Privacy Policy

What this covers

This policy describes what Golden Heart Web Design collects when you use goldenheartwebdesign.com, why, and what happens to it.

Information you give me

The contact form collects your name, email address, optional business name, the plan you're interested in, and your message. It is sent to my inbox and used to reply to you. It is not added to a marketing list and is not sold or shared.

Payment information

Payments are processed by Stripe. Card details are entered on Stripe's own hosted checkout and never touch this server — I never see or store a card number. What I do receive from Stripe is your email address, your subscription status, and which plan you chose, which I use to run your account.

Technical information

The web server keeps standard access logs — IP address, timestamp, requested page, browser — for security and troubleshooting. A session cookie is set to protect forms against cross-site request forgery. Your light/dark theme preference is stored in your own browser and never sent to the server.

Analytics

This site does not run third-party advertising or cross-site tracking. If analytics are added later, this policy will be updated before they go live.

How long it's kept

Contact messages are kept as long as they're useful for the work they relate to. Billing records are retained as long as tax and accounting rules require. Server logs rotate on the host's normal schedule.

Your choices

You can ask me what I hold about you, ask for it to be corrected, or ask for it to be deleted — subject to records I'm legally required to keep. Email tim@goldenheartwebdesign.com and I'll handle it personally.

Changes

If this policy changes, the "last updated" date at the top changes with it.