Legal

Privacy Policy

What Glen Rock Web Studio collects when you visit this site, send a message or start a website with us, why we collect it, and how to see, correct or delete it. Plain English, no surprises.

1. Who we are

Glen Rock Web Studio ("we", "us") designs, hosts and looks after websites for small businesses. This website, glenrockwebstudio.com, and the forms on it are run by us. If you have a question about this policy or about your information, email kurtis@glenrockwebstudio.com and a person will answer.

2. What we collect

When you browse. We do not run analytics or advertising trackers on this site, and it sets no tracking cookies. Our hosting provider processes your IP address and browser details in order to deliver pages and block abuse, under its own privacy policy. We do not use that information to identify you.

When you arrive from an ad or a referral link. Some links to this site carry a Google ad click ID, a client's referral code or campaign tags (the part of the address after the question mark). If yours did, your browser keeps them for up to 90 days and sends them to us only if you send a message or start a website. We store them with what you send, so we know which ads and referrals bring in work. If you only read the site, nothing is sent.

When you send a message. Your name, email address, phone number, your message and the page you sent it from.

When you start a website. The form at Start your website asks for your name, business name, email and phone, and, if you want to say, how you heard about us. If you carry on, it asks about your business: services, hours, story, reviews, photos, logo and any files you choose to upload. Nothing beyond the first four fields is required. The form saves as you go, so what you type is stored on our server against a private link before you press submit, and we email that link to you so you can pick up where you left off.

When you become a client. Your billing contact and payment history. Card details go straight to Stripe, our payment processor; we never see or store your full card number.

When we correspond. We keep the emails and messages between us, like any business does.

3. How we use it

To answer you, put together your proposal and build your site.
To host and maintain your website, and to make the changes you ask for.
To send you a short set of emails about a form you started: a link to resume it and, if you do not finish, up to two reminders. Tell us to stop and we will.
To bill you and keep our books.
To keep the site and our systems safe, for example by filtering spam.
To learn which ads and referrals bring us clients. If you came from one of our Google ads and later sign up, we may report that click to Google Ads using only the click ID, the date you signed up and the plan price. We never send Google your name, email or phone number.
To run our referral program: your first month free if a client referred you, and a free month for the client who did.

We do not sell or rent your information, we do not give your name or contact details to advertisers, and we do not add you to a marketing list.

Phone. If you give us your phone number, we may call you about your inquiry or your website, for example to answer a question or to follow up. We do not send automated or marketing text messages. Tell us if you would rather not be called and we will keep to email.

4. Drafting help from AI

The website form has a button that helps you write an answer. When you use it, the text in that field and the rest of what you have filled in are sent to OpenAI to draft a suggestion, and the draft comes back to you to edit or discard. When a message arrives through the contact form we may ask the same service to draft a reply, which we read and edit before anything is sent, and we use it to sketch logo ideas from a business name and industry. Under OpenAI's API terms, what is sent this way is not used to train their models. If you would rather nothing about your business went to an AI service, skip the writing help and tell us when you get in touch.

5. Who else sees it

We are a one-person studio, so the only people who see your information are us and the services we use to run the business:

Hosting and storage (Cloudflare): the site, its form data and your uploads.
Email (Google Workspace and Resend): the emails between us.
Drafting help (OpenAI): helps us draft text and artwork from the information you give us.
Business listings (Google): when you start a website we may look up your business's public listing to fill in details such as your address, hours and reviews.
Code hosting (GitHub): your website's files, and the details they are built from, are kept in a private repository.
Notifications (Discord): a private channel only we can read, where new messages and form submissions are posted so we see them quickly.
Domain registrars: registering a domain requires a registrant name, address, email and phone. We use the registrar's privacy protection where it is offered so those details are not published.
Payment processing (Stripe): handles your card and billing details under its own policy.
Advertising (Google Ads): only if you came from one of our Google ads and become a client, the ad click ID, the date you signed up and the plan price, so we can see which ads work. Never your name, email or phone number.

Phone numbers are never shared with or sold to third parties or affiliates for their own marketing or promotional purposes.

Each of these providers works under its own privacy policy and only for the purpose above. We would also share information if the law required it or to protect someone's safety or our rights.

6. Cookies and storage on your device

This site sets no tracking cookies. It uses your browser's local storage for small conveniences: your light or dark theme choice, a notice you have closed and, if you start the website form, a copy of your progress and your private resume link so the form can pick up where you left off in the same browser. If you arrive from an ad or a referral link, it also keeps that link's ad click ID, referral code and campaign tags for up to 90 days, as described above. The admin area, which only we use, sets a login cookie. You can clear all of this in your browser settings and the site keeps working.

7. How long we keep it

Messages and website forms: while we are in touch about them. If we end up working together, for as long as you are a client and then for as long as tax and business records require. If we do not, you can ask us to delete them at any time and we will.
Uploads (photos, logos, documents): while we are building and running your site, and deleted with the rest when you ask.
Your website: while you are a client. After a site comes down we keep a backup for 30 days in case you change your mind, then delete it.
Our activity log: a short internal note of each event, for example that a form was submitted on a given day and by whom. Deleting a lead or message removes its content, uploads and any pending emails; the short log line stays so we can account for what happened.

8. Your rights

You can ask us at any time to show you what we hold about you, correct it, delete it, send you a copy, or stop emailing you. Email kurtis@glenrockwebstudio.com and we will answer within 30 days, usually much sooner. We will never treat you differently for asking.

Depending on where you live, laws such as the GDPR (EU and UK) or the CCPA (California) may give you further rights, including the right to complain to your local data protection authority. We do not sell personal information. The only thing we pass to an advertising service is the Google Ads click report described above, and if you would rather we left you out of it, tell us and we will.

9. Websites we build for clients

When you visit a website we built for one of our clients, that business decides what its site collects and is responsible for its own privacy policy. We host the site and handle its form submissions on the business's behalf and on its instructions, and we do not use that information for anything else. We do not add analytics or advertising trackers to a client's site unless the client asks for them.

10. Children

This site is for business owners and is not directed at children. We do not knowingly collect information from anyone under 13. If you believe we have, email us and we will delete it.

11. Security

Every page and form on this site is served over HTTPS. Your information is stored with our hosting provider, access to it is limited to us behind a password-protected admin area, and uploaded files are served from links that cannot be guessed. No system is perfectly secure, so if we ever learn of a breach that affects you we will tell you promptly and explain what happened.

12. Changes and contact

If we change this policy we will post the new version here with a new "last updated" date, and if the change matters to our clients we will email them. Questions, requests and complaints all go to kurtis@glenrockwebstudio.com.