Privacy Policy

1. Who I am

This website, webrion.us, is operated by Jordan, trading as Webrion (“Webrion”, “I”, “me”). I am based in Poland and serve small local businesses in the United States. Privacy questions: jordan@webrion.us.

2. What I collect and where it comes from

I collect only what I need to answer a message or deliver the service.

• Contact form: your name, the name of your place, email address, phone number (only if you give it) and your message. The form is handled by Formspree — your message reaches Formspree only when you click Send, and is forwarded to my inbox; the page loads no script from Formspree. It also includes a hidden anti-spam field that collects nothing about you.
• Email: whatever you write to me, and your sender address.
• Contract and billing details (only once we have an agreement): business name, address, tax ID if applicable, contact details, and what is needed to register a domain in your name.
• Technical data: my host (Netlify) automatically records your IP address and basic request details in server logs. I do not link these to you.

What I do not collect: this site sets no cookies, runs no analytics, has no advertising pixels and loads no third-party scripts. The fonts are served from this domain, so nothing is sent to Google.

3. Why I use it

The checkbox on the contact form is not a consent to marketing. It simply confirms you had a chance to read this policy. I do not send marketing email and I do not add anyone to a mailing list.

4. Who I share it with

I do not sell personal information and I do not share it for advertising. I use these service providers, who process data on my instructions:

• Netlify, Inc. (San Francisco, CA) — hosting. Netlify privacy policy.
• Formspree, Inc. (USA) — receives contact-form messages and forwards them to my inbox; a copy is visible in my Formspree dashboard. Formspree privacy policy.
• Stripe, Inc. (San Francisco, CA) and Stripe Payments Europe Ltd. — payment processing. You enter card details directly with Stripe; I never see or store them. Stripe privacy policy.
• Email provider — hosts the jordan@webrion.us mailbox your message arrives in.
• Domain registrar — when registering a domain in your name.

I may disclose data to public authorities only where the law requires it.

5. Where your data is processed

I work from Poland, in the European Union, so your data is processed there and in the United States (Netlify, Formspree, Stripe). Because the business is in the EU, the EU General Data Protection Regulation (GDPR) applies to how I handle your data even though you are in the US — in practice that gives you more protection, not less.

6. How long I keep it

• Enquiries that do not lead to an agreement: up to 12 months after the last message, then deleted.
• Contract data: for the life of the agreement, then for the limitation period for legal claims (generally up to 6 years).
• Invoices and accounting records: 5 years after the end of the tax year, as required by law.
• Server logs: per Netlify’s retention, generally up to 30 days.

7. Your rights

You can ask me to: tell you what data I hold about you and give you a copy; correct it; delete it (unless I must keep it by law); restrict how I use it; hand it over in a portable format; or stop using it where I rely on legitimate interest. Email jordan@webrion.us and I will respond within 30 days. I will not treat you differently for exercising any of these rights.

If you are in the EU, you may also complain to a data protection authority; the one for my business is the Polish Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.

8. California residents

This section is provided under the California Online Privacy Protection Act (CalOPPA). Webrion does not currently meet the revenue or volume thresholds of the CCPA/CPRA, but I follow its principles anyway:

• The categories of personal information collected in the last 12 months are those listed in section 2: identifiers (name, email, phone) and commercial information (details of our agreement).
• I do not sell personal information and do not share it for cross-context behavioral advertising. There is nothing to opt out of.
• You may request to know, correct or delete your personal information by emailing jordan@webrion.us. I will verify the request by replying to the email address I hold for you.

9. Do Not Track

This site does not track visitors across websites and therefore does not respond to browser “Do Not Track” or Global Privacy Control signals — there is no tracking to switch off.

10. Children

This site is for business owners and is not directed at children under 16. I do not knowingly collect information from anyone under 16; if you believe a child has sent me data, email me and I will delete it.

11. Cookies

No cookies and no pixels. The only localStorage entry is your light/dark theme choice, written when you click the toggle — it holds no personal data. See the Cookie Policy.

12. Security

The site is served over HTTPS only. Form submissions travel encrypted to Formspree and on to my inbox. Access to my email, hosting and Formspree accounts is protected by passwords and two-factor authentication. Payment card details never pass through my systems.

13. Changes to this policy

If the way I handle data changes — for example if I ever add analytics — I will update this page and the date at the top, and add a consent mechanism where one is needed. Previous versions are available on request.