Privacy Policy

1. Who We Are

Pearl River Design is a website design and hosting service based in Pearl River, New York. We build and host websites for small businesses and contractors in the Rockland County area and surrounding regions.

2. What Information We Collect

From the contact form on pearlriverdesign.dev:

• Your name
• Your business name
• Phone number
• Email address
• Services you are interested in

From the client intake form (Google Form) when you become a client:

• Business name and owner name
• Phone number and email address
• Business location and service area
• Services offered
• Years in business
• Customer reviews you provide for your website

We do not collect payment card numbers or bank account information through our website or forms.

3. How We Use Your Information

We use the information you provide to:

• Contact you about your website project
• Build and deploy your website
• Send transactional emails about your site (confirmation, launch notice, updates)

We do not sell your personal information to third parties. We do not use your information for targeted advertising.

4. Third-Party Services

We use the following services to operate our business. Each processes data on our behalf and has its own privacy policy:

• Google Forms (Alphabet Inc.) — client intake forms
• Zapier — workflow automation between services
• Vercel — website hosting and deployment
• Resend — transactional email delivery
• Pexels — stock photography for client sites

Some of these services may process data outside of New York State or the United States. By using our services, you acknowledge that your information may be transferred internationally as part of normal operations. All third-party providers we use maintain reasonable data security practices.

5. Data Security — NY SHIELD Act Compliance

Pearl River Design maintains reasonable safeguards to protect the personal information we collect, consistent with the requirements of the New York SHIELD Act (NY General Business Law § 899-bb).

Our security program includes:

Administrative safeguards: We limit access to personal information to those who need it to operate our business. We review our data practices periodically.

Technical safeguards: We use HTTPS on all our sites. We do not store raw form submissions on public servers. API keys and secrets are stored as environment variables, not in code.

Physical safeguards: We do not maintain physical records of client personal information. All data is stored with cloud providers that maintain industry-standard physical security.

In the event of a data breach affecting your personal information, we will notify affected individuals in accordance with New York law.

6. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your personal information
• Opt out of any future communications from us

To exercise any of these rights, email jackson@pearlriverdesign.dev with your request. We will respond within 30 days.

7. Your Website Content

When we build your website, the information you provide — including your business name, phone number, services, and customer reviews — is published publicly on your site. You are responsible for ensuring that any content you submit, including customer reviews, was provided with the reviewer's knowledge and permission.

8. Data Retention

We retain your contact and project information for as long as we have an active business relationship with you, or as required by law. When you request deletion, we will remove your information from our active systems within 30 days.

9. Cookies

Our marketing site (pearlriverdesign.dev) does not use tracking cookies or behavioral advertising cookies. Client websites we build do not include analytics or tracking by default.

10. Children's Privacy — COPPA Compliance

Our services are not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has submitted information through our site, contact us at jackson@pearlriverdesign.dev and we will delete it promptly.

11. CAN-SPAM Compliance

Any emails we send in connection with your project are transactional in nature. If we ever send promotional communications, they will include a clear way to opt out. We comply with the federal CAN-SPAM Act.

12. Changes to This Policy

We may update this policy as our business changes. When we do, we will update the “Last updated” date at the top. Continued use of our services after changes are posted constitutes acceptance of the updated policy.

13. Contact

Pearl River Design

Pearl River, New York

jackson@pearlriverdesign.dev

This Privacy Policy should be read alongside our Terms of Service.