Privacy Policy

1. Who we are

The website and service are operated by [Business Legal Name], located at [Business Address]. In this policy, “we”, “us” and “our” refer to that business.

2. Information we collect

We collect information you choose to provide through the website:

• Enquiries: name, email address, business name, website, phone number and your message or requirements. The current enquiry form requires name, email, website, phone and a message; business name is optional.
• Customizer quote requests: name and email, with optional phone number and notes, together with the selected design configuration and calculated estimate.
• Correspondence and support information you provide when communicating with us.
• Administrative account and authentication information for authorized business administrators.

The reviewed website code does not include a visitor analytics or advertising-tracking SDK. The final hosting environment may process standard request information such as IP address, browser information and timestamps for delivery, reliability or security. [Confirm hosting/logging practices before publishing].

3. Customer-uploaded photos

When a visitor uploads a photo as a customizer background, the current implementation creates a temporary browser-local object URL. The photo remains in the visitor’s browser for previewing the design. It is not uploaded to Supabase, stored by the application, or attached to an enquiry or quote request.

The browser-local reference is replaced or revoked when the visitor removes or replaces the photo. The design configuration submitted with a quote does not include the local photo file.

4. How we use information

• To receive, assess and respond to enquiries and support requests.
• To save submitted design configurations and provide quote or implementation follow-up.
• To prepare, configure and deliver agreed customizer services.
• To administer authorized accounts, product settings and service security.
• To maintain records, prevent misuse, troubleshoot problems and comply with legal obligations.

We do not state that personal information is sold or used for third-party advertising.

5. Legal bases for processing

Depending on your location, processing may rely on steps requested before entering a contract, performance of a contract, legitimate interests in operating and protecting the service, consent where required, or compliance with legal obligations. [Confirm applicable privacy laws and legal bases for your jurisdiction].

6. Service providers and disclosure

The application uses Supabase for database records, authentication and storage of administrator-managed product assets. Enquiry records, saved design configurations and quote requests are processed through Supabase. Supabase acts as a technology service provider and may process data under its own contractual and privacy terms.

Information may also be disclosed where required by law, to protect legal rights or service security, or as part of a business transaction subject to appropriate safeguards. [List the production hosting provider and any additional processors before publishing].

7. Cookies, local storage and analytics

The reviewed public website does not implement advertising cookies or a visitor analytics service. Authorized admin functionality uses browser storage for authentication sessions, and an interface preference cookie may be used for the admin sidebar. These support application operation rather than advertising.

[Recheck this section if analytics, consent tools or advertising services are added].

8. Data retention

Enquiries, quote requests, saved designs and account records should be retained only for as long as needed for the purposes described above, legal obligations, dispute resolution and legitimate business records. No final retention schedule is defined in the current project. [Insert approved retention periods and deletion procedures before publishing].

9. Security

We use reasonable technical and organizational measures appropriate to the service, including authenticated administrative areas, server-side validation and restricted database operations. No system can guarantee absolute security, and visitors should avoid submitting unnecessary sensitive information.

10. Your privacy rights

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, portability or objection, and to withdraw consent where processing relies on consent. You may also have the right to complain to a relevant supervisory authority. Requests can be sent to [Contact Email]. We may need to verify your identity before acting.

11. International processing

Service providers may process information in countries other than your own. Applicable contractual or legal safeguards should be used where required. [Confirm Supabase project region, production hosting locations and required transfer safeguards].

12. Children’s privacy

This is a B2B service intended for businesses and their authorized representatives, not for children. We do not knowingly solicit personal information from children. If you believe a child has submitted information, contact us so the matter can be reviewed.

13. Changes to this policy

We may update this policy to reflect service, legal or operational changes. The revised version will be posted on this page with an updated date. Material notices will be provided where required by applicable law.

14. Contact us

Questions or privacy requests may be sent to: