Privacy Policy

Who is responsible for your information

Tended is a sole practice operated by Bryan from Castle Rock, Colorado. If you have a question about anything on this page, or you want your information removed, emailhello@yoursitetended.com and it will be handled by the same person who wrote this page.

What this site collects

The contact form

When you submit the form at /contact, these fields are sent:

• Your name and email address — required, so there is somewhere to reply.
• Your website address — optional. Supplied so the free health audit can be run.
• What you are after — the plan or type of work you selected.
• Your message — whatever you choose to write.

Please do not put passwords, card numbers, or other sensitive credentials into the message field. If work goes ahead, access is arranged separately and securely.

Your IP address

Your IP address is read from the request when you submit the form, and it is used for two things. It is held in the server's memory for a few minutes to rate-limit repeated submissions, which is what stops the form being used to send bulk mail — that record is never written to disk and disappears when the server process recycles. It is also included in the notification email so that abusive submissions can be identified. It is not used to profile you, and it is not shared with anyone.

Server logs

The site is hosted on Vercel, which records standard request logs — IP address, page requested, timestamp, browser user-agent — as an ordinary part of serving any website. Those logs are Vercel's, held under their retention policy, and are used only to keep the site running and secure.

What this site does not do

• No cookies. This site sets none at all, which is why there is no cookie banner.
• No analytics. There is no Google Analytics, no Plausible, no Fathom, and no equivalent. Visitor numbers are not measured.
• No tracking pixels, advertising tags, or third-party scripts of any kind.
• No mailing list. Contacting me does not subscribe you to anything. There is no newsletter to unsubscribe from and no automated follow-up sequence.
• Nothing is sold or rented to anyone, ever, under any circumstances.

Who else handles your information

Two companies process contact form submissions on my behalf. Both are used only to deliver the message to me:

• Vercel — hosts the site and runs the function that receives the form.
• Resend — delivers the resulting email to my inbox.

Once the email arrives, it sits in my mailbox with my email provider, in the same way any email you send me directly would. If you become a client, payments are handled by a third-party payment processor. Card details are entered with that processor and never touch this website or my systems — I never see or store a full card number.

How long it is kept

Contact form emails stay in my mailbox so I have a record of what was discussed. If a project or plan goes ahead, correspondence is kept for the life of the working relationship and for seven years afterward, which is the ordinary retention period for business and tax records. If nothing comes of the conversation, tell me and I will delete the thread.

Client information

If you become a client, looking after your website requires access to it — hosting, domain registrar, and site administrator logins. That access is stored in an encrypted password manager, used only to do the work you are paying for, and never shared. Backups of your site are stored off your server, encrypted, for the retention period your plan specifies.

When we stop working together, that access is handed back and my copies are removed within thirty days, other than backups already scheduled to expire and correspondence retained as described above.

Your rights

You can ask what information I hold about you, ask for it to be corrected, or ask for it to be deleted. Email hello@yoursitetended.com and I will respond within thirty days, usually far sooner. There is no form to fill in and no charge. If you are in a jurisdiction with specific statutory privacy rights, such as the EU, the UK, or California, those rights apply and this is how you exercise them.

The only exception is information I am required to retain for tax or legal reasons, which cannot be deleted on request.

Children

This is a service for businesses and is not directed at anyone under sixteen. I do not knowingly collect information from children. If you believe a child has submitted information through this site, email me and I will delete it.

Security

The site is served over HTTPS, form submissions are validated and rate-limited on the server, and credentials are held in an encrypted password manager with two-factor authentication. No system is perfectly secure, and I will not pretend otherwise — but if a breach ever affected your information, I would tell you directly rather than wait for you to read about it.

Changes to this policy

If this policy changes in substance, the date at the top of the page changes with it. Material changes affecting existing clients are emailed rather than published quietly.