Privacy Policy

1. Introduction

Bluffton Websites is a freelance web development business operated by Dan Graham, based in Bluffton, South Carolina. We build fast, modern websites for small businesses in the Lowcountry.

This Privacy Policy explains what personal information we collect when you use blufftonwebsites.com, why we collect it, how we use it, and how we protect it. We've written this in plain English because we believe you should actually be able to understand it.

By using this website, you agree to the collection and use of information as described in this policy. If you have questions, email us at dan@blufftonwebsites.com.

2. Information We Collect

Information you provide directly

Information collected automatically

3. How We Use Your Information

We use the information we collect only for legitimate business purposes:

• To respond to contact form inquiries and website audit requests
• To provide web development services and communicate with you about your project
• To manage client portal accounts and support tickets (when applicable)
• To analyze website traffic and improve the performance and content of this site
• To send project-related communications (updates, invoices, deliverables)

We will never sell your personal information to third parties, and we will never use your contact details to send unsolicited marketing emails.

4. Third-Party Services

We rely on a small number of trusted third-party services to operate this website. Each service only receives the data necessary to perform its specific function.

5. Cookies & Tracking

Cookies are small text files that websites store on your device to remember information between visits. They're commonly used for analytics, preferences, and session management.

What we use cookies for:

• Google Analytics cookies — These track sessions and distinguish between unique visitors. They help us understand traffic patterns without identifying you personally.
• Vercel analytics — Vercel may use lightweight analytics cookies as part of its performance monitoring.

Your options: You can disable or delete cookies at any time through your browser settings. Most browsers let you block third-party cookies specifically, which will prevent Google Analytics tracking without affecting basic site functionality. You can also use Google's Analytics opt-out browser add-on to stop Analytics tracking across any site.

Note that disabling cookies may affect how some parts of this site function.

6. Data Security

We take the security of your data seriously and use industry-standard practices:

• This website is served entirely over HTTPS with encrypted connections
• Formspree encrypts form submission data in transit
• Supabase (for the future client portal) encrypts data in transit and at rest
• Client portal passwords will be hashed using industry-standard algorithms — we never store plain-text passwords

While we take every reasonable precaution, no method of internet transmission is 100% secure. We cannot guarantee the absolute security of data transmitted over the internet, but we commit to handling your data responsibly and notifying you promptly if a breach were ever to occur.

7. Client Portal Data

The client portal is a planned feature (Phase 2) that will allow clients to log in, submit support requests, track project status, and manage their account. This section describes how that data will be handled when it launches.

8. Data Retention

We don't hold onto your data indefinitely. Here's how long we keep different types of information:

• Contact form submissions — Retained for up to 2 years for business records, then deleted from Formspree.
• Google Analytics data — Retained per Google's default retention settings (14 months), after which it is automatically deleted.
• Client portal data — Retained for the duration of the active business relationship, plus 1 year after the relationship ends for record-keeping purposes.
• Vercel server logs — Retained per Vercel's standard log retention policy.

You can request early deletion of your personal data at any time by emailing dan@blufftonwebsites.com.

9. Your Rights

Regardless of where you're located, you have the following rights with respect to your personal data:

• Access — You can request a copy of the personal data we hold about you.
• Correction — You can request that we correct any inaccurate data we hold.
• Deletion — You can request that we delete your personal data. We'll comply unless we're required to retain it for legal or business reasons.
• Opt-out of analytics — You can opt out of Google Analytics tracking using Google's opt-out browser add-on.

To exercise any of these rights, email dan@blufftonwebsites.com. We'll respond within a reasonable timeframe.

10. Children's Privacy

This website and our services are intended for adults and businesses. We do not knowingly collect personal information from individuals under the age of 13. If you believe a child has submitted personal information through this site, please contact us at dan@blufftonwebsites.com and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time as our services evolve (for example, when the client portal launches). When we make changes, we'll update the "Last updated" date at the top of this page.

Your continued use of this website after changes are posted constitutes your acceptance of the updated policy. If you have concerns about a change, please reach out before continuing to use the site.

12. Contact

Have questions about this policy, want to request access to your data, or need to report a concern? Get in touch: