Privacy Policy
Version: privacy-2026-10-v1
Effective date: October 19, 2026
Who we are and how to contact us
Butler Media Group, Inc., doing business as Butler Studio, operates this website and provides website design and care. Our mailing address is 120 19th St N Ste 201 PMB 827333, Birmingham, AL 35203-3219. Email privacy questions and requests to [email protected].
What we collect
The free-preview form collects your business name, current website or "no website", email, and optional descriptions and notes. Client intake collects business and contact names, email, optional phone, confirmed business facts and hours, logo and photo share links, domain registrar, who controls DNS, the email destination for website inquiries, and must-haves. We also receive materials, instructions, approvals and correspondence you send us. At your request, we may use text, photos and logos from your existing site. You must have permission to use them.
When you submit intake, we record the intake ID, terms and privacy versions, document hashes, the exact text of both required checkboxes, and your affirmative acceptance. We also record the acceptance time in UTC, browser user agent and IP-derived country where available. A user agent is a browser identification string. We do not store raw IP addresses in our lead, intake or acceptance tables. Cloudflare still processes network addresses to deliver and protect the website under its own policies.
Stripe hosts checkout and handles payment-card details. We never see or store your full card numbers. We receive payment status, Stripe customer and payment references, billing information and transaction records needed to provide the service and keep accounts. Intake does not collect payment details or authorize a charge.
Please do not send sensitive personal information, passwords, recovery codes or card details through a form or share link. Share only the files needed for the project. We do not intentionally collect information from children under 16; our service is for business customers.
Why we use it
We use this information to reply to requests, make and send previews, confirm facts and permissions, design and revise your site, arrange domain access, route inquiries to your chosen email, process payments, provide Care, and handle deletion and support requests. Acceptance records show which terms you agreed to. We also use limited records to prevent abuse, resolve disputes and meet accounting or legal duties. We do not use client intake details for unrelated marketing without permission.
Providers and sharing
Cloudflare Pages hosts the website and its form functions. Cloudflare D1 stores lead, intake and acceptance records. The intake form asks for logo and photo share links; files stay with the sharing provider you choose until we download them for the project. We use email and working-file providers to communicate and deliver the work, and Stripe to process payments. These providers receive only the information needed for their role. Their own privacy terms also apply: Cloudflare and Stripe.
We may disclose information when required by law or to protect legal rights and the security of the service. We do not sell personal information or share it for cross-context behavioural advertising. We do not publish client materials or case studies without separate permission. We do not submit private client materials to an AI service without first agreeing an appropriate provider and data-use arrangement with you.
Cookies and website activity
Our site code does not set advertising cookies or add email-open pixels, fingerprinting or individual click redirects. Cloudflare may process operational and security data. If enabled, Cloudflare Web Analytics provides cookieless traffic measurements. A private preview's path can be associated with the business it was made for. Path counts do not identify an individual viewer or prove that a business owner visited. Stripe and the file-sharing services you choose have their own cookies and data practices.
Retention and deletion
We use the following retention schedule. Unconverted preview requests, intake materials and preview working copies are kept for up to 90 days after the last project contact. For completed work, we keep working materials while needed to deliver the site or provide active Care, then for up to 90 days after handover or Care ends. We keep limited contracts, acceptance evidence and billing records for up to seven years after the project or Care ends for accounting and dispute purposes, or longer only where law or an active legal claim requires it. Retention reviews and deletion are handled by our team; these periods are not an automated deletion feature.
Email [email protected] to request access, correction or deletion. If you do not approve a site, you pay nothing, and we delete the preview and your supplied materials on request. We may retain only records needed for legal duties or claims and a minimal do-not-contact record to honour a removal request. We explain any exception. We also remove local inbox exports and downloaded working copies when deleting project records. A shared folder remains under your control; revoke its link if you no longer want to share it.
We may ask for enough information to verify a request without collecting unnecessary identity documents. Removed data may remain in provider backups until those backups expire under the provider's retention policy; we do not use those copies for normal work. We cannot delete files from accounts you control. Internet transmission and storage carry risks, and no service can promise perfect security.
California notice
The categories we collect are identifiers and contact details; business information, correspondence and supplied content; commercial and billing records; browser information and IP-derived country; and contract and acceptance records. We obtain these from you, your requested existing-site sources, and service providers. We use and disclose them for the purposes and provider categories described above, with the retention periods stated above. We do not sell personal information, share it for cross-context behavioural advertising, or use sensitive personal information to infer characteristics about you.
Where California privacy law applies, you may request to know and access the personal information we hold, correct inaccuracies, or request deletion, subject to legal exceptions. You may use an authorized agent, and we will verify authority and identity as applicable. We will not discriminate against you for exercising applicable rights. Send requests to [email protected] or our mailing address above. We honour applicable opt-out preference signals, including Global Privacy Control; we have no sale or advertising-sharing activity to opt out of. This notice describes our practices and does not claim that every statutory threshold applies to our business.
Policy changes
We display a version and effective date above. Material changes are communicated as required by law. Intake records retain the version and document hash shown when you submitted. The Terms of Service cover the project and payment process.