What data I collect

Contact and project information

When you use the Book a call form, I collect your name, email address, organization or project name, what you are building, and, if you choose to give them, a budget range and the name of the person who referred you. When you book a consultation or sign up for any of my services, I also collect any other details you share with me.

Spam protection

The form uses Cloudflare Turnstile to check that a real person is submitting it. Turnstile processes information about your browser and your request to make that decision. Cloudflare handles that data under its own privacy policy. I do not receive or store it, and I do not use browser fingerprinting.

IP addresses

Your IP address is used only for the moment it takes to process a form submission: to limit how many requests one connection can send, and to pass to Turnstile for the spam check. I do not store your IP address or add it to the email I receive.

Website hosting

This website is hosted on Cloudflare. Like any web host, Cloudflare processes technical information such as IP addresses to deliver pages and protect the site from attacks, under its own privacy policy. This website uses Cloudflare Web Analytics to count page views and measure how fast pages load. It does not use cookies, does not fingerprint your browser, and does not track you across other sites. Cloudflare processes this data under its own privacy policy. There are no advertising trackers on this website.

Payment information (subscription apps)

For my subscription-based applications, billing information such as credit card details is collected and processed securely through my third-party payment processor, Stripe. I do not store your full card number on my servers.

Account information (subscription apps)

When you create an account in one of my subscription apps, I collect your email address, name, chosen password (hashed), and any profile details you provide.

How I use your data

Form submissions

When you submit the Book a call form, your submission is sent to me as an email through Resend, an email delivery service. The website itself does not store your submission in a database. The email stays in my inbox so I can reply to you and keep a record of our conversation.

Web development services

I use your contact and project information to respond to inquiries, provide project quotes, schedule consultations, deliver contracted services, and send relevant updates about your project. I may also send occasional marketing emails, and you can opt out at any time.

Subscription applications

For my subscription apps, I use your data to create and manage your account, process payments, deliver the features of the app, send billing receipts and renewal reminders, and provide customer support.

Data sharing and third parties

I do not sell your data

I will never sell, rent, or trade your personal information to third parties for their marketing purposes.

Service providers

I share data only with service providers that help me operate my business: Cloudflare (website hosting, Turnstile spam protection and Cloudflare Web Analytics), Resend (email delivery for the contact form), Stripe (payment processing), and cloud hosting providers for my applications. Each processes data under its own privacy terms.

Legal requirements

I may disclose your information if required to do so by law, court order, or government authority, or if I believe disclosure is necessary to protect the rights, property, or safety of Greggs Development, my clients, or others.

Cookies and tracking

What this website uses

This website does not use advertising or analytics cookies. Cloudflare may set strictly necessary cookies to protect the site and to run the Turnstile check on the Book a call form.

Your choices

You can control or disable cookies through your browser settings. Disabling them may stop the Book a call form from working, in which case you can email me directly.

Subscription app terms

Billing and payments

Subscription fees are billed on a recurring basis (monthly or annually) as selected at sign-up. All payments are processed securely through Stripe. By subscribing, you authorize me to charge your payment method on each renewal date.

Cancellation

You may cancel your subscription at any time from within your account settings. Upon cancellation, you retain access until the end of your current billing period. I do not offer refunds for partial billing periods unless required by law.

Data after cancellation

After cancellation, your account data is retained for 30 days to allow for reactivation. After 30 days, your data is permanently deleted from my systems unless I am required by law to retain it longer.

Separate business notice

My subscription-based applications are separate products from my web development services. Data collected in one is not shared with or used by the other unless you have explicitly engaged both and consented.

Your rights

Access and portability

You have the right to request a copy of the personal data I hold about you. I will provide this in a commonly used, machine-readable format upon verified request.

Correction

You may request that I correct any inaccurate or incomplete personal information I hold about you.

Deletion

You may request that I delete your personal data. I will honor this request unless I am required to retain certain data by law (for example, financial records) or it is necessary to complete a transaction you requested.

Opt out of marketing

You can opt out of marketing emails at any time by clicking the unsubscribe link in any email I send, or by contacting me directly. You will still receive transactional emails related to active services.

Data security

How I protect your data

I use industry-standard security measures including TLS encryption for data in transit, secure cloud infrastructure with access controls, encrypted storage for sensitive data, and regular security reviews. Payment data is handled exclusively by PCI-DSS compliant processors.

No guarantee

While I take security seriously and use reasonable safeguards, no method of transmission over the internet or electronic storage is 100% secure. I cannot guarantee absolute security, but I commit to notifying affected users promptly in the event of a data breach.

GDPR and CCPA privacy rights

GDPR rights (EU and EEA users)

If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR): the right to access a copy of your personal data; the right to rectification of inaccurate or incomplete data; the right to erasure (the right to be forgotten); the right to restrict processing; the right to data portability; and the right to object to processing based on legitimate interests or direct marketing. You also have the right to lodge a complaint with your local data protection authority.

CCPA rights (California residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights. The Right to Know: you may request that I disclose the categories and specific pieces of personal information I have collected about you, the sources, the business purpose, and the third parties with whom it is shared. The Right to Delete: you may request that I delete personal information I have collected, subject to certain exceptions. The Right to Opt-Out of Sale: I do not sell your personal information to third parties. The Right to Non-Discrimination: I will not discriminate against you for exercising any of your CCPA rights.

How to submit a request

To exercise any of the rights above, email me at greggsdevelopment@gmail.com with the subject line "Privacy Rights Request." Include your full name, the email address associated with your account or interaction, your location (EU or California), and a description of the right you wish to exercise. I will verify your identity before processing your request and respond within 30 days (GDPR) or 45 days (CCPA) of receipt.

Authorized agents

California residents may designate an authorized agent to submit a CCPA request on their behalf. I will require written proof of authorization and may still contact you directly to verify your identity before fulfilling the request.

Contact me about privacy

Privacy questions or requests

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a privacy concern, email me at greggsdevelopment@gmail.com. I aim to respond to all privacy requests within 5 business days.