Privacy Policy

1. Who We Are

Lunar Web Studio LLC ("we," "us," or "our") is a web design and development studio based in Austin, Texas. We provide strategic website design, development, SEO, and related services to businesses worldwide.

This policy applies to information collected through lunarwebstudio.com and any services we provide through this site. It also covers information we hold about businesses we have researched and contacted without them approaching us first. See Section 3, which is where to start if we emailed you out of the blue.

2. Information We Collect

Information you provide directly

This site has four forms. Each collects only what it needs to do its job, and none of them has to be filled in to browse the site.

Consultation inquiry (contact page)

When you submit our consultation inquiry form, we collect:

• Full name
• Email address
• Phone number (optional)
• Business or organization name
• Current website URL (optional)
• Project type, budget range, and project goals
• How you heard about us (optional)

Free site scorecard request

When you request a free site scorecard, we collect your website address, business name, your name, email address, phone number (optional), and any notes you add. We also record how long the page had been open before you submitted: that is how we tell a typed submission from an automated one.

Client file drop

If we are building your site, our file drop page collects your name, email address, the project or property it relates to, any share link you paste, the photographer or source credit, permission notes, and any single file you attach.

Project design brief

Where we send a client a private design brief, it collects the business name, your name, email address, phone number, an optional link to your files, and the answers you give in the questionnaire itself.

Information collected automatically

We use Google Analytics 4 to understand how visitors use this site (pages viewed, approximate location, device and browser type, referral source). Analytics is off by default and only runs after you accept it via our cookie banner. We do not use advertising pixels, ad-personalization, or cross-site behavioral tracking. See Section 7 for details on the cookies set by Google Analytics.

Our hosting provider (Netlify) may collect standard server-side logs as part of their infrastructure operations. These logs are subject to Netlify's Privacy Policy.

Information stored in your own browser

Two pages save your answers locally so work in progress is not lost: the client file drop remembers your name, email address and project, and the project design brief autosaves the whole questionnaire as you type. That data is held in your browser’s local storage, on your own device: it is not sent to us until you press send, and clearing your browser data removes it. Neither page is linked from the site’s navigation; both are sent directly to a client.

3. Businesses We Contact (Prospect Research)

Everything above describes information you chose to give us. This section describes the opposite case, and it is the one most likely to have brought you here: we also hold information about businesses we have researched but never met, gathered before any contact and without that business asking us to. If you received an email from us out of the blue, or a link to a report about your own website, this is the section that applies to you.

Where it comes from

Three public sources, and nothing else:

• Google Maps Platform business listings: the business name, website address, street address and phone number a business publishes on its own Google listing, found by searching a category and area (for example, roofers near a particular town).
• The business’s own public website: we load the site the way any visitor would, take screenshots of the home page on a desktop and a phone, and run an automated check of it.
• Publicly available web pages: where a business publishes no contact address, we may search public sources for one, and sometimes for the name and job title of the person who would own this decision.

We do not buy contact lists, we do not scrape social networks for personal profiles, and we do not use data brokers.

What we hold

• Business name, website address, street address and phone number
• A contact email address, and sometimes a contact name and job title
• Screenshots of the public website, and an automated report on it: the site-health scorecard you may have been sent a link to
• Sometimes a sample redesign of the home page, built before any contact
• Our own notes, and a record of which emails we sent and whether they were opened or clicked

Why, and our legal basis

We use it to decide whether a business is a good fit for what we do, to prepare something specific to show them, and to send a small number of emails introducing ourselves. Where the GDPR or UK GDPR applies, our legal basis is legitimate interests: offering a relevant professional service to a business.

We have weighed that interest against the rights of the people involved, and record the reasoning here rather than simply asserting the conclusion: the information is business contact data rather than data about someone’s private life; it is published by the business for the purpose of being contacted; the offer is directly relevant to a business that has a website; the volume any one business receives is small; and opting out is one click and permanent. Where a business is a sole trader and its contact details are also personal data, everything in Section 9 applies in full.

How to make it stop

Every email we send carries an unsubscribe link, and that link works without replying to us or asking us for anything. You can also email hello@lunarwebstudio.com and ask us to stop, or to delete what we hold. We will do both.

When you opt out we keep a minimal record of the address so that our system knows never to contact it again. That record exists only to honor the opt-out and is used for nothing else: deleting it entirely would mean a later search could surface the same business and start over.

How long we keep it

If a business does not become a client, we delete its research record within 24 months of the last email we sent, or sooner on request. We keep a record of website addresses we have already assessed for longer, so the same business is not researched and approached again from scratch; that record holds the web address and the date, not the contact details.

What we never do with it

We do not sell it, rent it, trade it, or pass it to anyone who wants to market to the same businesses. The sample reports and redesigns we build are shown to the business they are about and to nobody else.

4. How We Use Your Information

We use the information you provide through our contact form to:

• Review and respond to your consultation inquiry
• Write up a scope, timeline, and price for your project
• Communicate with you about your project
• Fulfill a contract or take steps toward entering a contract with you

We do not sell, rent, or trade your personal information to third parties. We do not use your information for advertising purposes or add you to marketing lists without your explicit consent.

5. Legal Basis for Processing

If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction with similar data protection laws, our legal basis for processing your information is:

• Legitimate interest: to respond to inquiries you initiate and manage business communications.
• Pre-contractual necessity: to prepare proposals and take steps you request before entering a service agreement.
• Consent: where you have explicitly agreed to our use of your information at the point of submission.

6. Sharing Your Information

We share your information only as necessary to operate this site and respond to your inquiry:

• Netlify: Our hosting and form-processing provider. Submissions from every form on this site (consultation inquiries, demo requests, client file drops including any attached file, and project design briefs) are received and stored through Netlify's form handling infrastructure. See Netlify's Privacy Policy.
• Google (Google Analytics 4): If you accept analytics in our cookie banner, anonymized usage data (pages viewed, device type, approximate location, referral source) is sent to Google to help us understand site traffic. See Google’s Privacy Policy.

For the research described in Section 3, two more are involved:

• Google (Maps Platform): We search Google’s business listings by category and area to find businesses to assess. We send Google the search terms, not information about you.
• StellarReach: The prospecting and outreach software we use. It stores the research records described in Section 3 on our behalf and sends the emails we approve. If you contact StellarReach about an email you received from us, they will refer you back to us, because the decision to contact you was ours.

We may also disclose your information if required by law, court order, or government authority, or to protect the rights, property, or safety of Lunar Web Studio LLC or others.

7. Cookies

This site sets one cookie of its own: the record of your answer to the cookie banner. We also use Google Analytics 4 to understand how visitors use the site, but only after you explicitly accept analytics via that banner. Until you accept, no analytics cookies are stored, no analytics events are sent, and the Google tag is not downloaded at all: the banner is the first thing that causes any request to Google.

You can change your mind at any time by clearing the cookie_consent cookie in your browser; the consent banner will reappear on your next visit. You can also disable cookies entirely in your browser settings; this site remains fully usable with cookies switched off. We will simply ask about analytics again on your next visit.

8. Data Retention

We retain consultation form submissions for up to 24 months from the date received, or for as long as necessary to fulfill the purpose for which they were collected (for example, for the duration of a client project). After that period, submissions are deleted from our systems.

Files and project details sent through the client file drop or a design brief are kept for the duration of the project and for up to 24 months afterward, so a returning client’s site can be rebuilt or restored from the same material.

9. Your Rights

Depending on where you live, you may have the following rights regarding your personal data:

EEA / UK residents (GDPR)

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete data.
• Erasure: Request deletion of your data, subject to legal obligations.
• Restriction: Ask us to limit how we use your data while a dispute is resolved.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, withdraw it at any time.

You also have the right to lodge a complaint with your local data protection authority.

California residents (CCPA / CPRA)

• Know: Request disclosure of the personal information we collect, use, and share.
• Delete: Request deletion of your personal information.
• Correct: Request correction of inaccurate personal information.
• Opt out of sale or sharing: We do not sell or share your personal information.
• Non-discrimination: We will not discriminate against you for exercising your rights.

If we contacted you first

These rights are not limited to people who filled in a form here. If you are a business we researched and emailed without being asked (see Section 3), the same rights apply to everything we hold about you, and two of them are the ones most worth knowing about: objection, because our basis for that processing is legitimate interests, and erasure. You do not have to give a reason for either, and the unsubscribe link in any email we sent you is the fastest route.

To exercise any of these rights, contact us at hello@lunarwebstudio.com. We will respond within 30 days.

10. Security

We implement reasonable technical and organizational measures to protect your information, including HTTPS on every request, security response headers that restrict what a browser will load and where this site may be embedded, and access controls on the systems that receive form submissions. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

11. Children's Privacy

This website is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will revise the "Last updated" date at the top of the page. We encourage you to review this policy periodically. Continued use of the site after changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this privacy policy or your personal data, please contact us: