Privacy Policy
DDW Designs is a family interior design and project management studio in Arizona. This policy explains what information we collect on ddw.studio and in our client portal, how we use it, and the choices you have.
Who we are
DDW Designs ("we," "us") operates the website at ddw.studio and the client portal at ddw.studio/client.html. Questions about this policy can be sent to deedee@ddw.studio.
Information we collect
Contact form. When you write to us through the site, we receive the name, email address, project type, and message you enter, so we can reply.
Portal account. When you sign in to the client portal, we collect your email address and a password (stored only in hashed form by our sign-in provider), or, if you choose Google or Apple sign-in, the basic profile information those services share: your name, email address, and profile picture. We use these solely to recognize you and match your email to your project.
Project information. The portal holds the information we prepare for your project: selections, concept boards, proposals, invoices, documents, delivery updates, and the approvals or signatures you provide. When you approve or sign something in the portal, we record your typed name, the time, and a hashed version of your network address as part of that signature record.
Technical information. Our systems keep standard server logs, including network addresses, to protect against abuse and rate-limit sign-in attempts. The portal uses browser storage to keep you signed in on your device. We do not use advertising trackers or third-party analytics cookies.
Google and Apple sign-in
If you sign in with Google or Apple, we request only basic profile information (name, email address, profile picture). We use it to sign you in and to connect your email address to the project you belong to. We do not read your contacts, calendar, files, or any other data in those accounts, and we do not post on your behalf. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. You can revoke our access at any time from your Google or Apple account settings.
How we use information
- To provide the client portal and keep you signed in.
- To communicate with you about your project, including approvals, invoices, deliveries, and sign-in emails.
- To process payments you choose to make through the portal.
- To keep our systems secure and prevent misuse.
- To meet our business, legal, and accounting obligations.
Who we share it with
We never sell your information and we do not share it for advertising. We work with a small number of service providers who process information on our behalf and only as needed to run the portal:
- Supabase for our database and sign-in system (hosted in the United States).
- Netlify for website hosting.
- Resend for sending our emails.
- Stripe for payment processing. Card details go directly to Stripe; we never see or store your full card number.
- EasyPost for shipment tracking on orders placed for your project.
- Google or Apple, only if you choose to sign in with them.
We may also share information when required by law or to protect our rights, and with trade vendors strictly as needed to fulfill orders for your project (for example, a delivery address).
How long we keep it
Project records, invoices, and approvals are kept as business records for as long as we need them to serve you and to meet accounting and legal requirements. You can ask us to close your portal account at any time; we will delete or anonymize account information that we are not required to keep.
Security
Information travels over encrypted connections, passwords are stored hashed, sign-in links expire and work once, and access to project information is limited to the people it belongs to and our team. No system is perfectly secure, so please keep your password private and let us know right away if you suspect unauthorized access.
Your choices
- You can review, correct, or request deletion of your information by emailing us.
- You can sign out of the portal on any device, and reset your password whenever you like.
- You can revoke Google or Apple sign-in from those accounts' security settings.
Children
Our website and portal are intended for adults. We do not knowingly collect information from anyone under 18.
Changes to this policy
If we change this policy, we will update the effective date above and, for meaningful changes, let portal users know by email or a notice in the portal.
Contact
DDW Designs, Mesa, Arizona. Email deedee@ddw.studio.