Privacy policy

This policy explains how Emmett Green collects, uses and shares information when you visit builtbyemmett.com (the “site”) or get in touch with me. I run a one-person web design business under the name Built by Emmett. Built by Emmett is a business name I use, not a separate company. In this policy, “I,” “me” and “my” mean Emmett Green.

1. What I collect

Information you give me

• Quote form. Your name, business name, email address or phone number, current website, the plan you’re interested in, and anything you write in your message.
• Messages and calls. What you send me by email or text, and call logs and voicemails you leave me, including your phone number or email address.
• If you become a client. Billing contact details, records of payments, your signed agreement, and the materials you send for your project, such as logos, photos, text, and login access to accounts like your domain or Google Business Profile. Card payments are handled by a payment processor. I don’t see or store full card numbers.

Information collected automatically

• Technical data. Like every website, when you load a page the servers that deliver it receive your IP address, browser and device type, the page you asked for, the page that referred you, and the date and time. This happens through my hosting and security provider and the services that deliver the site’s fonts and code (listed in section 4).
• Visit counts. I may use Cloudflare Web Analytics to see how many people visit and which pages they view. It doesn’t use cookies, doesn’t build a profile of you, and doesn’t track you across other websites.

Public business information

I may use publicly listed business contact details, like those on a Google Maps listing or a business’s own website, to reach out about my services. Those emails always include a way to opt out of hearing from me again.

Information I don’t want

Please don’t send me sensitive information like Social Security numbers, bank account numbers, health information or passwords through the quote form or by text. If a project needs access to one of your accounts, we’ll set up a safer way to share it, and you can change the password once the work is done.

2. Cookies

The site doesn’t use cookies for advertising or to track you, and it has no ad pixels or social media trackers. My hosting provider, Cloudflare, may set a strictly necessary cookie (called __cf_bm, which expires after 30 minutes) to tell real visitors apart from bots and to protect the site from attacks. That cookie doesn’t identify you by name and isn’t used for advertising. If I ever add tools that use cookies for analytics or ads, I’ll update this policy first and ask for consent where the law requires it.

3. How I use your information

• To reply to your questions and quote requests.
• To plan, design, build, launch and maintain websites for clients.
• To send project updates, invoices and receipts.
• To keep the site secure and to block spam and abuse.
• To understand, in total numbers, how the site is used so I can improve it.
• To keep business and tax records, follow the law, and enforce my agreements.

I don’t use your information to make automated decisions about you, and I don’t build marketing profiles.

4. Who I share it with

I don’t sell your personal information, and I don’t share it for targeted or cross-site advertising. I don’t share it with other businesses for their own marketing. Here’s who does receive it, and why:

Service providers that help me run the site and business

They receive only what they need to do their job.

• Web3Forms receives quote form submissions, along with the sender’s IP address, and delivers them to my email.
• Cloudflare hosts the site, protects it from attacks, and provides visit counts if analytics are turned on. Its servers receive the technical data described in section 1.
• Google provides Google Voice, which I use for calls and texts, and Google Fonts, which delivers the site’s typeface. When a page loads, Google’s font servers receive your IP address and browser information.
• cdnjs (powered by Cloudflare) and jsDelivr deliver code libraries that power the site’s animations. Like any web request, they receive your IP address and browser information.
• My email provider stores the emails you send me and the form submissions delivered to my inbox.
• Payment processors, if you become a client, process your payments under their own privacy policies.
• Other tools I use to run the business, like file storage, document signing, invoicing, and AI-assisted design and writing tools. When I set up your domain, hosting or Google Business Profile, I enter your business details into those services for you.

Other cases

• Legal reasons. If the law requires it, such as a court order or subpoena, or if it’s needed to protect my rights, your safety or the safety of others.
• If the business changes form or hands. If I form a company to run Built by Emmett, or the business is ever sold, your information may move with it. I’ll make sure the new owner follows this policy or tells you before changing it.
• With your permission. For example, I only show a client’s website in my portfolio after they say it’s okay.

Phone numbers and text messaging consent are never shared with or sold to third parties or affiliates for their marketing.

5. Calls, texts and email

If you give me your phone number, I may call or text you about your request or your project. I don’t send marketing texts. Message and data rates may apply, and how often I text depends on our conversation. Reply STOP, or tell me any other way, and I’ll stop texting you.

If you contact me through the site, I email you only about your request or your project. I don’t run a newsletter. If I ever start one, I’ll only add people who sign up for it, and every email will have an unsubscribe link.

6. How long I keep it

• Quote requests and messages that don’t turn into a project: up to 2 years, then deleted.
• Client records (agreements, invoices, payment records and project messages): while you’re a client and for up to 7 years after, for tax and legal reasons.
• Account logins you share for a project: deleted when the project or maintenance work ends. Please change those passwords then too.
• Technical logs held by my service providers are kept according to their own retention policies.

I’ll delete your information sooner if you ask, unless I need it for taxes, an open project or a dispute.

7. How I protect it

The site is served over an encrypted HTTPS connection. I use established service providers and protect my accounts with strong passwords and two-step verification wherever it’s offered. I don’t have employees or contractors, so I’m the only person at Built by Emmett who handles your information. No method of sending or storing data is completely secure, so I can’t promise perfect security. If a breach ever affects your personal information, I’ll notify you as the law requires. If I think account logins you shared with me may have been exposed, I’ll tell you right away so you can change them.

8. Your rights and choices

Wherever you live, you can ask me to:

• Tell you what personal information I have about you and give you a copy.
• Correct information that’s wrong.
• Delete your information.
• Stop calling, texting or emailing you.

Depending on where you live (for example California, Colorado, Virginia, or the European Union or United Kingdom), the law may give you more rights, such as knowing the categories of information collected and the categories of businesses it’s shared with, objecting to or limiting certain uses, getting your information in a portable format, or appealing my decision on your request. Most of these laws only cover much larger businesses, but if you have a privacy request that isn’t listed above, ask me and I’ll do what I reasonably can.

How to ask: email or text me using the details in section 15. To protect your information, I’ll confirm the request comes from you by checking it against the email address or phone number I already have. You can also have someone you authorize make the request for you, with proof that you gave them permission. I’ll respond within 30 days. If I need more time, I’ll tell you why and when to expect an answer.

I won’t treat you differently or charge you more for using any of these rights. If I turn down a request, I’ll tell you why, and you can reply asking me to look at it again. If you’re still not satisfied, you can contact your state attorney general or, outside the US, your local data protection authority.

9. Do Not Track and Global Privacy Control

The site doesn’t track you across other websites, so a browser’s Do Not Track signal doesn’t change how the site works. Google, Cloudflare and jsDelivr see your IP address when they deliver files, like they do on every site that uses them. Each states that it doesn’t use that data to track you across websites or to target ads. If your browser sends a Global Privacy Control signal, I treat it as a request to opt out of the sale or sharing of your personal information, which I don’t do anyway.

10. Visitors outside the United States

I’m based in Tennessee, and the site is run from the United States. Your information is processed in the US and in other countries where my service providers operate, which may have different data protection laws from where you live. My main providers, like Google and Cloudflare, protect data sent from the EU or UK with legal safeguards such as the EU-US Data Privacy Framework or standard contractual clauses.

If you’re in the European Economic Area or the United Kingdom, I use your information on these legal grounds: to answer your request and take steps you ask for before signing an agreement, or to carry out our agreement; my legitimate interests in running, securing and improving my business, as long as they aren’t outweighed by your rights; your consent, where I ask for it, which you can withdraw at any time; and to meet legal obligations such as keeping tax records.

You don’t have to give me any information, but I need a way to reach you to reply, and project details to do the work. You have the right to access, correct or delete your information, to restrict or object to how I use it, to receive it in a portable format, and to complain to your local data protection authority (in the UK, the Information Commissioner’s Office).

11. Children

The site is for businesses and isn’t directed to children under 13. I don’t knowingly collect personal information from children under 13. If you think a child has sent me information, contact me and I’ll delete it. If you’re under 18 and want a website, I’ll need a parent or guardian involved before we start a project.

12. Sites I build for clients

This policy covers builtbyemmett.com and my own business only. Each website I build belongs to the business that hired me, and that business decides how information collected on its site is used and is responsible for its own privacy policy. I’m happy to help clients set one up. If you contact a business through a site I built, that business controls your information. When I host or maintain a client’s site, I handle any visitor information only to provide that service, on the client’s behalf.

13. Links to other sites

The site links to other websites, such as sites I’ve built, social media and sources I cite. Those sites have their own privacy practices, and this policy doesn’t cover them.

14. Changes to this policy

I may update this policy from time to time. When I do, I’ll change the “Last updated” date at the top of this page. If a change is significant, I’ll point it out at the top of this page, and I’ll tell current clients directly if it affects them. If I ever want to use information I already have in a way this policy doesn’t allow, I’ll ask your permission first.

15. Contact me

Questions about this policy or your information? Reach me directly:

• Emmett Green, doing business as Built by Emmett
• Chattanooga, Tennessee
• Email: emmett@builtbyemmett.com
• Call or text: (423) 521-2604