Privacy Policy

Northern Arizona Design, also called NAZ Design on some pages, provides website design, hosting, maintenance, updates, and related services for local businesses. This policy explains how we collect and use information through our website, contact forms, checkout flow, thank you page, phone, text, email, and customer service messages.

This policy does not control the privacy practices of customer websites we build for other businesses unless that customer website links to this policy.

We collect information you choose to send us, including your name, email address, phone number, business name, business type, town or service area, current website or social link, domain preference, business goals, style notes, hours, services, prices, menu items, product details, photos, logos, and other business materials you submit.

If you contact us through a form, email, phone, or text, we collect the information needed to answer you and work on your project.

If you pay for a plan, Stripe collects and processes your payment information. We do not collect or store full card numbers. Stripe may send us payment status, customer email, subscription status, invoice details, and related account information so we can provide service.

Our website host, email provider, payment provider, and security tools may collect basic technical information, such as IP address, browser type, device type, pages visited, request time, and error logs.

When you use a campaign, promo, or checkout link, we may collect first party visitor and session identifiers, UTM source, medium, campaign, content, and term, referrer page and referrer domain, promo code, topic, and checkout choice, rough device type and browser family, and Cloudflare country, region, city, and data center code.

We use local storage and session storage in your browser to remember the first visit and current visit details for attribution.

We use information to answer questions, follow up with leads, provide website design and hosting services, prepare drafts, publish approved sites, handle updates, manage billing, prevent spam or abuse, protect the site, comply with legal and accounting duties, and improve the service.

We do not sell personal information. We do not use customer information for targeted advertising.

We use attribution information to understand which social posts, campaigns, links, and promo paths produce leads and paid signups. We do not use it for targeted advertising.

Photos, logos, text, menus, prices, service lists, and other materials you send may be used to prepare, publish, maintain, and update your website.

Do not send materials you do not have permission to use. Do not send sensitive personal information, passwords, private keys, regulated health information, financial account details, or anything you do not want used for your website project.

We share information only as needed to run the service. This may include Cloudflare for hosting, Stripe for checkout, subscriptions, invoices, and billing portal access, Resend or another email provider for lead and customer emails, domain or hosting providers when needed for your site, and professional advisers if needed for legal, tax, accounting, or security work.

We may keep lead records in Cloudflare KV and may send compact attribution details in Stripe metadata so checkout and subscription records can be connected to a lead.

We may disclose information if required by law, to protect our rights, to prevent fraud or abuse, or as part of a business transfer.

We may show finished customer websites or business names as examples only when we have permission or when the example is clearly fictional or a demo.

Lead records are kept so we can follow up unless you ask us to remove them. Customer project records, billing records, messages, invoices, and site materials may be kept while your account is active and as long as needed for support, legal, accounting, and business records.

Attribution details may stay with lead records in Cloudflare KV and may be reviewed through a protected internal export. We do not publish the export.

You can ask us to access, correct, or delete lead information we hold about you. You can also ask us to stop contacting you. We will honor deletion requests unless we need to keep certain records for billing, security, legal, or accounting reasons.

You can cancel a paid subscription through the Stripe billing portal when available, or by contacting us directly.

Our public pages may load resources from service providers such as Cloudflare, Stripe, Google Fonts, email services, or other tools needed to run the website. Those providers may collect technical information under their own policies.

We do not store raw IP addresses in lead records. We do not publish the export. We do not use advertising pixels. We do not use cross site tracking. We do not sell this information. We do not use it for targeted advertising.

If we add advertising pixels or other tracking tools later, we will update this policy before using them for public traffic.

We use reasonable safeguards, such as HTTPS, hosted payment processing, access controls, and limited provider access. No online service is perfectly secure.

This service is for business owners and adults. It is not directed to children under 13. Do not submit information about children.

We may update this policy as the service changes. The updated version will show a new effective date.