Privacy Policy

Who we are

Deep Development and Design (“we”, “us”, “our”) is a web design and development studio based in Oakdale, Pennsylvania. This policy covers information we collect through this website, and it’s written to describe what the site actually does rather than what a template assumes it does.

If you’re a client, work we do for you is also covered by our written agreement with you. This page is about the website.

The short version

• We set no cookies and load no third-party tracking scripts.
• We never store your IP address, only a one-way hash of it.
• We never sell your information, and we don’t share it for advertising.
• If your browser asks us not to track you, we record nothing at all.

The detail follows.

What we collect

Information you give us. When you contact us through the site, by email or by phone, we collect what you choose to send — typically your name, email address, phone number and whatever you tell us about your project. If you sign up for our newsletter, we collect the email address you enter and nothing else.

Information collected when you submit a form. Along with what you type, we record the page you submitted from, the site that referred you, and your browser type. We also store a one-way hashed version of your IP address — used to limit spam, and not reversible back to your address. We do not store raw IP addresses.

Information collected automatically. We count page views using our own software, running on our own servers. There are no advertising pixels and no third-party tracking scripts of any kind. For each page view we record:

• the page you looked at, and the site that linked you to it, if any
• whether you’re on a phone, tablet or desktop
• the approximate area your visit came from — country, region or state, and nearest city, worked out from your IP address at our host’s edge. We never store your IP address itself, and the coordinates we keep are rounded to roughly 11 kilometers, which is enough to place a dot on a map and not enough to place you at an address
• if you arrived from an advert or a tagged link, which campaign it was — this comes from the link you clicked, and we read only the specific campaign tags (utm_*) and the advertising platform’s own click reference. The rest of the web address you arrived on is discarded and never reaches us, because addresses sometimes carry personal details that were typed into them

We also store a short code that lets us tell roughly how many different people visited on a given day. That code is rebuilt from scratch every day and cannot be matched to the previous day’s, so it can’t be used to follow you over time, and it isn’t linked to your name, your email, or anything you submit. It’s derived from your IP address and browser using a one-way hash — we never store your actual IP address.

If your browser sends a “Do Not Track” or Global Privacy Control signal, we record nothing at all. Traffic we can identify as automated — search engine crawlers and the like — is discarded too.

What we don’t collect

We think this is as important as the list above. We do not collect or store:

• your IP address in usable form
• payment card details — this site takes no payments
• any special category information, such as health, biometric or political data
• anything at all from visitors we can tell are under 13 (see below)

What we do with it

• Reply to your enquiry and provide the services you ask for
• Send information you’ve specifically requested, such as the newsletter
• Understand and improve how the site performs
• Detect and prevent spam and abuse
• Meet our legal, tax and accounting obligations

We do not sell your personal information, and we do not share it for advertising or profiling. We share it only with the service providers listed below who help us run the site, or where we’re required to by law.

Where the law requires a legal basis for handling your information, ours is your consent when you submit a form or subscribe, our legitimate interest in responding to enquiries and understanding how the site performs, and our legal obligations for records we have to keep.

Cookies and tracking

This site sets no cookies. It stores nothing on your device — no cookies, no local storage, nothing that persists after you close the tab. It loads no advertising scripts, and nothing on it can follow you to another website.

That’s why you haven’t been shown a cookie banner. The usual reason a site needs one is that it’s storing an identifier on your device or handing your visit to a third party such as Google Analytics. We do neither. The page-view counting described above is deliberately built to avoid it: our own software, our own database, and an identifier that expires nightly and never leaves our systems.

If we ever add something that does require consent — Google Analytics on a site running Google Ads, for instance — you’ll be asked before it runs, and this page will say so first.

Who else touches it

Form submissions and page-view records are stored in a database hosted by Supabase. Notification emails are sent through Resend. The site itself is served by Cloudflare, which is also where the approximate location of a visit is worked out. All three act as processors on our behalf, under contract, and do not use your information for their own purposes.

Some of these providers may process data outside your country, including in the United States. Where that happens, it’s covered by the standard contractual protections those providers offer.

How long we keep it

• Enquiries — as long as needed to respond and to keep a record of the relationship, reviewed at least annually.
• Newsletter signups — until you unsubscribe.
• Page-view records — 13 months, long enough to compare a month against the same month last year, and no longer.
• Hashed IP values — kept only as part of the records above, and never resolvable back to an address.

Your choices and rights

You can ask us to:

• give you a copy of the information we hold about you
• correct it if it’s wrong
• delete it
• stop using it for a particular purpose
• unsubscribe from the newsletter, using the link in any issue

Email us using the details at the bottom of this page and we’ll respond within 30 days. We won’t charge you for it, and we won’t treat you differently for asking.

Depending on where you live you may have further rights — for example under the GDPR in the UK and EU, or under state privacy laws in the United States including California. We apply the rights above to everyone who asks, wherever you live, because maintaining two standards isn’t worth it. If you’re in the UK or EU and you’re unhappy with how we’ve handled your information, you also have the right to complain to your local data protection authority.

Children

This site isn’t directed at children, and we don’t knowingly collect information from anyone under 13. If you believe a child has sent us information, contact us and we’ll delete it.

Security

We take reasonable technical and organizational measures to protect information in our care. The site is served over HTTPS, enquiries are stored in an access-controlled database, and IP addresses are hashed rather than stored. No method of transmission over the internet is completely secure, though, and we can’t guarantee absolute security.

Changes

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. If a change materially affects what we collect or what we do with it, we’ll say so here rather than change it quietly.

Contact

Questions about this policy, or about the information we hold, can be sent to Joey@deepdevelopmentanddesign.com or (412) 520-3337. We’re based in Oakdale, Pennsylvania.