Privacy Policy

§ 01 Scope

This policy describes what Harbor Digital Studio (the studio, we, us) collects from visitors to harborstudio.io and from people who contact us through the site. It does not cover client engagements, which are governed by a separate written agreement.

§ 02 Information we collect

When you submit the contact form, we receive the name, email, phone number, inquiry type, company (optional), and message you provide.

We also record request metadata for spam prevention, record keeping, and understanding which channels lead people to the studio:

• IP address and coarse geolocation (country, region, city, timezone).
• Browser user agent and preferred language.
• The page you submitted from, the page that referred you, and the page you originally landed on.
• Any campaign parameters in the URL (for example, utm_source, utm_medium, utm_campaign, gclid).
• A submission timestamp.

We store a small amount of attribution data in your browser's localStorage so that if you return to the site over several visits before submitting, we can associate your inquiry with the original referring source. This data never leaves your browser until you submit the form.

A notice on the site lets you accept or decline this storage. If you decline, we clear any previously stored attribution values from your browser and do not write new ones. You can revisit the choice at any time by clearing your browser's storage for this site, which will prompt the notice again.

We do not use third-party analytics, advertising pixels, or cross-site tracking on harborstudio.io.

§ 03 How we use it

• To respond to your inquiry and follow up as needed.
• To keep a durable record of inbound contacts.
• To detect and prevent abuse of the contact form.
• To understand which channels and campaigns produce qualified inquiries, so we can spend our time on the right ones.

§ 04 What we do not do

• We do not sell your information.
• We do not add contact form submitters to any marketing list or newsletter.
• We do not share submission data with third parties beyond the service providers that store and deliver it (see § 05).
• We do not use cookies or pixels for advertising.

§ 05 Service providers

We use the following vendors to operate the site and the contact form. Each has its own privacy practices, which we are not responsible for but have evaluated:

• Vercel, hosting and edge delivery for harborstudio.io.
• Supabase, durable archive of contact form submissions.
• Postmark, transactional email delivery for form notifications.
• Fastmail, inbound mailbox for studio correspondence.

Data is transferred to these providers only as needed to deliver your message and keep a record of your inquiry.

§ 06 Retention

Contact form submissions are retained indefinitely so that we can reference prior conversations if you reach out again. You can ask us to delete your record at any time (see § 08).

Server logs and request metadata are retained for up to ninety days, after which they are rotated out by the hosting provider.

§ 07 Security

Data in transit is encrypted with TLS. Data at rest sits in managed services (Supabase, Postmark) that encrypt storage by default. Access to submission data is limited to the studio principal.

No system is perfectly secure. If we ever become aware of a breach involving your information, we will notify you at the email address you provided and describe what happened and what we are doing about it.

§ 08 Your choices

You can ask us to:

• Tell you what we have on file about you.
• Correct anything that is wrong.
• Delete your submission record, subject to legal record-keeping obligations.

To make a request, reach us through the contact form on the home page. Please include enough information for us to locate your record (typically the email address you originally used).

Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act or the EU General Data Protection Regulation. We will honor those rights to the extent they apply.

§ 09 Children

harborstudio.io is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has submitted information through the site, please contact us and we will delete it.

§ 10 Changes

When we update this policy, we will change the effective date at the top of the page. Substantive changes will be called out in a note on this page for at least thirty days.

§ 11 Contact

Questions about this policy, or requests related to your data, should be sent through the contact form. Mail can be directed to Harbor Digital Studio, Chocowinity, North Carolina.