Privacy Policy

What we collect

There are only two ways we end up with information about you: you send it to us on purpose, or it is recorded automatically as part of serving you the page.

When you submit the contact form, we receive the name you type, your email address, the project type you select, an optional budget range, and whatever you write in the message field. Those fields are for scoping a project. Please do not put account numbers, passwords, or confidential documents into them.

If you email us directly, we have your address and whatever your message contains, for as long as it stays in the inbox.

Automatically, our hosting provider records ordinary request information: IP address, browser and device type, the page requested, the referring page, and a timestamp. Your IP address is also held briefly in memory to rate-limit the contact form so it cannot be used as a spam relay. That rate-limit record is never written to a database and disappears when the server restarts.

We do not ask for, and do not want, payment card numbers, government identifiers, health information, or precise location data.

How we use it

Contact form submissions are used to reply to you and to scope the work you asked about. That is the whole purpose. You will not be added to a mailing list because you asked a question.

Automatically collected information is used to keep the site online, diagnose errors, and understand which pages people actually read so we can write better ones.

We do not sell personal information, rent it, or hand it to advertisers. There is no advertising network, retargeting pixel, or data broker relationship attached to this site.

Analytics and performance measurement

This site uses Vercel Analytics and Vercel Speed Insights. Both are privacy-friendly by design: they do not set cookies for tracking, do not fingerprint your device to follow you between websites, and report in aggregate rather than per person.

What we can see is that a page received a certain number of views, and that it loaded at a certain speed on real devices. What we cannot see is that a particular individual visited a particular sequence of pages.

There is no Google Analytics, no Meta pixel, and no advertising tracker on this site.

Who else handles your information

We keep the list of companies that touch your data as short as we can, and each one is here because the site needs it to function.

Vercel hosts the site, delivers the pages, keeps server logs, and provides the analytics described above. Resend delivers the notification email generated by the contact form. Neon stores contact form submissions in the database behind our internal inquiry inbox. Our own email provider holds the resulting message the same way it holds any other email we receive.

Each of these processes information on our behalf under its own terms and privacy policy. We share the minimum needed for the provider to do its job, and none of them are permitted to use what you sent us for their own marketing.

We may also disclose information where the law genuinely requires it, or where it is necessary to investigate abuse of the site. If that ever happens we will tell you unless we are legally prevented from doing so.

Cookies

The public pages of this site do not set cookies to track you, profile you, or serve advertising.

The only cookie the site sets is a session cookie in the private admin area, which exists solely to keep the studio signed in while managing inquiries and projects. Visitors never encounter it.

If that ever changes, this policy will be updated before the change goes live, not after.

How long we keep it

Contact form submissions stay in our email and in the internal inquiry inbox for as long as they are useful to the conversation and to our record of what work was discussed. Inquiries that never became a project are cleared out periodically.

Server logs and aggregate analytics are retained on our hosting provider’s standard schedule, which we do not control and which is measured in a short window rather than indefinitely.

If you would rather we not keep your submission at all, say so and we will delete it. See the section on your choices below.

How your information is protected

The site is served over HTTPS. Contact form input is validated and sanitized before it is stored or emailed, the form is rate-limited against automated abuse, and the internal inquiry inbox sits behind an authenticated area that only the studio can reach.

No method of transmitting information over the internet is completely secure, and we are not going to claim otherwise. What we can say is that we collect little, keep it in few places, and do not pass it around.

Your choices and your rights

Depending on where you live, you may have the right to ask what information we hold about you, to correct it, to receive a copy, or to have it deleted.

You do not need to know which law applies to you in order to ask. Email elementwebco@gmail.com and tell us plainly what you want done. We will take reasonable steps to confirm you are who you say you are, and then do it.

There is no charge for this, and asking will not change how we treat you or affect a project we are working on together.

Children

This site is written for business owners and is not directed at children. We do not knowingly collect information from anyone under 13.

If a child has sent something through the contact form, email us and it will be deleted.

Changes to this policy

When this policy changes, the "last updated" date at the top of the page changes with it. Meaningful changes — new information collected, a new company handling it — will be described rather than quietly folded in.

Contact

Questions about this policy, or a request about your information, go to elementwebco@gmail.com. That address reaches the founder, Sahil Sandhu, directly.

Element Web Company operates out of Kalamazoo, Michigan, and works with clients across Southwest Michigan and nationally. We do not publish a mailing address on this site; email is the fastest and most reliable way to reach us.