Privacy Policy

What we collect

The contact form. If you fill out the contact form on this site, we collect your name, email address, and whatever message you send us. We use it for exactly one thing: to read your message and get back to you. Submissions are delivered to us by email through Resend, our email provider.

Server logs. Like any website, our hosting provider (Vercel) automatically logs basic technical data — things like IP address, browser type, and request timestamps. This is standard infrastructure logging for security and uptime, not something we actively review or use to track you.

Cookies and analytics. With your consent, we use PostHog — a product-analytics tool — to understand how people use this site: which pages get read, what gets clicked, and where folks hit a snag. PostHog sets a first-party cookie to do this, and processes the data on our behalf under its own privacy terms.

We ask first. Analytics stay switched off until you accept the cookie banner — decline and nothing loads, no cookie is set, and the site works exactly the same. You can change your mind whenever you like:

Manage cookie preferences

If you become a client. If you hire Headwaters for a project or retainer, payment is handled directly by Stripe. Headwaters does not see or store your full card details — Stripe processes and secures that information under its own privacy policy. Any project details, contracts, or account information you share with us as a client are used only to deliver the work you hired us for.

What we don't do

We don't sell your information. We don't share it with third parties for their marketing purposes. We don't use it for anything beyond responding to you or delivering the service you asked for.

Who we share data with

Only the vendors that help us run this site and our business: Resend (email delivery), PostHog (product analytics, only with your consent), Stripe (payment processing, clients only), Vercel (hosting), and Supabase (application backend, for client projects). Each of these providers has its own privacy practices governing the data that passes through their systems.

Data retention

We keep contact form submissions and client records for as long as reasonably needed to respond to you or fulfill a project, and then delete or archive them. If you'd like something deleted sooner, just ask — see the contact info below.

Children's privacy

This site isn't directed at children, and we don't knowingly collect information from anyone under 13.

Your rights

You can ask us at any time what information we have about you, ask us to correct it, or ask us to delete it. Email us and we'll take care of it.

Changes to this policy

If we change how we handle your information, we'll update this page and change the effective date at the top. Significant changes (like adding analytics or cookies) will be called out clearly, not buried.

Contact

Questions about this policy or your data? Email aidan@headwaters.agency.