Privacy Policy
Effective: May 26, 2026 · Last updated: May 26, 2026
CT Web Solutions ("we", "us", "our") is a sole proprietorship operated by Conner Tarr from Yankton, South Dakota, United States. This Privacy Policy explains what personal information we collect when you visit ctwebsolutions.com, request a quote, or hire us to build a website — and what your rights are under U.S. and international privacy law.
By using our website or services you consent to the practices described here. If you do not agree, please do not use the site.
1. Information we collect
Information you give us directly:
- Name, business name, email address, and phone number submitted via our contact form, Calendly booking, or chat widget.
- Project details, content, branding, logins, and any files you send us during a project engagement.
- Billing information when you purchase a package — card data is processed entirely by Stripe; we never see or store your full card number, CVV, or bank credentials.
- Correspondence between you and us (email, SMS, chat transcripts).
Information collected automatically:
- IP address, approximate location (city/region only), browser, device, operating system, referring URL, pages visited, and time spent on each page.
- Cookies and similar technologies (see our Cookie Policy).
- Aggregated analytics via Google Analytics 4.
Information from third parties:
- Public business listings (Google Business, Yelp, Yellow Pages) when we research prospective clients for outreach.
- Payment confirmations from Stripe.
- Calendar metadata from Calendly when you book a meeting.
2. How we use your information
- Respond to inquiries and follow up about potential projects.
- Deliver the services you purchased and provide ongoing support.
- Process payments and prevent fraud.
- Send transactional emails (project updates, invoices, account notices).
- Send marketing emails — only to people who opted in or whom we have a legitimate-interest basis to contact under CAN-SPAM (see our Anti-Spam Policy). You can opt out of marketing anytime.
- Improve our website, services, and content.
- Comply with legal obligations, enforce our Terms, and defend against legal claims.
We do not sell your personal information. We do not share it for cross-context behavioral advertising.
3. Legal basis for processing (EU/UK visitors)
If you are in the European Economic Area, United Kingdom, or Switzerland, we process your personal data under one or more of the following legal bases under the GDPR/UK GDPR: (a) consent you have given; (b) performance of a contract with you; (c) compliance with a legal obligation; or (d) our legitimate interests in operating, marketing, and securing our business, where those interests are not overridden by your rights.
4. Who we share information with
We share personal information only with the service providers we rely on to operate the business, and only the minimum needed for them to do their job:
- Hosting & infrastructure: Vercel
- Database: Supabase
- Payments: Stripe
- Email: Google Workspace (Gmail), Resend
- Analytics: Google Analytics
- Scheduling: Calendly
- Communications: Twilio (SMS), Discord (project channels by request)
Each provider has its own privacy policy. We may also disclose information (i) to comply with a subpoena, court order, or other legal process; (ii) to protect the rights, property, or safety of CT Web Solutions, our clients, or the public; or (iii) in connection with a merger, sale, or asset transfer of the business (you will be notified).
5. Cookies and tracking
We use a small number of cookies and similar technologies for essential site function and analytics. See our Cookie Policy for the full list and how to opt out.
6. Data retention
We keep personal information only as long as needed for the purpose we collected it:
- Lead inquiries: up to 24 months from last contact, then archived or deleted.
- Active client records: for the life of the engagement plus 7 years (tax and contract recordkeeping).
- Analytics data: 14 months per Google Analytics defaults.
- Email correspondence: 7 years.
- Backups: rolling 30 days.
7. Security
We use reasonable administrative, technical, and physical safeguards to protect your information — including TLS encryption in transit, access controls on our database, encrypted secrets storage, two-factor authentication on staff accounts, and least-privilege access. No method of transmission or storage is 100% secure; we cannot guarantee absolute security. If we discover a breach affecting your personal information, we will notify you and, where required, regulators in accordance with applicable law.
8. Your rights (all visitors)
Regardless of where you live, you can ask us to:
- Show you the personal information we hold about you.
- Correct information that is inaccurate or out of date.
- Delete your information (subject to legal retention obligations).
- Opt out of marketing emails — click "unsubscribe" in any email or email us.
Email conner@ctwebsolutions.com and we will respond within 30 days.
9. California residents (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you these additional rights:
- Right to know what categories of personal information we have collected, the sources, purposes, and parties with whom we share it.
- Right to delete personal information, subject to legal exceptions.
- Right to correct inaccurate personal information.
- Right to opt out of sale or sharing of personal information. We do not sell personal information and we do not share it for cross-context behavioral advertising.
- Right to limit use of sensitive personal information. We do not collect sensitive personal information beyond what you submit in your inquiries.
- Right to non-discrimination for exercising any of these rights.
To exercise any of these rights, email conner@ctwebsolutions.com with the subject "California Privacy Request." We may need to verify your identity (typically by confirming details you previously gave us) before responding. You may also designate an authorized agent to make a request on your behalf.
10. EU/UK residents (GDPR)
In addition to the rights above, you have the right to:
- Object to processing based on legitimate interests.
- Restrict processing.
- Receive your data in a portable format.
- Withdraw consent at any time (without affecting prior processing).
- Lodge a complaint with your local data protection authority.
If you are in the EU/UK and we transfer your data to the United States, we rely on appropriate safeguards (typically Standard Contractual Clauses from our sub-processors) for that transfer.
11. Children's privacy
Our services are intended for businesses and adults. We do not knowingly collect personal information from children under 13 (or under 16 in the EU/UK). If you believe a child has provided us information, email us and we will delete it.
12. Third-party links
Our website may link to third-party sites (our clients' sites, social media, vendor docs). We are not responsible for the privacy practices of those sites. Review their policies before submitting any information.
13. Do Not Track
Some browsers send a "Do Not Track" signal. There is no industry standard for how to respond, so we currently do not respond to DNT signals. You can still opt out of analytics — see the Cookie Policy.
14. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be announced on the site or emailed to active clients.
15. Contact us
CT Web Solutions — Conner Tarr
Yankton, South Dakota 57078, United States
Email: conner@ctwebsolutions.com
Phone: 402-750-3503