Privacy policy
What we collect when you reach out, why we collect it, and how to get it removed. Plain language, no fine print.
Effective July 3, 2026
Who we are
Aegis Designs LLC is a design, development, and marketing studio in Jupiter, FL 33458. We are responsible for the information you send through this site. Reach us at chase@aegisdesigns.io or (561) 301-4550.
What we collect
When you fill out the contact, quote, or growth-scan form, we collect your name and email, an optional phone number, and your message. The quote and scan forms also pass along the services and budget you pick. The form sends a few technical values so we can route the inquiry and screen out bots: the page you came from, a timestamp, a bot-check token, your IP address, and any campaign tags from the link you clicked.
We do not ask for payment details, government IDs, or any sensitive personal category through these forms.
Why we collect it
Your contact details let us answer your inquiry and, if it moves forward, scope and run the project. The technical values keep the form working and keep spam out. Analytics shows us which pages and ads bring in work.
We do not sell your information for money. Running Google Analytics and the Meta pixel can count as "sharing" for targeted advertising under California and other state laws, so we treat it that way and give you a real way to turn it off, described under Cookies and tracking below. We do not send marketing email to people who only asked a question. If we ever want to add you to a list, we will ask first.
Who processes your data
We use a small set of service providers to run the site, handle the forms, and measure traffic. Each one sees only what its job needs, and each is bound to use your data only to provide its service to us. These are the providers as of the effective date at the top of this page.
| Provider | What it does for us | What it can see |
|---|---|---|
| Google (Analytics 4) | Measures site traffic and which pages and ads bring in work | Page views, device and browser type, a random analytics ID, general location from your IP address |
| Meta (Facebook pixel and Conversions API) | Measures ad performance and matches form submissions back to the ad that drove them | Page views; and, only when you have accepted cookies and have not turned on Global Privacy Control, a scrambled version of your email and phone, your IP address, and Meta ad-click identifiers on submit. If you decline or your browser sends a GPC signal, we send nothing to Meta. |
| Vercel | Hosts and serves the website | Standard request data, including your IP address |
| Supabase | Receives, checks, and stores your form submission | The full form you send; the spam-check ledger holds only scrambled values |
| Cloudflare (Turnstile) | Runs the "verify you are human" check on each form | A challenge token and your IP address at the moment you submit |
| HubSpot | Holds the inquiry as a contact record so we can follow up | Your name, email, phone, chosen services and budget, and your message |
| Resend | Sends us the internal alert that a new inquiry arrived | A redacted alert only: your email domain and first initial, never the full message |
Cookies and tracking
Analytics and advertising cookies stay off until you accept them in the cookie banner. Decline, ignore the banner, or send a Global Privacy Control signal and they never load. The cookies below are the full set the site can set. The verification cookie is essential to the forms and always runs; the rest wait for your choice.
| Cookie | Set by | Purpose | Lasts |
|---|---|---|---|
| _ga | Google Analytics | Tells one visitor apart from another so traffic counts are not double-counted | 2 years |
| _ga_5Y62FGL48T | Google Analytics | Keeps the session state for this specific property | 2 years |
| _fbp | Meta pixel | Identifies the browser so ad performance can be measured | 90 days |
| _fbc | Meta pixel | Stores the ad-click identifier when you arrive from a Meta ad | 90 days |
| Consent choice | Our cookie banner | Remembers whether you accepted or declined so we do not ask on every page | Up to 1 year |
| Turnstile token | Cloudflare | Confirms you passed the human check so the form will accept your submission. Essential; always runs | 30 minutes |
Do Not Track and Global Privacy Control
Some browsers and extensions send a Global Privacy Control signal that tells sites you opt out of the sale or sharing of your data. We honor it. When your browser sends that signal, we treat it as an opt-out of analytics and advertising cookies for that browser, and we show a short confirmation on the page that we detected it. California requires this as of January 1, 2026, and we apply it to every visitor, not only Californians.
Older browsers send a plain Do Not Track header instead. There is no shared standard for what a site must do with it, so we take the same approach: a Do Not Track header is treated as a request to keep analytics and advertising cookies off. The verification cookie that protects the forms still runs, because the forms cannot work without it.
How long we keep it
Inquiries that do not turn into a project are deleted from our CRM on a regular cleanup. Records tied to current or past clients are kept while we work together and for a reasonable period after, so we can honor warranties and meet our legal and tax obligations. The spam-check ledger holds only scrambled values and is short-lived.
Your choices
To turn tracking on or off at any time, use the cookie banner. Decline there, or send a Global Privacy Control signal from your browser, and analytics and advertising cookies stay off. You can also clear cookies in your browser to reset the choice.
To see, correct, or delete the information we hold about you, email chase@aegisdesigns.io. If you live somewhere with formal data rights, such as the EU or California, the same address is how you exercise them, including the right to opt out of sale or sharing and to limit the use of sensitive information. We will not charge you or treat you differently for asking.
Changes to this policy
When we change how we handle your information, we update this page and the effective date at the top. We will flag material changes more clearly than a quiet edit.