Privacy Policy
Effective date: November 9, 2026.
Best Value Web Design provides website and related managed services. This policy describes information collected through our website, inquiries, client service, and related support. Use our Contact page with privacy questions.
Information we collect
We collect the details you provide in inquiries, onboarding, support, and account requests, such as name, business name, email, phone when supplied, website address, service needs, messages, and approved project materials.
When you become a client, we keep order, agreement, billing, account-access authorization, and service records. Our payment provider processes payment details through its own interface. We receive payment status and transaction/account references needed to manage the subscription.
Our systems may record technical information such as IP address, browser, device details, request timestamps, and error/security logs to operate and protect the service.
If you use an enabled AI assistant, its system processes your messages, generated responses, timestamps, and contact details you choose to provide. It uses external model/service providers under the configured service arrangement. Do not enter sensitive personal information into the assistant.
How we use information
We use information to respond to inquiries, prepare proposals, deliver and maintain websites, manage subscriptions, provide support, prevent abuse, troubleshoot delivery, and maintain necessary business records.
If you separately opt in to marketing, we use your contact details for that purpose and provide an unsubscribe method. Declining marketing does not prevent an inquiry response or essential service messages.
Providers and disclosures
We use service providers for the configured hosting, forms, email delivery, support, AI processing, payments, monitoring, and analytics functions. The provider schedule below lists the services currently in use.
Information may be disclosed to professional advisers, to comply with lawful obligations, to protect rights and security, or in a business transaction with appropriate safeguards and notice where required.
AI vendor retention, permitted model use, and international processing depend on the selected agreement and settings. We add the actual arrangement to the provider schedule before an AI service is turned on. We do not make a blanket claim that all AI processing is private, local, or excluded from provider training without contractual support.
Cookies and analytics
Essential technologies may support forms, account functions, and security. Our forms use a Cloudflare security check to block automated spam.
We use Cloudflare Web Analytics to count visits in aggregate. It does not set cookies. We do not use advertising pixels or session recordings. If that changes, we will update this notice first and add any consent controls that are required.
Retention
The proposed default retention is 90 days for inquiry and chat records, 30 days for technical logs, and seven years for billing and agreement records. Project materials are retained during active service and for the 30-day post-termination retrieval period. Backup copies can persist up to 30 days after active deletion.
Records may be held longer where needed for a dispute, legal obligation, security investigation, or an agreed client instruction. Payment, booking, and other independently controlled provider accounts follow their own retention policies.
Choices and requests
You may use our Contact page to request access, correction, deletion, or another applicable privacy right, or to ask about a provider used for your service. We may need to verify identity and explain any lawful exception or limitation.
Unsubscribe from marketing using the supplied method. Essential account, billing, support, and security communications continue where needed for service.
When we process a business client’s visitor data on that client’s instructions, we may direct a request to the business or help it respond under the applicable arrangement.
Security and international processing
We use reasonable access controls, secure connections, and operational safeguards. No system or transmission is completely secure. Providers may process information outside your jurisdiction; the actual countries and transfer safeguards must be documented for the selected providers.
Children
Our service is intended for businesses and is not directed to children. Do not use our ordinary forms or assistant to provide children’s sensitive information. If you believe such information was submitted, contact us so we can review and respond.
Changes
We update this policy when practices change and identify the new effective date. Material changes and any required new choices will be communicated before applying the new use where required.
Provider schedule
- Cloudflare: website hosting, form security checks, and aggregate traffic analytics.
- CWForm: receiving website form submissions and sending them to us by email.
- Purelymail: business email.
AI, booking, and payment providers are added here before those services are turned on.