Privacy policy

Tillwork Studio ("we," "us," or "our") operates tillworkstudio.com and provides web design and digital services to local businesses. This Privacy Policy explains what information we collect, how we use it, and what choices you have.

By using our website or submitting information through any of our forms or communications, you agree to the practices described here. We are based in Berryville, Arkansas, and our services are directed primarily at small and local businesses in Northwest Arkansas and surrounding areas.

Information you give us directly

When you fill out our contact form, client intake form, or communicate with us by email or phone, we may collect:

• Your name and business name
• Email address and phone number
• Business location and industry
• Current website URL or social media links
• Project goals and design preferences
• Files you upload including logos and photos
• Any other information in written communications

Information collected automatically

When you visit our website, we may automatically receive:

• IP address
• General geographic location
• Browser and device type
• Pages visited and time on pages
• Referring URL

Information from third parties

We do not purchase or acquire personal data from third-party data brokers or advertising networks.

We do not use your information for behavioral advertising, retargeting, or any form of automated profiling.

We do not sell, rent, or trade your personal information to any third party.

Service providers we use

• Supabase — database and authentication
• Formspree — form submissions
• Lovable — website builder platform
• Google Workspace — email and file storage
• Payment processor — invoicing and payments

Legal requirements

We may disclose information if required by law, subpoena, or other legal process.

Business transfers

If Tillwork Studio is ever sold or merged, you will be notified before any transfer of personal information.

We use basic functional cookies to keep the site running and anonymized analytics cookies to understand traffic patterns. We do not use advertising or tracking pixels. You can control cookies through your browser settings at any time.

• Inquiry data: 12 months or duration of the project, whichever is longer
• Active client data: duration of agreement plus 3 years after termination
• Billing records: 7 years, per standard accounting regulations
• Uploaded files: duration of active service; deletable upon request within 30 days of cancellation

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your data
• Request a portable copy of your data
• Withdraw consent at any time
• Object to certain processing activities

We use encrypted connections (HTTPS/TLS), encrypted database storage through Supabase, access controls on internal systems, and reputable third-party platforms. No system is 100% secure, but we take reasonable measures to protect your information.

Our services are intended for adults operating businesses. We do not knowingly collect data from anyone under 13. If we learn we have, we will delete it.

Material changes will be communicated by email to active clients. Continued use of our services after changes take effect constitutes acceptance of the updated policy.