests, appointment details. That information belongs to you. We act on your instructions, we don't use it for our own purposes, and we don't sell it. If you leave, we'll export it and hand it over.
You own your domain name and your content. We don't hold either hostage.
9. Children
This is a business-to-business service. It isn't directed at anyone under 18, and we don't knowingly collect information from children. If you believe a child has sent us information, email us and we'll delete it.
10. Changes to this policy
If we change this policy, we'll update the effective date at the top of this page. Material changes will be noted clearly. Continuing to use the site after a change means you accept the updated policy.
11. Contact us
Questions about privacy, or want your information deleted? Get in touch:
- True Shop Design — operated as a sole proprietorship by Huan Phan
- Email: huan@trueshopdesign.com
- Postal address available on request — email us and we'll provide it.
Or use the contact form and mark it "Something else."