Here is exactly what we collect, why we keep it, and how to make us stop.

Effective date

This policy took effect on September 14, 2026, and applies to every visit to tufelan.com from that date. Where we change it, the date above moves and the change is described in the section near the bottom of this page called "Changes."

Controller

Tufelan, trading at tufelan.com, is the controller of the personal information described on this page. The studio is a two-person operation based in Austin, Texas, at 93 Workshop Way, Apt 3, Austin, Texas 97250, United States. Correspondence about a project goes through the inquiry form; correspondence about this policy goes to the address in the "Contact" section below, not to a project inbox.

Categories of data

The inquiry form on contact.html, on the front page and on the estimator page writes down your name, phone number, email address, the project or business address you give us, the kind of inquiry you selected, your notes, and the specification you asked about, along with the consent checkbox you ticked. Alongside that, the form automatically records the IP address the submission came from, the browser's user-agent string, the page that referred you, the moment the page rendered and the moment you pressed send.

The chat widget keeps whatever you type into it, plus a token stored in your browser's local storage so the conversation can continue if you leave and come back, and your name, phone or email if you give them to start the chat.

Cookies and local storage on this site record a single consent choice under the key site_consent_v2, and, when Google Ads, Microsoft Advertising or Meta Ads sent you here, a click identifier attached to the link you clicked: gclid from Google Ads, msclkid from Microsoft Advertising, and fbclid where a Meta Ads campaign is running. We do not collect payment details, account passwords or government identification anywhere on this site.

Why we use it

Name, phone, email, address and project notes are used to answer your inquiry, price a working estimate, and run the engagement if you become a client. Log data — IP address, user-agent, referrer and timestamps — is used to keep the form and chat working, to diagnose a broken submission, and to catch spam before it reaches a person. Cookie identifiers and click identifiers are used to measure whether a given ad, on Google Ads or Microsoft Advertising, led to an inquiry, and to hold or release the analytics and advertising signals described in the Consent Mode section below.

Legal basis for each use

Answering an inquiry and running an engagement rest on contract — we need your details to do the work you asked for, or to take the pre-contract steps of scoping it. Keeping log data long enough to catch abuse and keep the form reliable rests on legitimate interest, weighed against your right to privacy, and is limited to the 30-day retention period below. Setting advertising or analytics storage, and reading a click identifier for measurement, rests on your consent, given through the cookie banner, and is withdrawn the moment you decline or change your choice.

The platforms sending traffic here

Google Ads and Microsoft Advertising run paid traffic to this site, and Meta Ads may. When you arrive from one of their ads, the link carries a click identifier: gclid from Google Ads, msclkid from Microsoft Advertising, and fbclid from Meta Ads. We do not remove these before the platform's own tag reads them, and none of this implies that a platform has reviewed, approved or verified this site — that decision sits with the visitor and with us, not with the ad network.

Consent Mode v2

This site runs Google's Consent Mode v2. Four signals — ad_storage, ad_user_data, ad_personalization and analytics_storage — are held denied by default on every page load, before you have made a choice. If you allow storage through the cookie banner, those four signals are set to granted for that browser. If you decline, or later withdraw your choice, all four are set back to denied immediately, and stay denied until you change your mind again through the cookie choices control in the footer. Consent Mode does not stop the page from working; it only controls whether advertising and analytics storage may be set.

Processors and platforms

Google Ireland Ltd and Google LLC operate Google Ads, and receive the consent signals and the gclid identifier tied to a click on their own ad. Microsoft Ireland Operations Ltd operates Microsoft Advertising, and receives the msclkid identifier; its own handling of that data is described in the Microsoft privacy statement at privacy.microsoft.com. Meta Platforms Ireland Ltd operates Meta Ads and receives the fbclid identifier where a Meta campaign is running. Beyond the ad platforms, the hosting provider that serves this site and stores the enquiry database, and the mail provider that carries the notification email to the studio's inbox, both handle the same inquiry data in order to deliver it — neither is permitted to use it for its own marketing.

Transfers outside your country

Google, Microsoft and Meta all operate infrastructure outside the United States, including in the European Economic Area, and a message sent to any of them may be processed there. Where that happens, the transfer relies on the standard contractual clauses each platform publishes for exactly this purpose, or on the equivalent lawful transfer mechanism the platform has adopted, rather than on an informal assurance from us.

These periods are the ones stated in the table above: 24 months for inquiries and their email copies, 18 months for chat transcripts, 30 days for server and access logs, and 12 months for the record of a consent choice. Nothing on this site is kept "as long as necessary" without a number attached to it.

Security measures

The site is served over encrypted HTTPS connections throughout. The inquiry database sits behind access controls limited to the two people who run the studio, and the honeypot fields built into the form (company and website, hidden and unlabelled) exist to catch automated submissions before they reach a human inbox. No payment or card data is ever collected, so there is none to secure or lose.

Under the GDPR you can ask to see the personal data we hold about you (access), have inaccurate data corrected (rectification), have it deleted where there is no reason left to keep it (erasure), have its use limited while a dispute is sorted out (restriction), receive it in a portable format to move to someone else (portability), object to a use based on legitimate interest, and withdraw consent for anything based on consent — the advertising and analytics storage described above, most directly — at any time, without it affecting anything you did before withdrawing.

Complaints

If you believe we have handled your data incorrectly, you can raise it with us directly using the contact details below, and separately, you keep the right to lodge a complaint with your own state's Attorney General, with the California Privacy Protection Agency if you write in from California, or with the relevant data protection authority if you reach us from Europe, without needing to raise it with us first.

Under the CCPA and the state privacy laws modelled on it, California residents and residents of the other states now covered can ask what personal information we hold, ask for it to be deleted, correct it, and opt out of the sale or sharing of personal information — a request we honour by turning off the advertising and analytics storage signals described above for that visitor's browser and by not selling data to anyone, which we do not do regardless of a request. Nothing on this site treats these rights differently based on which state a visitor writes from.

Global Privacy Control

If your browser sends the Global Privacy Control signal (the Sec-GPC header), we treat it as an opt-out of advertising and analytics storage automatically, the same as if you had declined the cookie banner, and we do not ask you to repeat that choice through the banner as well.

Children

This site is built for business owners and their staff, not for children, and we do not knowingly collect information from anyone under 16. If you believe a minor has submitted information through the form or the chat widget, write to the address below and we will remove it.

How to make a request

Email office@tufelan.com with the word "privacy" in the subject line, or write to Tufelan, 93 Workshop Way, Apt 3, Austin, Texas 97250, United States, and describe what you want done — access, correction, deletion, or an opt-out of sale or sharing. We answer within 7 days, either with the information requested or with a plan for how much longer it will take and why.

Changes to this policy

If we change what this page says, the "Effective and last updated" date near the top of this page moves to the date of the change, and where the change is substantial — a new category of data, a new platform receiving it — we say so plainly in this section rather than only updating the date.

Contact

For anything on this page, write to office@tufelan.com or call +1 (499) 555-0889. For a project inquiry, use the form on the contact page instead, so it reaches the right inbox.