Privacy Policy

This Privacy Policy explains how Wallink Systems (“we,” “us,” “our”) collects, uses, shares, and protects information about you when you visit or interact with our website at wallinksystems.com and any related pages and forms (the “Site”). By using the Site, you agree to the practices described here. If you do not agree, please do not use the Site.

1. Who we are

Wallink Systems is an independent digital studio based in Austin, Texas. We build and maintain professional websites and provide branding and creative services for small businesses. We are responsible for the personal information collected through the Site. You can reach us at [email protected].

2. What we collect

From visitors to the Site, we collect information in two ways:

• Contact form submissions. When you fill out our contact form, we collect your name, business name, email address, phone number, project type, and any message you write. This is submitted voluntarily by you.
• Page-view analytics. We log which pages are visited along with an anonymous session identifier. We do not track IP addresses, device fingerprints, or any personally identifiable information through analytics.

We do not use third-party advertising trackers, pixels, or behavioral profiling tools of any kind, and we do not knowingly collect sensitive personal information (such as government-ID, health, or financial-account information).

If you are a client with a portal account, we hold more than this — see Section 3 below, which sets out exactly what and for how long.

3. Client portal accounts

If we build and maintain your website, we create an account for you in our client portal. This section applies only to that account — it does not apply to ordinary visitors to the Site.

The portal holds:

• Your account details. Business name, contact name, and the email address we set the account up with, which is also your username.
• Your plan. Which package you are on, when it started, your website address, and your domain and its renewal date.
• Your service record. The updates we have completed for you, the update requests you send us, and your referral code with any referrals credited to it.
• Files you upload. Logos, photos, and documents you send us for use on your site.
• Your password — as a one-way hash, never the password itself. We cannot see it, recover it, or tell you what it is. If you lose it, we send you a link to set a new one. The links used to set or reset a password are single-use, expire, and are themselves stored only as hashes.

We use this to deliver and support the service you are paying for, and for no other purpose. The portal holds no card or bank details. Payments are handled by Stripe — we never see, receive, or store your card number, and no payment information is shown in the portal.

Only you and Wallink Systems can see your portal data.Every client’s information is kept to their own account, and uploaded files are held in private storage that is not reachable from a public web address.

We keep this information for as long as we are working together and for up to 30 days after the engagement ends, during which we hand over your site, code, and data as our client agreement requires. After that the portal account and its uploaded files are deleted. You can ask us for a copy of everything in your account, or ask us to delete it, at any time by emailing [email protected]. Closing your portal account does not affect your website, which you own outright either way.

4. How we use it

We use the information we collect to:

• Respond to your inquiry and follow up about a potential project;
• Send you a proposal if you request one;
• Operate, maintain, secure, and improve the Site;
• Detect and prevent spam, abuse, and security incidents;
• Comply with our legal obligations and enforce our agreements.

We do not sell or “share” your personal information (as those terms are defined under California law), and we do not disclose it to third parties for their own marketing purposes.

5. Legal bases for processing

Where laws such as the EU/UK GDPR apply, we process personal information on these bases: your consent; steps taken at your request before entering a possible contract; our legitimate interests in operating and securing the Site and responding to you; and compliance with legal obligations. Where we rely on consent, you may withdraw it at any time.

6. Service providers we use

We use the following providers to operate the Site. Each processes data on our behalf and has its own privacy policy. We do not sell your information to any of them.

• Vercel — hosts the Site and processes web requests (United States).
• Supabase — stores contact-form submissions, client portal accounts, and files uploaded to the portal, in a database and private file storage hosted in the United States.
• Stripe — processes payments for clients. Card details go directly to Stripe and are never stored by us.
• Resend — delivers email notifications when a form is submitted.
• Cloudflare — provides security, DDoS protection, and content delivery in front of our hosting.
• Upstash — provides rate limiting to protect our forms from abuse.

We may also disclose information if required by law or legal process, to protect our rights or the safety of others, or in connection with a business transfer (such as a merger or sale of assets), subject to this Policy.

7. Cookies & Do Not Track

The public Site does not use marketing or tracking cookies. The only cookie we set is a session cookie used exclusively by our internal admin panel; visitors to the public Site do not receive it. You can control cookies through your browser settings.

Do Not Track.Some browsers offer a “Do Not Track” (DNT) signal. Because there is no common industry standard for how to respond to DNT, we do not currently respond to DNT signals — but this is largely moot, as we do not track you across third-party websites or serve behavioral advertising in the first place.

8. Data retention & security

We retain contact-form submissions only for as long as there is a reasonable business purpose (typically the duration of any active or prospective client relationship), after which we delete or de-identify them. We maintain administrative and technical safeguards designed to protect your information, including encryption in transit (HTTPS/SSL), restricted access, rate limiting, bot protection, and secure infrastructure. Client portal passwords are stored only as salted one-way hashes, so they cannot be read or recovered by us or by anyone who obtained the stored data. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you and any regulators as required by applicable law.

9. Your rights

Depending on where you live, you may have some or all of these rights regarding your personal information:

• Access a copy of the information we hold about you, and know how it is used and shared;
• Correct inaccurate or incomplete information;
• Delete your information, subject to legal exceptions;
• Object to or restrict certain processing, and withdraw consent;
• Request your information in a portable format, where applicable.

To exercise any right, email us at [email protected]. We may need to verify your identity before responding, and you may use an authorized agent where the law allows. We will not discriminate against you for exercising your rights. We will respond within the time required by law (generally within 30–45 days).

10. California & other U.S. state privacy rights

If you are a California resident (CCPA/CPRA) or a resident of another U.S. state with a comprehensive privacy law, you have the rights listed above. For transparency, the categories of personal information we may collect are identifiers and contact details (such as name, email, phone, and business name) and internet/usage activity (anonymous page-view analytics). We collect these to respond to inquiries and operate the Site, as described above.

We do not sell or share your personal information, and we have not done so in the preceding 12 months.California’s “Shine the Light” law does not apply because we do not share personal information with third parties for their own direct-marketing purposes. To exercise any state privacy right, contact us at [email protected].

11. International visitors

We are based in the United States and the Site is hosted and operated in the United States. If you access the Site from outside the U.S., your information may be transferred to, stored, and processed in the U.S., where data-protection laws may differ from those in your country. By using the Site, you consent to this transfer.

12. Children

The Site is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, contact us and we will delete it.

13. Changes to this policy

We may update this Policy from time to time. When we do, we will revise the effective date at the top of this page. Continued use of the Site after changes are posted constitutes your acceptance of the updated Policy.

14. Contact

Questions about this Policy? Email us at [email protected].