What we collect, why we need it, and who receives it.

1. Who is responsible

PrettyLanding is responsible for personal information used to market, sell, administer and secure its own service. For a customer’s website enquiries and review recipients, the customer decides why the information is collected and used; PrettyLanding processes it to provide the managed service. The applicable contracting provider must be identified on the customer’s Order and invoice before payment.

Privacy questions and requests can be sent to martin@prettylanding.com.

2. Information we collect

• Contact and business information: name, business, role, email, telephone, location, website and the contents of messages, meetings or forms.
• Research and proposal information: publicly available business facts, website and search observations, qualification notes, design references, proposals, approvals and decisions.
• Account information: login email, authentication and recovery records, account role, settings and security events. Authentication providers handle passwords; we do not display them.
• Service records: business goals, website content and assets, requests, messages, approvals, releases, change history, support records and reports.
• Enquiry and review information: details a visitor submits through a customer website, configured recipients, delivery status, completed-job information and review-invitation status.
• Billing information: customer and subscription identifiers, agreed billing terms, invoice and payment status. Stripe processes payment-card details; PrettyLanding does not receive full card numbers.
• Search and technical information: Search Console measurements, audits, page performance, sitemap and indexing observations, request logs, device/browser information and security diagnostics.

Website-enquiry abuse controls may create a one-way keyed fingerprint from a network address and browser identifier. The raw address is not stored in the rate-limit table, and its short-lived counter is automatically pruned.

3. Where information comes from

We receive information from you, your authorized users, people who use your website, service providers, and public sources such as business websites, search results, public directories and professional or government records. Search or business-platform data is collected only after authorized access to the relevant property or account.

4. How we use information

• Respond to enquiries and prepare a requested review, proposal or demonstration.
• Create, host, maintain and improve the agreed website and service.
• Operate accounts, requests, billing, enquiry delivery, review invitations and reporting.
• Authenticate users, prevent abuse, troubleshoot failures and secure the service.
• Measure website and search performance without presenting unavailable data as zero or claiming unsupported causation.
• Communicate about the relationship, transactions, incidents and material service changes.
• Comply with law, keep required records and establish, exercise or defend legal claims.

Where a law requires a legal basis, we rely as applicable on taking steps you request before a contract, performing the contract, legitimate interests in operating and securing the service, consent for an optional use, and compliance with legal obligations.

5. Customer website enquiries

A customer determines what its public website asks for and is responsible for an appropriate notice and lawful follow-up. PrettyLanding stores the submission, forwards it to the verified recipients configured by the customer, may send an automatic acknowledgement, records delivery status and makes relevant information available to the customer. We do not use those enquiries to advertise PrettyLanding to the person who submitted them.

6. Review invitations and email

When a customer records a genuine completed job, the service may schedule a review invitation to the contact provided for that job. The customer controls whether invitations are enabled, their delay and the review destination. Delivery records are retained for reliability and audit. Transactional and relationship messages are kept separate from unrelated promotion.

If PrettyLanding sends marketing email, it will identify the sender, use accurate subject and routing information, include the required postal address and provide a working opt-out. We will honor a valid marketing opt-out and will not require one for essential transactional or service-security messages where law allows.

7. Cookies and similar technology

The public PrettyLanding marketing pages currently use no advertising cookies and no non-essential analytics cookies. Signed-in areas use essential cookies and related browser storage for authentication, security and requested account functions. These are not used for cross-site targeted advertising. If optional analytics or advertising technology is introduced, we will update this Policy and provide any consent or opt-out required before enabling it.

8. Who receives information

We disclose information only as needed to:

• The customer and its authorized recipients, including delivery of website enquiries and account records.
• Vercel, for application and customer-website hosting and delivery.
• Supabase, for database, storage and authentication services.
• Stripe, for checkout, subscriptions, invoices and billing controls.
• Resend and email infrastructure, for service, enquiry and review-message delivery.
• Google services, when authorized for Search Console, business/review destinations, PageSpeed or related measurement.
• AI-assisted development providers, where used to research, draft, code or review authorized work under our direction and safeguards.
• Professional advisers and authorities, where reasonably needed for advice, legal compliance, safety or claims.
• A successor, in a genuine financing, reorganization or sale, subject to appropriate confidentiality and continued protection.

We do not sell personal information. We do not share it for cross-context behavioral advertising or use customer website enquiries for targeted advertising.

9. International processing

PrettyLanding and its providers may process information in countries other than yours. Privacy and government-access rules may differ. Where required, we use contractual or other recognized safeguards for international transfers and make information about those safeguards available on request.

10. Retention

We retain information only while reasonably necessary for the purposes described here, including the service relationship, delivery and retry records, customer-request history, billing and tax obligations, security, backups, disputes and legal claims. Retention depends on the record, the customer’s instructions and applicable law. Privacy-preserving lead rate-limit counters are automatically pruned after approximately two days.

When information is no longer required, we delete, de-identify or securely isolate it. Backups and immutable security or financial records may remain until their normal expiry. A fixed schedule will not be published until matching deletion operations are approved and implemented; you may request deletion as described below.

11. Security and incidents

We use measures appropriate to the information and service, including encrypted transport, managed infrastructure, role-based access, separate customer projects, restricted service credentials, authentication controls, audit records, backups, input validation and abuse controls. No online system can guarantee absolute security.

If we confirm an incident affecting personal information, we will investigate, contain and document it and notify affected customers, individuals or authorities where applicable law requires it.

12. Your privacy choices and rights

Anyone may ask us to access, correct or delete personal information about them, obtain a portable copy where applicable, or object to or restrict a particular use. You may withdraw consent for a future optional use without affecting earlier lawful processing. We do not discriminate against someone for exercising a privacy right.

Email martin@prettylanding.com and describe the request. We may need to verify identity and authority. If the information belongs to a PrettyLanding customer’s website, we may refer the request to that customer and assist it. We may retain information where law permits or requires it and will explain a refusal or limitation. Where applicable law provides an appeal or regulator complaint, you may use it.

Because we do not sell personal information or share it for cross-context behavioral advertising, there is no sale or targeted-advertising opt-out to process. Browser preference signals will be honored where they apply to any future covered activity.

13. Children

PrettyLanding is a business service and is not directed to children under 13. We do not knowingly collect a child’s personal information through the PrettyLanding marketing site or customer account. If you believe that has happened, contact us so we can investigate and delete it where appropriate.

14. Changes and contact

We will post revisions here and change the effective date. If a material change affects active customers or requires new consent, we will provide additional notice or choice as required. Questions, complaints and rights requests go to martin@prettylanding.com.