Privacy Policy

1. Information We Collect

WebCraft Studios collects and processes personal data through multiple channels to provide our web development services and improve our website experience. The types of data we collect include:

1.1 Information You Provide Directly

When you engage with WebCraft Studios through our website, contact forms, email correspondence, or during project consultations, we may collect:

• Full name and professional title
• Business or organization name
• Email address and phone number
• Mailing address and billing information
• Project requirements, design preferences, and business goals
• Communications and correspondence records
• Payment and billing information processed through secure third-party processors

1.2 Information Collected Automatically

When you visit our website or use our services, certain information is collected automatically:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Device type and screen resolution
• Pages visited, time spent, and navigation patterns
• Referring URLs and search engine queries
• Log data including dates, timestamps, and error reports

1.3 Information from Third Parties

We may receive data from analytics providers, advertising partners, and social media platforms to improve our services:

• Analytics data from Google Analytics and similar services
• Social media interactions when you engage with our profiles
• Enrichment data from verified business databases

2. How We Use Your Data

We use the information we collect for the following legitimate business purposes:

2.1 Project Development

Your project information and communications are used exclusively for designing, developing, testing, and delivering your website or web application. This includes sharing relevant project details with our development team and quality assurance personnel.

2.2 Marketing & Communications

With your explicit consent, we may use your contact information to send you:

• Newsletters and industry updates
• Service announcements and special offers
• Invitations to webinars and events
• Case studies and portfolio updates

2.3 Service Improvement

Aggregate and anonymized data collected from website usage helps us understand how visitors interact with our services, allowing us to improve our user experience, fix technical issues, and develop new features.

3. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site usage, and support our marketing efforts. Below is a breakdown of the cookie categories we use:

3.1 Third-Party Cookies

We work with the following third-party services that may set their own cookies:

• Google Analytics — Website traffic analysis and user behavior tracking
• Google Workspace — Email and collaboration services
• Stripe/PayPal — Payment processing and fraud prevention
• LinkedIn, Twitter/X — Social media integration and sharing
• HubSpot — CRM and marketing automation platform

4. Data Sharing & Disclosure

WebCraft Studios does not sell your personal information. We share data only in the following circumstances:

4.1 Service Providers

We engage trusted third-party vendors who assist in operating our website and conducting our business. These providers have access to your information solely to perform tasks on our behalf and are obligated to protect your data:

• Hosting providers — Secure server infrastructure and data storage
• Payment processors — Transaction processing and billing
• Email service providers — Newsletter and communication delivery
• Development tools — Project management and collaboration platforms
• Analytics services — Website performance and user behavior analysis

4.2 Legal Requirements

We may disclose your personal data when required to do so by law or in response to valid requests by public authorities, including:

• In order to meet applicable legal obligations (tax, accounting, etc.)
• To enforce or apply our terms of service and other agreements
• To protect the rights, property, or safety of WebCraft Studios, our clients, or others
• In connection with a legal claim or proceeding

4.3 Business Transfers

If WebCraft Studios is involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you via prominent notice on our website of any such change in ownership or use of your personal data.

5. Data Security

WebCraft Studios implements industry-leading security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption — All data in transit is encrypted using TLS 1.3 protocol. Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls — Role-based access control (RBAC) ensures only authorized personnel can access personal data on a need-to-know basis.
• Infrastructure Security — Our servers are protected by firewalls, DDoS mitigation, and 24/7 intrusion detection systems.
• Regular Audits — We conduct regular security assessments, vulnerability scanning, and penetration testing.
• Data Minimization — We only collect and retain the minimum data necessary for our stated purposes.
• Employee Training — All team members undergo regular data protection and security awareness training.

6. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights regarding your personal data. WebCraft Studios is committed to honoring all valid data subject requests:

To exercise any of these rights, please contact us at privacy@webcraft.studio. We will respond to your request within 30 days. We reserve the right to verify your identity before fulfilling any request to protect against unauthorized access.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Client Project Data: Retained for the duration of the project plus 7 years for legal and accounting compliance.
• Website Analytics: Aggregated analytics data is retained for up to 26 months.
• Email Subscriptions: Retained until you unsubscribe or request deletion.
• Communication Records: Email and chat logs retained for up to 3 years.
• Payment Records: Financial data retained for 7 years per tax and accounting requirements.
• Job Applications: Application data retained for up to 2 years from date of application.

When data is no longer needed, it is securely deleted or anonymized so that it can no longer be associated with you.

8. Children's Privacy

Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a child under 16, we will take immediate steps to delete that information.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at privacy@webcraft.studio, and we will promptly remove such data from our systems.

9. International Data Transfers

WebCraft Studios operates globally and your data may be transferred to, stored, and processed in countries other than your own. When transferring personal data across borders, we ensure appropriate safeguards are in place:

• EU/UK Data Transfers: Standard Contractual Clauses (SCCs) are used for all transfers from the European Economic Area and United Kingdom.
• adequacy Decisions: Data is only transferred to countries recognized as having adequate data protection laws by the European Commission.
• Client Data: When we develop websites for clients, the content and data we handle is processed in accordance with the client's own privacy policies and data processing agreements.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes:

• We will post the updated policy on this page with a revised "Last Updated" date
• We will notify registered users via email at least 30 days before the change takes effect
• For material changes, we may provide a prominent notice on our website homepage

We encourage you to review this policy periodically. Your continued use of our services after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us through any of the following channels: