Privacy

Privacy Policy.

What information I collect, why I collect it, and the rights you have over it. Plain language, no legal sleight of hand.

Effective: April 13, 2026 · Last updated: May 4, 2026

1. Who runs this site

This website (willcwebdesign.com) is operated by Will C. Web Design, a sole proprietorship based in Las Vegas, Nevada, USA, run by Will C. Throughout this policy, "I," "me," and "my" refer to Will C. Web Design. "You" and "your" refer to the person using this site or corresponding with me about web design services.

2. Summary in 30 seconds

  • I collect your name, email, phone number, and the project details you send me when you submit the contact form.
  • I use that information to reply to your inquiry and build your site if you hire me. Nothing else.
  • I use Google Analytics and Microsoft Clarity to understand how visitors use this site. Both can be disabled by your browser.
  • I never sell your personal information. Ever.
  • You have the right to access, correct, delete, or opt out. Email [email protected] and I will handle it within 45 days.

3. Information I collect

3a. Information you give me directly

When you submit the contact form at /contact, I collect:

  • Name (required)
  • Email address (required)
  • Phone number (required) — used only to discuss your project; I will not enroll you in marketing texts or robocalls
  • Service of interest (landing page / full website / e-commerce / redesign / not sure)
  • Timeline
  • Current website URL (optional)
  • Project description — whatever you choose to share
  • How you heard about me (Google / referral / social / Fiverr / other)

If we continue working together, I may receive additional information to build your site — brand assets, photos, copy, access credentials to existing platforms, and billing information. That data is covered under our separate services agreement, not this website privacy policy.

3b. Information collected automatically

When you visit this site, the following is collected through standard web technologies:

  • Device and browser information — browser type, operating system, screen resolution, language
  • Traffic information — pages visited, time on page, referring site, approximate geographic location derived from your IP address (city-level, not precise)
  • IP address — truncated by Google Analytics for anonymization
  • Interaction information via Microsoft Clarity — mouse movements, clicks, scrolls, and anonymous session recordings used to improve site usability

3c. Cookies and tracking technologies

This site uses cookies — small files stored on your device — for two purposes:

  1. Essential: remembering that you accepted or rejected cookies (if a banner is shown).
  2. Analytics: Google Analytics 4 and Microsoft Clarity use cookies to distinguish unique visitors and sessions.

You can control cookies through your browser settings, disable JavaScript, or use browser extensions like uBlock Origin or Privacy Badger to block trackers. Nothing on this site breaks when you do.

4. Why I collect this information

I use the information above strictly for the following purposes:

  • To reply to your project inquiry within 24 hours, typically
  • To design a free homepage preview if you request one
  • To deliver the web design services we agree on in a separate contract
  • To improve how this website works by understanding which pages and features visitors use
  • To comply with legal obligations (tax records, responses to law enforcement if required)

I never use your information for automated decision-making, profiling, targeted advertising on other platforms, or machine-learning model training.

5. Who I share information with

I share minimum-necessary information with the following third-party service providers, each covered by their own privacy policies:

Outside of those service providers, I do not sell, rent, trade, or otherwise share your personal information with third parties, in any circumstance, ever. I may disclose information if legally compelled by court order, subpoena, or to defend against legal claims — and if that ever happens, I will notify you unless prohibited from doing so.

6. How long I keep information

  • Contact form inquiries — 24 months after last contact, then deleted unless you have become a client
  • Client project records — 7 years (for tax and legal records), then deleted
  • Analytics data — 14 months in Google Analytics, retained per Google's default retention; 90 days in Microsoft Clarity
  • Email correspondence — retained while the business relationship is active, plus 7 years for tax purposes

7. Your rights

Depending on where you live, you may have the following rights regarding your personal information. I honor these requests regardless of where you live — not just where they are legally required:

  • Right to know / access — ask what personal information I have about you and receive a copy
  • Right to correct — request correction of inaccurate information
  • Right to delete — request deletion of your information (exceptions apply where I am legally required to retain records, for example active client tax records)
  • Right to opt out of sale or sharing — I do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of. This policy is my formal notice that I do not sell or share.
  • Right to limit use of sensitive information — I do not collect sensitive personal information as defined under California law (no Social Security numbers, precise geolocation, racial/ethnic origin, religious beliefs, health, sexual orientation, or biometric data)
  • Right to non-discrimination — I will not deny service, charge different prices, or provide a different level of service because you exercised a privacy right
  • Right to appeal (if I deny a request) — you may appeal by replying to the denial email; I will respond to appeals within 45 days
  • Right to data portability — request your information in a portable, machine-readable format

These rights are granted explicitly to residents of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), and any other state with applicable privacy law. Residents of the European Economic Area, United Kingdom, and Switzerland have equivalent rights under GDPR and UK GDPR.

How to exercise your rights

Email [email protected] with the subject "Privacy Request" and state what you want. I will verify your identity (typically by confirming the email address on file), then respond within 45 days. No account, form, or phone call is required — a plain email works.

I provide at least two ways to submit requests: email (above) and the contact form.

8. Children's privacy

This site is not directed to children under 13. I do not knowingly collect information from anyone under 13. If you believe a child under 13 has submitted information to me, email [email protected] and I will delete it immediately.

9. International visitors

This site is operated from the United States. If you visit from outside the US, your information will be transferred to and processed in the United States, which may have different data protection laws than your country. By using this site, you consent to this transfer. For visitors from the EEA, UK, or Switzerland, I rely on the Standard Contractual Clauses and/or your explicit consent for transfer.

10. Do Not Track and Global Privacy Control

This site honors the Global Privacy Control (GPC) browser signal. If your browser sends a GPC signal, I treat that as a request to opt out of any sale or sharing of personal information — though as noted above, I do not sell or share personal information in any case. I do not respond to traditional "Do Not Track" headers because there is no industry consensus on what those require; I do respond to GPC.

11. Security

I take reasonable steps to protect your information — HTTPS encryption for all site traffic, strong passwords on the email account receiving form submissions, two-factor authentication on all service accounts, and limited access (only me). No internet transmission or electronic storage is 100% secure. If a data breach occurs and affects you, I will notify you via email within 72 hours of discovering it, consistent with GDPR timelines and exceeding what most US state laws require.

12. Third-party links

This site links to client portfolio sites, live blog articles, and other external resources. Those sites have their own privacy policies and practices — I have no control over them and accept no responsibility for their content or practices.

13. Changes to this policy

I may update this policy periodically. If I make material changes, I will update the "Last updated" date at the top of this page and, for clients and anyone who has previously submitted the contact form, send an email notice. Minor wording or formatting changes will be made without notice. Your continued use of the site after an update constitutes acceptance of the updated policy.

14. Contact

Questions about this policy, or to exercise a privacy right:

Will C. Web Design
Las Vegas, Nevada, USA
Email: [email protected]
Subject line: "Privacy Request"
Contact form: willcwebdesign.com/contact/

This policy was written in plain English, not auto-generated. If anything here is unclear, ask and I will rewrite the offending paragraph.