Privacy Policy
This policy explains what information we collect when you use this website, the Contact Us form, or the Client Portal, and what we do with it. We collect only what we need to respond to you and to run the services described here.
1. Information we collect
- Enquiry details (Contact Us form): name, company, email address, phone number (if you provide one), team size, and the message you write. This is the information you choose to send us.
- Client Portal accounts: if you create an account, we store your email address and password securely through our authentication provider. If you sign in with Google, Google shares your name, email address, and profile picture with us, as shown on Google's consent screen.
- Client Portal enquiries: the enquiries and requirements you submit through the portal, and the status updates our team writes about them, so you can track where your enquiry has reached.
- Team admin accounts: team accounts for the Admin Portal are created by us directly and are not open to public sign-up.
We do not ask for payment details, government IDs, or any other sensitive personal information through this website.
2. How we use your information
- To reply to your enquiry, usually within one business day, and to discuss automation work with you.
- To send you an acknowledgement email when you submit an enquiry, and to notify our team so your enquiry is not missed.
- To show you, in the Client Portal, the status of your own enquiries and who your relationship manager is, once one is assigned.
- To operate and improve this website and our portals. We do not sell your personal information, and we do not use it for advertising.
3. Where your information is stored and who processes it
Enquiries and portal data are stored in our database, provided by Supabase (hosted in the US West region), and emails are sent through Resend. Google processes sign-in information when you choose "Continue with Google". These providers process your information only to operate the services above, under their own privacy policies. No other third party receives your enquiry details unless you ask us to share them.
4. Access controls
- Visitors can submit an enquiry, but cannot read other people's enquiries.
- Client Portal users can see only the cases linked to their own email address.
- Admin Portal access is limited to our team accounts, and team members sign in with their own credentials.
5. Cookies and fonts
This website does not use advertising trackers. It loads fonts (Sora and Manrope) from Google Fonts, which may receive your IP address and browser information as part of serving those fonts, in line with Google's privacy policy. The Client Portal keeps your sign-in session only in your current browser tab; closing the tab signs you out.
6. How long we keep your information
We keep enquiry and case information for as long as needed to respond to you and to manage the working relationship that follows. If you would like your enquiry or account information deleted, contact us at the email address below and we will delete what we can, subject to any record we are legally required to keep.
7. Your choices and rights
You can ask us to correct, export, or delete your personal information, or to stop contacting you, by emailing us. We will respond to reasonable requests. You can also choose not to create a Client Portal account and simply contact us through the Contact Us form instead.
8. Changes to this policy
If we change how we handle your information, we will update this page and change the effective date above. Material changes will be reflected here before they take effect.
9. Contact us
For any question about this policy or your personal information, email us at hellotheadcraft@gmail.com.