Privacy Policy

1. Who This Is

WebMonterey LLC is a California limited liability company operating from Monterey, California. "We", "us" and "I" mean WebMonterey LLC.

This policy covers this website only. Websites we build and manage for clients are the client's own, and each has its own policy.

2. What This Website Collects

The public pages of this site are static. Nothing here needs an account to read, there is nothing to log into, and no profile is built about you from browsing. The client portal is a different thing and has its own section below.

Our host records the ordinary information every web server sees — the address a request came from, the browser making it, and when — to deliver the site and to defend it against attack. That is a security and delivery function, not an audience measurement one.

Anything that measures you rather than protects the site — analytics, advertising, embedded third-party content — loads only after you have said yes to that category. Not before, and not "loaded but not used".

3. When You Contact Us

The form asks for your name, your email address, the address of your website, and your message. Your phone number is optional. That is all it asks for and all it takes.

What you send is emailed to us so we can answer you, and saved to our database as a record of the enquiry. Saved alongside it are the network address the submission came from, the browser that sent it, and the country it was sent from. Those three are kept to tell a real enquiry from automated spam, not to build a picture of you.

The form is also checked by Cloudflare Turnstile before it is accepted, which looks at how a request behaves rather than at who is making it. What you send is not sold, rented, or handed to anyone marketing anything.

You can also reach us by email or phone without using the form. The same applies to whatever you send that way.

4. The Client Portal

If your engagement includes portal access, the portal holds your name and email address for the account, your invoices and payment history, the files and documents exchanged for your project, and the messages and requests you send through it.

You sign in either with a password or with a single-use link sent to your email address. Passwords are stored hashed — we cannot read yours, and neither can anyone who gets hold of the stored value. A sign-in link is good once and expires shortly after it is sent.

Portal information exists to run your engagement. It is not used for marketing, not sold, and not shared with anyone beyond the services described below that are needed to deliver it.

Access is yours for the life of the engagement. When it ends, so does the account — you will be told beforehand and given a chance to download what is yours.

5. Cookies and Your Choices

One cookie is set by this site: it records the privacy choice you made, so you are not asked on every page. It lasts a year and it is the only cookie that exists before you choose anything.

Choices are grouped into four categories. Essential is the site working at all and cannot be switched off. Functional, analytics and marketing are yours to allow or refuse, individually.

You can change your mind at any time using the Cookies link at the foot of every page. Refusing a category does not degrade the site — nothing here depends on being tracked.

6. Global Privacy Control

If your browser sends a Global Privacy Control signal, we treat it as a refusal of analytics and marketing. Those are switched off automatically and you are not asked again.

We honour it because it is the right default, and because California treats it as a valid opt-out of the sale or sharing of personal information. From January 2027 every browser sold here has to offer the setting.

7. Services This Site Depends On

The site is delivered by Cloudflare, enquiries are stored on Cloudflare, and the form's spam check is Cloudflare Turnstile. Email from the form is sent through Mailgun. Where you have portal access, the information in it is stored on Cloudflare as well. Each of these processes information on our behalf in order to do that job, and each has its own privacy terms.

Anything beyond that — an analytics tool, an embedded video, a marketing pixel — runs only within the category you have consented to, and is listed in the consent dialog before it loads.

8. How Long Things Are Kept

Enquiries are kept while they are relevant to the conversation, and afterwards for as long as we need a record of the work or the law requires one.

Portal information follows the engagement: files and messages are kept while it runs and afterwards while we need a record of it. Invoices and payment records are kept for as long as tax and accounting law requires, which is longer than the rest — those we cannot delete on request.

The consent cookie expires after a year. Server logs are kept only as long as they are useful for security and troubleshooting.

Ask us to delete something and we will, unless we are required to keep it.

9. Your Rights

If you are in California, you have the right to know what personal information we hold about you, to have it corrected, and to have it deleted. You also have the right to opt out of the sale or sharing of personal information, and not to be treated differently for exercising any of these rights.

We do not sell personal information and we do not share it for cross-context behavioural advertising. There is nothing to opt out of, and the Global Privacy Control signal is honoured regardless.

To exercise any of this, email us. We may need to confirm who you are before acting on a request about someone's personal information — that check protects you, not us.

10. Children

This site is for businesses and is not directed at children. We do not knowingly collect personal information from anyone under 13. If you believe a child has sent us something, tell us and we will delete it.

11. Changes to This Policy

We may update this policy. The current version always lives at this address, and the date at the top of this page changes when the wording does.

A change that materially affects how we handle information will be raised with active clients directly rather than left to be discovered here.

12. Contact

Questions about this policy, or a request about your information, go to hello@webmonterey.com.

WebMonterey LLC, Monterey, California.