Privacy Policy

Last updated: 1 September 2026

This policy explains what Webflow Atelier collects when you visit webflowatelier.com, why we collect it, and what you can ask us to do about it.

We are Webflow Atelier, a design and web development studio based in Miami, Florida, United States. If you want to reach us about anything in this policy, write to pablo@webflowatelier.com.

What we collect

When you fill out a form

Our project and consultation forms ask for:
- Your first name
- Your email address
- Your website address
- The service you are interested in
- Your budget range
- How you found us
- Whatever you write in the message field

You choose what to put in these fields. If you would rather not share your budget or your website, the form still works.

Our forms also contain a hidden field that real people never see or fill in. It exists only to catch automated spam. If it is filled in, we discard the submission.

When you book a call

Some of our pages link to a Google Calendar booking page. If you book, Google collects your name, email and the time you chose, and shares that with us so we can hold the appointment. Anything you type into the booking notes comes to us as well.

When you just browse

Like most websites, ours records technical information automatically: your IPaddress, browser and device type, the pages you visit, how long you stay, and the page or search that sent you here.

We also measure some behavior on the site: whether you scrolled through a page, how far you got in a multi-step form, which calls to action you clicked, and whether you arrived from an AI assistant such as ChatGPT or Perplexity. This is counted, not tied to your name.

Why we collect it

- To answer you when you contact us
- To prepare a proposal or estimate you asked for
- To hold an appointment you booked
- To understand which parts of the site are useful and which are not
- To keep the site working and protect it from spam and abuse
- To keep records of the projects we quote and deliver

We do not sell your data. We do not share it with anyone for advertising, and wehave advertising storage switched off on this site.

Legal basis, if you are in Europe or the UK

If the GDPR or UK GDPR applies to you, our legal bases are:
- Legitimate interest for measuring how the site is used and for keeping it secure and free of spam.
- Performance of a contract, or steps toward one when we handle your inquiry, hold your appointment, or work on your project.
- Legal obligation where we have to keep records You can object to anything we do on the basis of legitimate interest. See What you can ask us to do below.

Who else handles your data

We use third-party services to run the site. Each one processes some data on our behalf, or receives it because of how the web works:

Anything loaded from another server, including a typeface, means your browser contacts that server and it sees your IP address. That is unavoidable for these serrvices above, and it is worth knowing.

If you are in Europe, note that several of these transfer data to the United States. Those transfers rely on the providers' own safeguards, including the EU-US Data Privacy Framework and standard contractual clauses.

Cookies

Necessary cookies. These make the site work: they keep forms functioning and remember which language you are reading. The site cannot run without them.

Analytics cookies. Google Analytics sets these to count visits and see which pages are read. Right now they are set when you arrive, before we ask you. We have advertising and personalization storage switched off, so nothing here feeds an ad profile.

If you do not want to be counted, you can block cookies in your browser settings, use Google's own Analytics opt-out browser add-on, or write to us and we will handle it.

We are working on a consent banner so this becomes a choice you make rather than a setting you have to change. When it is in place we will update this policy and the date at the top.

Cookies

How long we keep things

- Form submissions and booking details: as long as the conversation is  active, and for up to 3 years afterwards, so we can find our own history with a  client or prospect.
- Analytics data: as configured in Google Analytics, currently 14 months.
- Project records: for as long as we need them for accounting and legal reasons.

What you can ask us to do

Wherever you are, you can ask us to:

- Tell you what we hold about you
- Correct it if it is wrong
- Delete it
- Stop using it for a particular purpose
- Send you a copy in a portable format

If you are in Europe or the UK you also have the right to object to processing based on legitimate interest, including our analytics, and the right to complain to your national data protection authority.

If you are in California, you can ask what personal information we collected inthe past 12 months, ask us to delete it, and ask us not to sell it. We do not sell personal information, so there is nothing to opt out of.

To exercise any of this, write to pablo@webflowatelier.com. We will replywithin 30 days.

Children

Our services are for businesses. We do not knowingly collect information from anyone under 16. If you believe a child has sent us information, write to us and we will delete it.

Security

Form submissions travel over an encrypted connection and are stored by our providers with access limited to the people on our team who need it. No system isperfectly secure, and we will not claim otherwise.

Changes

If we change this policy we will update the date at the top. If the change issignificant, we will say so on the site.