Privacy policy

Tillwork Studio ("we," "us," or "our") operates tillworkstudio.com and provides web design and digital services to local businesses. This Privacy Policy explains what information we collect, how we use it, and what choices you have.

By using our website or submitting information through any of our forms or communications, you agree to the practices described here. We are based in Berryville, Arkansas, and our services are directed primarily at small and local businesses in Northwest Arkansas and surrounding areas.

Information you give us directly

When you fill out our contact form, client intake form, or communicate with us by email or phone, we may collect:

• Your name and business name
• Email address and phone number
• Business location and industry
• Current website URL or social media links
• Project goals and design preferences
• Files you upload including logos and photos
• Any other information in written communications

Information collected automatically

When you visit our website, we may automatically receive:

• IP address
• General geographic location
• Browser and device type
• Pages visited and time on pages
• Referring URL

Information from third parties

We do not purchase or acquire personal data from third-party data brokers or advertising networks.

We use Meta Pixel to measure website performance, understand which marketing efforts bring visitors to us, and show advertising to people who have visited our site or who resemble our existing clients. We do not make automated decisions that produce legal effects or similarly significant effects on you.

We do not sell, rent, or trade your personal information for money. We share data only in the following limited circumstances:

Service providers we use

• Supabase — database and authentication
• Formspree — form submissions
• Lovable — website builder platform
• Google Workspace — email and file storage
• Meta Platforms, Inc. We use Meta Pixel on our website. When you visit tillworkstudio.com, tap our phone number, or submit our contact form, Meta receives information about that action along with your IP address and browser information. If you submit our form, your email address and phone number are scrambled by your browser using a one way hash before they are sent, so Meta does not receive them in readable form. Meta uses this to measure our advertising and to help us reach other local business owners. Meta's handling of this data is governed by its own policy at facebook.com/privacy/policy
• Payment processor — invoicing and payments

Legal requirements

We may disclose information if required by law, subpoena, or other legal process.

Business transfers

If Tillwork Studio is ever sold or merged, you will be notified before any transfer of personal information.

Our website uses cookies, which are small text files stored in your browser, along with similar tracking technologies including the Meta Pixel.

Types of cookies and tracking we use

• Functional cookies. Necessary for the site to operate, such as remembering your form progress. These cannot be turned off without affecting how the site works.
• Advertising and measurement. We use Meta Pixel, which sets cookies and sends information about your visit to Meta Platforms, Inc. This includes which pages you viewed, whether you tapped our phone number, and whether you submitted our contact form. If you submit our form, your email address and phone number are scrambled using a one way hash in your browser before they are sent, so Meta receives them only in that scrambled form.

You can control cookies through your browser settings. You can also limit how Meta uses this information through your Facebook or Instagram ad settings at facebook.com/adpreferences, or by using a browser extension that blocks tracking scripts. None of this will prevent you from using our site or our services.

If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of sharing your information with advertising platforms.

• Inquiry data: 12 months or duration of the project, whichever is longer
• Client project data: 3 years after your site goes live, or 3 years after you cancel the on call plan, whichever is later.
• Billing records: 7 years, per standard accounting regulations
• Uploaded files: duration of active service; deletable upon request within 30 days of cancellation

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your data
• Request a portable copy of your data
• Withdraw consent at any time
• Right to opt out of advertising sharing. You can ask us to stop sharing your information with advertising platforms, and we will honor it.
• Object to certain processing activities

We use encrypted connections (HTTPS/TLS), encrypted database storage through Supabase, access controls on internal systems, and reputable third-party platforms. No system is 100% secure, but we take reasonable measures to protect your information.

Our services are intended for adults operating businesses. We do not knowingly collect data from anyone under 13. If we learn we have, we will delete it.

Material changes will be communicated by email to active clients. Continued use of our services after changes take effect constitutes acceptance of the updated policy.