Privacy Policy

Northframe Web Studio ("Northframe," "we," "us") builds and maintains websites for small businesses. This policy covers the personal information we collect through northframewebstudio.com and how we handle it. We keep this simple on purpose: we collect the minimum we need to respond to you and run your maintenance plan, and nothing more.

What we collect

When you submit the contact form, we collect your name, email address, business name, selected plan (if any), and the message you send us. Submissions pass through a bot-verification check (Cloudflare Turnstile) before being stored securely in our database (Supabase), and are used only to respond to your inquiry and, if you become a client, to deliver the work.

If you subscribe to a maintenance plan, checkout is handled entirely by Stripe. We never see or store your card number, billing address, or other payment details — Stripe collects and processes that directly under its own privacy policy. We only receive confirmation that a subscription exists, which plan it's for, and the billing email tied to it.

We don't run analytics, ad trackers, or non-essential cookies on this site. Standard server logs (IP address, browser type, pages requested) are retained briefly by our hosting provider (Vercel) for security and reliability purposes, not for tracking individuals.

How we use it

• To reply to messages sent through the contact form
• To scope, build, and deliver a website you've hired us for
• To administer an active maintenance or care plan subscription
• To send service-related communication — billing confirmations, renewal notices, or updates about your site

We do not sell, rent, or share your information with third parties for marketing purposes. We don't add contact form submissions to a mailing list unless you separately ask us to.

Who else sees it

Two vendors process data on our behalf, each under their own security and privacy terms:

• Supabase — stores contact form submissions in a secured database. Writes happen only from our server after verification; the database is never written to directly from your browser.
• Cloudflare Turnstile — a bot-detection check that runs when you submit the contact form, to stop automated spam. Cloudflare receives your IP address and browser details as part of that check, under Cloudflare's own privacy policy.
• Stripe — handles maintenance plan billing and payment data in full. We never receive or store raw card details.
• Google Fonts — this site loads typefaces directly from Google's font CDN, which receives your IP address and browser details as part of that request, under Google's own privacy policy. We don't use Google Fonts for tracking or analytics.

How long we keep it

Contact form submissions are kept for as long as needed to respond to your inquiry or, if you become a client, for the life of that relationship plus a reasonable retention period for our records. You can request deletion at any time (see below).

Your rights

You can ask us to access, correct, or delete the personal information we hold about you at any time by emailing hello@northframewebstudio.com. We'll respond within a reasonable timeframe. Canceling a Stripe subscription is handled directly through the link in your billing receipt email, or by contacting us.

Security

Data in transit to and from this site is encrypted (HTTPS). Contact form submissions are verified and written by our server, not directly from your browser, and only we can access stored submissions through an authenticated connection.

Changes to this policy

If this policy changes in a meaningful way, we'll update the date at the top of this page. Continued use of the site after a change means you accept the updated policy.

Contact

Questions about this policy or your data — reach us at hello@northframewebstudio.com or +1 (513) 428-4236.