Your information,
handled with care.

Information you provide

When you contact me or start a project, I receive the information you choose to share. This may include your name, email address, phone number, business name, services, service area, design and domain preferences, messages, and project files such as photos or logos.

The brief distinguishes your private project-contact details from the business information intended for publication. Your approved website will make the intended business information and images public. A private preview is provided before launch so you can check them.

Please do not submit passwords, full payment-card details, government identification numbers, private customer records, or unrelated sensitive information through an enquiry or website brief. Only send images and other material you have the right to use.

Technical and service information

The website and its providers may record information needed to operate and protect the service, such as IP addresses, browser and device information, request times, visited paths, and security or error logs.

Essential cookies or similar browser storage may be used for sessions, form security, and checkout continuity. This website does not use advertising pixels or session-replay tools. It does not sell personal information or share it for targeted advertising.

A link to another website is not the same as an embedded service. Other sites and services have their own data practices when you use them.

Why information is used

Information is used to respond to enquiries, understand your requirements, prepare an order or quote, build and maintain your website, manage approved domain and email services, process payments and cancellations, provide support, protect the service, and meet applicable legal or recordkeeping obligations.

Project information is not automatically a marketing subscription. Any optional marketing signup is separate from buying a website or receiving service messages.

Payments

Stripe processes payments through its payment service. Payment-card information is entered into Stripe's payment interface, not an ordinary Wave Crash brief or contact form.

Wave Crash receives payment references and relevant order, billing, and status information. I do not store full card numbers or card security codes on the Wave Crash application server. Stripe stores the reusable payment method needed for the recurring care charges you authorize and processes information under its own terms and privacy notice.

Hosting, domains, email, and other providers

I use service providers where needed to run the business and deliver the work. These include Stripe for payments and Namecheap services for relevant hosting, domain, or email functions. Providers receive information needed for their role and may process it in locations described in their own policies. Their practices are described in the Namecheap Privacy Policy and Stripe Privacy Policy, available through the links on this page.

A live domain search sends the requested domain name to the lookup provider. Searching does not reserve or purchase it. Domain registration requires registrant and contact information, and some information may be disclosed or published where registry rules or law require it. Domain privacy services do not remove every disclosure requirement.

Information may also be shared when reasonably necessary to comply with law, respond to lawful process, protect people or systems, or address a legal claim. I do not sell customer briefs or contact lists.

AI-assisted tools

AI-assisted tools may be used to help with code, layouts, draft wording, customer support, and routine project administration. I remain responsible for the service and for reviewing or correcting work where appropriate.

Limited project information may be processed by external service providers, including AI-assisted tools, when reasonably needed to provide the service. I limit what is shared to the information needed for the task and do not intentionally send passwords, full payment-card details, or other credentials to AI services. If a project would require unusually sensitive nonpublic material to be handled by an external AI service beyond normal website or support work, I will explain that use and agree the arrangement first.

Files, previews, and security

I use reasonable safeguards appropriate to the information and service, including limiting access to project material and using encrypted connections where information is submitted. No storage or transmission method can be guaranteed completely secure.

Project files intended to remain private are not deliberately published as public website assets. Private project access should not be forwarded to people you do not authorize. Contact me promptly if you believe a project-access link or account has been exposed.

Some business photos may contain people, customer addresses, location information, or other personal details. Share only what is needed and what you are entitled to publish. Tell me about anything that should be removed before the preview is approved.

Retention

I keep information for as long as reasonably needed for the enquiry, project, ongoing service, security, or applicable legal obligations. Payment, agreement, and tax records may need to be retained after a project ends.

Cancelled-service exports are retained for the handoff period described in the Service Terms. Other active project material is deleted or de-identified when no longer needed, subject to lawful retention and normal backup cycles. A deletion request does not require removal of records that must lawfully be retained, and deleted material may remain in restricted backups until those backups expire.

Your choices and requests

You can ask for access to the personal information you have provided, correction of inaccurate information, or deletion where appropriate. Contact info@wavecrashwebdesign.com and describe the request. I may need enough information to verify that the request concerns your own data or a business you are authorized to represent.

I will explain any applicable limitation or legal retention requirement. Rights and response deadlines required by applicable law take precedence over this notice. No statement here is intended to reduce rights you may have under that law.

You can also ask me not to use particular material in a draft or public website. Information already published on your approved website may have been copied or indexed by others, which I cannot necessarily remove from their systems.

Children

The service is intended for adult business customers and is not directed to children under 13. I do not knowingly seek personal information from children under 13 through this website. Contact me if you believe such information has been submitted so I can review and address it.

Client websites and changes to this notice

A client's own website may collect information under that client's separate privacy notice. This notice does not automatically govern the client's business practices or replace the notice that business needs.

I will update this page when relevant practices change. Where a change requires notice or permission under applicable law, I will provide it before relying on the change. The date at the top identifies the current version.

For privacy questions, contact info@wavecrashwebdesign.com.