Privacy notice

What we collect, and what we do with it.

Crystal Coast Online is a two person web design studio in Carteret County, North Carolina. This page explains, in plain language, what information this website collects and how we handle it. Last updated 2 September 2026.

What we collect

From the quote request form: your name, business name, phone number, email address, and a description of your project. The current website and business type fields are optional. You also tell us how you would like to be contacted.

If you become a client, we also collect what the project needs: the business details that go on the site, the text, photos, and logos you supply, the name and address for invoices, and, when you ask us to set up a domain, hosting, or email for you, access to those accounts. We do not store card or bank account numbers.

Browsing the site collects nothing from you. We do not use analytics, advertising pixels, social media buttons, or tracking of any kind. The fonts, images, and code are all served from our own domain, so loading a page does not send a request to any other company.

How we use it

• To reply to your quote request with a quote and a timeline.
• To contact you about that request by the method you chose on the form.
• To plan, build, and launch your website if you go ahead, and to invoice for the work.

That is all. We do not sell your information, share it for advertising, or add you to a mailing list. If you choose "Text" as your contact method, we will only text you about your request, and you can reply STOP at any time.

Who we share it with

Only the services we need to run the business: Netlify, which hosts this site and stores form submissions; Google, which provides our business email; and any domain registrar or hosting company we set up on your behalf during a project, in your name. We may also disclose information if the law requires it. Nobody else.

Client account access

If a project means handling sign-in details for your domain, hosting, or email, we ask for access only when it is needed and prefer to be added as a separate user rather than share your password. Anything we hold is kept in a password manager. Accounts stay in your name, you remain the owner, and when the project ends we hand over full control and delete any credentials we were given.

How long we keep it

• Quote requests that do not lead to a project: deleted within 12 months.
• Client project records and content: for the life of the project and up to 3 years after, so we can support the site.
• Invoices and payment records: 7 years, for tax purposes.

You can ask us to delete your information sooner at any time.

How we protect it

This site is served only over HTTPS with a strict security policy. Form submissions travel encrypted to Netlify and to our email. Our email and Netlify accounts use strong passwords and two-factor authentication. Like any web host, Netlify keeps short lived server logs, which include visitor IP addresses, for security. We do not access or use those logs.

Cookies

This site does not set cookies and does not use local storage. There is no cookie banner because there is nothing to consent to.

Your choices

Wherever you are, you can ask us to show you the information we hold about you, correct it, delete it, or stop contacting you by a particular method. Email or call us using the details below and we will respond within 30 days, at no charge, and without treating you any differently for asking. If you are a California resident, these are the rights the California Consumer Privacy Act asks businesses to offer; we do not sell or share personal information for advertising, so there is nothing to opt out of on that front.

Children

This site is for businesses and is not directed at children under 13. We do not knowingly collect information from them.

Changes

If we change how we handle information, we will update this page and the date at the top. A printable copy of this notice is available on request.