Privacy Policy

Effective and last updated October 6, 2026

This Privacy Policy explains how Amy Pavia collects, uses, shares, and protects personal information in connection with amypavia.com.

1. Who We Are and What This Policy Covers

Amy Pavia ("Amy Pavia," "we," "us," or "our") is an individual based in Rhode Island, USA, who operates the website at https://amypavia.com (the "Site"). Amy Pavia decides why and how personal information collected through the Site is used, which makes her the controller of that information.

This Policy covers personal information collected through the Site, including its contact form, and in later communications about your inquiry or our services. It does not cover third-party websites or services, or information handled under a separate written agreement or notice. Your use of the Site is also governed by our Terms and Conditions.

2. Information You Provide

When you use the contact form, we collect:

• your first name, last name, and email address (required);
• your phone number (optional);
• your message in the "What can I help with?" field (required), and anything you choose to put in it;
• your choice on the optional checkbox agreeing to receive calls or text messages from Amy Pavia about your inquiry; and
• your confirmation, through the required checkbox, that you agree to our Terms and Conditions and this Privacy Policy.

We also keep the date and time of your submission as a record of these choices. The form contains a hidden anti-spam field that people do not see and should leave blank; it helps identify automated submissions, and submissions that fill it in may be treated as spam.

If you continue the conversation by email, phone, or text, or become a design client, we also collect the information you share with us, such as your business details, project materials, and the information needed to bill you. Please do not send sensitive information, such as Social Security numbers, financial account numbers, passwords, or health information, through the contact form.

3. Information Collected Automatically

The Site does not set any cookies of its own and does not use analytics, advertising, tracking pixels, or third-party scripts. Fonts and all other files are served from the Site itself, so visiting the Site does not send your information to outside font, analytics, or advertising services.

Like most web hosts, our hosting provider, Netlify, Inc., keeps standard server logs for security and operations. These logs may include your IP address, browser and device information, the pages you request, the referring page, and the date and time of each request. Netlify may also record technical details, such as your IP address, browser information, and the date and time, with each form submission.

4. How We Use Information

We use personal information to:

• read and respond to your inquiry by email and, if you agreed, by phone call or text message;
• discuss, provide, manage, and bill for services you request;
• operate, maintain, and secure the Site, and detect and prevent spam, fraud, and abuse;
• keep records of your consent choices and your agreement to our Terms and this Policy;
• comply with legal obligations and respond to lawful requests; and
• enforce our Terms, protect the rights, property, and safety of Amy Pavia and others, and establish, exercise, or defend legal claims.

We do not use your information to send marketing or promotional text messages.

5. Legal Bases for Visitors from the EEA and UK

The Site is intended for people in the United States. If the EU or UK General Data Protection Regulation applies to our handling of your information, we rely on these legal bases: taking steps at your request before entering into a contract, and performing a contract with you; our legitimate interests in responding to inquiries, running and securing the Site, preventing spam, keeping business records, and defending legal claims; your consent, for calls and text messages, which you may withdraw at any time; and compliance with our legal obligations.

6. How We Share Information

We share personal information only as described below:

• Hosting and form provider. Netlify, Inc. hosts the Site, receives, processes, and stores contact form submissions through Netlify Forms, may apply automated spam filtering, and keeps server logs.
• Email and phone service providers. Netlify notifies Amy Pavia of each submission by email, so your submission details are also delivered to her email account and stored by her email service provider. If we call or text you, phone carriers and messaging service providers carry those communications.
• Project tools and platforms. If you hire us for design work, materials you provide may be processed through the AI-assisted tools, hosting platforms, and domain registrars used to deliver your project, and shared with any contractors who help with it.
• Legal requirements. When we believe disclosure is required by law, subpoena, court order, or other legal process, or in response to a lawful government request.
• Protection of rights. When we believe it is necessary to enforce our Terms; protect the rights, property, or safety of Amy Pavia, our clients, or others; investigate fraud or security issues; or establish, exercise, or defend legal claims, including with our legal and professional advisers.
• Business transfer. If all or part of our business is sold, transferred, or reorganized (for example, if it is later operated through a company), personal information may be transferred as part of that transaction, subject to this Policy.
• With your consent. With others when you direct us to or agree that we may.

Each service provider's own privacy practices also apply to the information it handles.

7. No Sale of Personal Information or Targeted Advertising

We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and we do not use it for targeted advertising. The Site does not include advertising or tracking tools that would let third parties follow your activity across other websites.

8. Text Messaging

If you check the optional box agreeing to receive calls or text messages, we use your phone number only to contact you about your inquiry and the services you request. If you leave it unchecked, we will reply by email. Messages are conversational and service-related only, never marketing or promotional.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except service providers that deliver the messages. Nothing in this section limits disclosures required by law.

Reply STOP to opt out of text messages at any time, or reply HELP for help. Message frequency varies, and message and data rates may apply. Our Terms and Conditions include more details.

9. Retention

We keep personal information only as long as reasonably necessary for the purposes described in this Policy, such as responding to your inquiry, providing services, keeping business, tax, and consent records, resolving disputes, enforcing our agreements, and complying with law. How long we keep it depends on the type of information and whether you become a client. When we no longer need it, we take reasonable steps to delete or de-identify it. Netlify and our other service providers keep information according to their own retention practices, and copies may remain in backups for a limited time.

10. Security

We use reasonable measures designed to protect personal information from loss, misuse, and unauthorized access. However, no method of transmitting information over the internet or storing it electronically is 100% secure, so we cannot guarantee absolute security, and you share information at your own risk. If a security breach affects your personal information, we will notify you as required by applicable law.

11. Your Choices and Rights

Depending on where you live, you may have the right to ask us to give you access to, correct, or delete the personal information we hold about you, and to withdraw any consent you have given. To make a request, use our contact form and tell us what you are asking for. To stop text messages, reply STOP.

We may need to verify your identity before acting on a request, for example by asking you to confirm details from your submission or to reply from the email address you used. Where the law allows, an authorized agent may make a request for you with proof of authority. We will honor requests as required by applicable law, and we may keep information when the law requires or permits, such as records of your consent or information needed for legal claims. We will not discriminate against you for exercising your privacy rights. If we deny your request and applicable law gives you a right to appeal, you may appeal through the contact form.

If you are in the EEA or UK, you may also have the right to object to or restrict certain processing, to receive a portable copy of your information, and to complain to your local data protection authority.

12. Rhode Island Residents

This section provides the disclosures required by Rhode Island law, including the Rhode Island Data Transparency and Privacy Protection Act, to the extent it applies.

Categories of personal information we collect:

• identifiers and contact information: first and last name, email address, and phone number;
• communications: the contents of your messages and any later correspondence;
• consent and agreement records: your call and text choice and your agreement to our Terms and this Policy, with the date and time;
• technical information: IP address, browser and device information, pages requested, referring page, and date and time, from server logs; and
• client information: business details, project materials, and billing information, if you become a client.

Third parties to whom we may disclose personal information: Netlify, Inc. (hosting, form processing, and spam filtering); our email service provider; phone carriers and messaging service providers; AI-assisted tools, hosting platforms, domain registrars, and any contractors used for client projects; our legal and professional advisers; courts, government authorities, and others when required by law; and a successor in a business transfer.

Sale of personal information: We do not sell personal information to anyone.

How to contact us: You can reach us about this Policy or your personal information through our online contact form.

13. Children's Privacy

The Site is not directed to anyone under 16, and we do not knowingly collect personal information from anyone under 16. Our Terms require users to be at least 18. If you believe that someone under 16 has given us personal information, please tell us through the contact form, and we will delete it.

14. Do Not Track and Global Privacy Control

Some browsers send a "Do Not Track" signal. Because the Site does not track visitors across other websites and uses no analytics or advertising tools, it does not change how it operates in response to that signal. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale or sharing of your personal information. Because we do not sell or share personal information, the signal does not change how the Site works.

15. International Visitors

The Site is operated from the United States and intended for people in the United States. If you visit from another country, your information will be processed and stored in the United States, and possibly in other countries where our service providers operate, where data protection laws may differ from those of your country.

16. Links to Other Sites

The Site may link to other websites, including client websites shown in our portfolio. We are not responsible for the privacy practices of other websites, and we encourage you to read their privacy policies.

17. Changes to This Policy

We may update this Policy from time to time by posting the updated version on the Site with a new effective date. If we make a material change to how we use personal information we have already collected, we will give notice and obtain your consent where the law requires. Your continued use of the Site after an update means the updated Policy applies to you.

18. Contact Us

If you have questions about this Policy or want to make a privacy request, please reach us through our contact form.