This policy explains what information is collected when you use carterative.com, how it’s used, who handles it on my behalf, and the choices and rights you have over it. It applies to this website only. Client engagements are governed by the agreement signed for that project.

Information you provide. The contact form collects your name, email address, company, role, and a description of your project. The newsletter signup collects your email address. That’s all — no account creation, no payment information through this site.

Information collected automatically. Like nearly every website, the hosting infrastructure records standard server logs — IP address, browser type, pages requested, and timestamps — used for security and to keep the site running. This site does not use advertising cookies, cross-site tracking, or third-party analytics scripts.

To respond to your inquiry, scope and deliver the work you ask about, send the updates you signed up for, and operate and secure the site. Legal bases, where they apply: your consent, performance of a contract, and legitimate interest in running the studio.

Your information is never sold, rented, or shared with third parties for their own marketing. No targeted advertising, no data brokers.

A small set of service providers process data on my behalf, strictly to run this site: Vercel (hosting and infrastructure), Supabase (form submission storage), and Resend (email delivery). Each receives only what it needs to perform its function and is bound by its own data-processing terms.

Contact submissions are kept as long as needed to handle the inquiry and any resulting engagement, then for reasonable record-keeping. Newsletter emails are kept until you unsubscribe. You can request deletion of either at any time.

Depending on where you live — including under state privacy laws such as the California Consumer Privacy Act, and the GDPR if you’re in the EU or UK — you may have the right to access, correct, delete, or receive a copy of your personal information, and to opt out of certain processing. This site doesn’t sell or share personal information as those laws define it, so there’s nothing to opt out of on that front.

To exercise any right, email carter@carterative.com. I’ll verify the request and respond within the timeframe the applicable law requires (typically 45 days). If a request is declined, you’ll get the reason and can appeal by replying to that decision. You will never be treated differently for exercising a privacy right.

Every newsletter includes a way out — unsubscribe once and you’re out, no questions, honored promptly as required by CAN-SPAM. Transactional replies to your own inquiry aren’t marketing and don’t need a subscription.

This site is a business-services site and isn’t directed to children under 13. I don’t knowingly collect information from them; if you believe a child has submitted information, email me and it will be deleted.

Data in transit is encrypted (HTTPS sitewide), form submissions are validated and routed server-side so credentials never touch the browser, and access to stored submissions is limited to me. No method of transmission is 100% secure, but the surface area here is deliberately small.

If this policy changes, the new version is posted here with an updated date. Material changes to how existing information is handled will be flagged clearly on this page.

Questions about your data — or anything in this policy: carter@carterative.com. Carter Stoddard LLC, California, United States.