Privacy Policy
Whitewell Digital ("Whitewell Digital," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have. It applies to our website at whitewelldigital.com and any related pages, forms, and services we provide (together, the "Services").
By using our Services or submitting information to us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Services.
1. Who We Are
Whitewell Digital is a web design and digital services business based in Sacramento, California, United States. For the purposes of applicable data protection laws, Whitewell Digital is the "business" and/or "data controller" responsible for your personal information. You can reach us using the contact details in the "Contact Us" section below.
2. Information We Collect
Information you provide to us
When you contact us, request a quote, or use our Services, you may give us:
- Identity and contact details — such as your first and last name and email address.
- Project information — details you share about your business, your existing website, the services you are interested in, and the contents of any messages you send us.
- Correspondence — records of communications between you and us by email or form submission.
Information collected automatically
When you visit our website, a limited amount of technical information is collected automatically, primarily through standard server logs kept by our hosting provider:
- Device and usage data — such as your IP address, browser type, operating system, the referring page, the pages you view, and the date and time of your visit.
Our website does not use analytics, advertising, or tracking cookies, and we do not use analytics platforms such as Google Analytics. See the "Cookies and Analytics" section below.
We do not intentionally collect sensitive personal information (such as government identifiers, health, or financial account information) through our website, and we ask that you do not send such information to us through our forms.
3. How We Use Your Information
We use the information we collect to:
- Respond to your enquiries and provide quotes, proposals, and customer support;
- Provide, operate, maintain, and improve our Services and website;
- Communicate with you about projects, scheduling, invoices, and service updates;
- Monitor, maintain, and improve the performance and security of our website;
- Detect, prevent, and address security issues, fraud, or technical problems; and
- Comply with our legal obligations and enforce our terms and agreements.
4. Legal Bases for Processing
Where data protection laws such as the EU/UK GDPR apply, we rely on the following legal bases to process your personal information:
- Consent — where you have given us clear permission, for example by submitting our contact form.
- Performance of a contract — to take steps at your request before entering into a contract and to provide services you have engaged us for.
- Legitimate interests — to operate and improve our business and website in ways you would reasonably expect and that do not override your rights.
- Legal obligation — where we must process your information to comply with the law.
5. Cookies and Analytics
Our website does not use cookies for analytics, advertising, or tracking, and we do not use analytics platforms such as Google Analytics. Because we do not set non-essential cookies, our site does not display a cookie-consent banner.
Fonts and other visual assets used on our website are served directly from our own site rather than from third-party content delivery networks. As a result, simply loading our pages does not, by itself, transmit your information to outside font, advertising, or analytics providers.
6. How We Share Your Information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We may share information in the following limited circumstances:
- Service providers — trusted vendors who process limited personal information on our behalf, only to provide their services to us:
- Cloudflare Pages, our website hosting and content delivery provider, which processes visitor requests and keeps standard server logs (including IP addresses) as part of serving the site; and
- Web3Forms, which receives and delivers to us the messages you submit through our contact form.
- Legal and safety reasons — when required by law, subpoena, or legal process, or to protect the rights, property, or safety of Whitewell Digital, our clients, or others.
- Business transfers — in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this Privacy Policy.
7. Data Retention
We keep personal information only for as long as necessary to fulfil the purposes described in this Policy, including to provide our Services, maintain business records, resolve disputes, and comply with our legal obligations. When information is no longer needed, we securely delete or anonymize it.
8. Your Privacy Rights
California residents (CCPA/CPRA)
Notice at collection. We collect the categories of personal information described in Section 2 — identifiers (such as your name, email address, and IP address), internet or other electronic activity information, and the contents of communications you send us — for the purposes described in Section 3. We do not sell or share your personal information, and we do not use it for cross-context behavioral advertising or targeted advertising.
If you are a California resident, you have the right to: know what personal information we collect and how we use and disclose it; request access to and a copy of your personal information; request deletion of your personal information; request correction of inaccurate information; and not be discriminated against for exercising your rights.
EU/UK and other residents (GDPR)
Depending on where you live, you may have the right to access, correct, update, or delete your personal information; to object to or restrict certain processing; to data portability; and to withdraw consent at any time. Where processing is based on consent, withdrawing it does not affect the lawfulness of processing carried out beforehand.
To exercise any of these rights, email us at info@whitewelldigital.com (or use the contact details in Section 14). We will respond within the timeframe required by applicable law and may need to verify your identity before acting on your request. You also have the right to lodge a complaint with your local data protection authority.
9. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, loss, misuse, or alteration. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
10. Children's Privacy
Our Services are intended for businesses and adults. We do not knowingly collect personal information from children under 13 (or under 16 where a higher age applies). If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.
11. Third-Party Links
Our website may contain links to third-party websites or services that we do not operate. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies before providing them with any information.
12. International Visitors
We are based in the United States and process information there. If you access our Services from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes may be communicated through our website. We encourage you to review this Policy periodically.
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us:
This Privacy Policy is provided for general informational purposes and should be reviewed by qualified legal counsel and tailored to your specific business operations, legal entity, and the tools and service providers you actually use before being relied upon.