Privacy.

What we collect

Only what you deliberately type into a form on this site, which depending on the form may include:

• Your name and your business name
• Your email address and phone number
• Your Instagram handle or website address
• What you're looking for, in your own words
• If you sign our onboarding agreement: the plan you chose and your typed signature, as the record of what was agreed

Separately from forms, Google Analytics records ordinary visit information: the pages you view, roughly where in the world you are, and what browser and device you used. It does not tell us who you are.

We do not collect payment card details. If you pay us, that happens through Stripe and we never see or store your card number.

Why we collect it

To reply to you, to build the thing you asked for, and to invoice you if you become a client. That's it. We don't sell your information, rent it, or share it for advertising — not now and not ever.

Who else touches it

We use a small number of companies to run the business. They only ever get what they need to do their job:

• Supabase — the database where form submissions are stored
• Vercel — hosts this website and its server logs
• Resend — sends us the email that tells us you got in touch
• Stripe — handles invoices and payments if you become a client
• Google Analytics — tells us which pages get read and which get ignored
• Google Fonts — serves the typeface on this site, which means Google receives your IP address as part of that request

We may also disclose information if the law genuinely requires it.

Cookies

Google Analytics sets a small number of first-party cookies (named _ga and similar) so it can tell a returning visitor from a new one. They expire on their own, and they hold a random identifier — not your name, email or anything you typed.

You can refuse them. Block cookies in your browser settings, use private browsing, or install Google’s official opt-out add-on, and the site still works normally. We do not use cookies for advertising, and there is nothing here that follows you to other websites.

How long we keep it

Enquiries that don't turn into work: we delete them once they're clearly going nowhere, and in any case within about two years. Client records, signed agreements and invoices we keep for as long as we need them for tax and legal reasons — generally seven years.

Your choices

Email us and we'll act on it — you can ask us what we hold about you, ask us to correct it, or ask us to delete it. If you're in a place with formal data rights (for example California or the EU/UK), you have those rights and we'll honour them; we won't treat you differently for asking.

To make any of those requests, email hello@kestrelsites.com. We aim to respond within 30 days.

Content you send us

If you send us photos or video to build your site, we use it for that purpose and to show the finished work in our portfolio. It stays yours. Ask us to stop showing it and we will. See the terms for the detail.

Security, honestly stated

Your submissions sit in an access-controlled database, and our forms are write-only from the browser — a visitor can submit, but can't read anyone's data back. No system is perfectly secure and we won't pretend otherwise, but we don't hold card numbers or passwords, which is the material we'd least like to lose.

Children

This is a service for businesses. It isn't directed at children, and we don't knowingly collect information from anyone under 16. If you think we have, tell us and we'll delete it.

Changes, and how to reach us

If this policy changes we'll update the date at the top. For anything at all — questions, corrections, deletion — email hello@kestrelsites.com or write to Kestrel, Nashville, Tennessee, USA.