Privacy Policy

1. Who We Are

Webwaxhaw ("we," "us," or "our") is a web design and maintenance service based in Waxhaw, North Carolina. We build and maintain websites for small businesses primarily in the Carolinas. Our mailing address is 2493 Creekview Dr, Waxhaw, NC 28173. You can reach us at team@webwaxhaw.com.

2. Information We Collect

Information you provide directly

• Name and email address · collected when you submit a payment or contact us.
• Payment information · card number, expiration, CVV, billing name, and billing ZIP. This data is entered directly into Stripe's secure form and is never transmitted to or stored on our servers. We only receive a tokenized confirmation from Stripe.
• Business information · details you share with us during the project onboarding process (business name, service area, photos, copy). This is used solely to build your website.

Information collected automatically

• Server logs · our hosting provider may log standard access data (IP address, browser type, pages visited, timestamps). These logs are used for security and uptime monitoring only and are not used for advertising or profiling.
• No tracking cookies. We do not install analytics cookies, advertising pixels, or any third-party tracking scripts on this website.

Information from third parties

• Stripe · when you pay, Stripe may share with us your name, email, last four card digits, and payment status. Stripe's own privacy policy governs how they handle your data: stripe.com/privacy.
• Google Fonts · this website loads fonts from Google's CDN. Google may log your IP address when your browser requests the font files. See Google's privacy policy.

3. How We Use Your Information

• To process your payment and send payment receipts.
• To deliver and maintain the services you purchased.
• To communicate with you about your project, invoices, or service updates.
• To comply with legal obligations (e.g., tax records).
• To protect against fraud and unauthorized transactions.

We do not use your information for advertising, remarketing, or any form of profiling. We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

4. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area, our legal bases for processing your personal data are: (a) contract performance · processing necessary to deliver the service you requested; (b) legal obligation · retaining transaction records as required by tax law; and (c) legitimate interests · fraud prevention and security monitoring.

5. Data Retention

We retain your name and email address for as long as our business relationship is active. Transaction records (name, email, payment amount, date) are retained for seven years as required by U.S. federal tax law. You may request deletion of non-tax-record data at any time by emailing us; we will respond within 30 days.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (subject to legal retention requirements).
• Opt out of any future marketing communications (we will always honor unsubscribe requests immediately).
• Portability · receive a copy of your data in a common format.

To exercise any of these rights, email us at team@webwaxhaw.com. We will respond within 45 days of receiving a verifiable request (extendable by an additional 45 days when reasonably necessary). We do not discriminate against users who exercise their privacy rights.

California residents (CCPA / CPRA): You have the right to: (1) know what personal information we collect, use, disclose, and sell; (2) delete your personal information (subject to certain exceptions); (3) correct inaccurate personal information; (4) opt out of the sale or sharing of personal information (we do not sell or share personal information); and (5) limit the use and disclosure of sensitive personal information. To submit a verifiable consumer request, email team@webwaxhaw.com with subject line "California Privacy Request." We will acknowledge your request within 10 business days and fulfill it within 45 calendar days.

North Carolina residents: We comply with the North Carolina Identity Theft Protection Act (N.C. Gen. Stat. § 75-61 et seq.). In the event of a security breach affecting your personal information, we will notify you as required by North Carolina law.

7. Children's Privacy

Our services are intended for adults operating businesses. We do not knowingly collect personal information from anyone under the age of 13. If we become aware that we have inadvertently collected data from a child under 13, we will delete it promptly.

8. Security

We use HTTPS on all pages of this website. Payment data is handled exclusively by Stripe, which is PCI DSS Level 1 certified · the highest level of payment security certification available. We do not store card numbers, CVVs, or full card details anywhere on our systems.

9. Third-Party Links

This website may contain links to external sites (e.g., Stripe, Google). We are not responsible for the privacy practices of those sites and encourage you to review their policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of our services after any update constitutes acceptance of the revised policy. For material changes, we will notify active clients by email.

11. Accessibility

We are committed to making this website accessible to all users. If you experience any difficulty accessing content on this website, please contact us at team@webwaxhaw.com and we will work to provide the information in an alternative format or assist you directly.

12. Contact

Questions or concerns about this Privacy Policy or your data?