Privacy Policy

Sacardo is a design and development studio in Reading, Pennsylvania, operated by Isaac Pichardo. This page explains, plainly, what information Sacardo collects through this site and the work that follows from it, why, who else handles it, how long it's kept, and how to reach us about it.

Who this covers

This policy covers sacardo.com and the information Sacardo handles when someone inquires about, or hires the studio for, a project. It also covers the portfolio pages under the Work section, except where a project shows its own privacy policy (see "Projects shown in the Work section" below).

What's collected

The inquiry form. If you submit it, Sacardo receives what you typed: your name, email address, the type and size of project, your timeline, and the details you wrote. Nothing is required to browse the rest of the site. You can read every page here without giving up any personal information.

Email. If you write to design@sacardo.com, Sacardo receives the message and the address it came from.

Phone. If you call (610) 741-9193, Sacardo sees the number you call from and hears anything you say or leave in a voicemail. It's used only to get back to you, and handled like an inquiry.

If you become a client. Working on a project involves more: your business and contact details, the project brief, logos, photos, and other files you send, the signed agreement, invoices and payment status, project correspondence, and, if you choose to give one, a testimonial along with your choices about how it may be used. Payments go through Stripe. Card and bank account details are entered on Stripe's own pages, not with Sacardo. Sacardo sees only the type of payment method, its last four digits, and whether a payment went through, and never stores full card or account numbers.

Automatically. Like any web server, Netlify (the host this site runs on) logs basic technical information for every visit, such as IP address, browser type, and request timestamps, for security and reliability. Sacardo doesn't access this separately from what Netlify's own infrastructure retains in the ordinary course of hosting the site.

What not to send. Please don't put Social Security or other government ID numbers, payment card or bank account numbers, health information, or passwords in the form or in an email. If a project needs access to one of your accounts, Sacardo will ask to be added as a user instead of being sent a password.

Why it's collected

• To read and reply to your inquiry and, if you ask for one, prepare a quote.
• To do the work you hire Sacardo for and keep the business records that go with it: the agreement, invoices, and tax records.
• To keep the site secure and filter out spam.
• To meet legal obligations.

That's the full list. There's no mailing list, no marketing use, no profiling, and no automated decision-making about you. Sacardo does not sell personal information and does not share it for advertising.

Who else handles it

Sacardo relies on a few service providers to run the site and the studio. Each one handles information only to provide its service, under its own terms and privacy policy. Sacardo doesn't authorize any of them to use your information for their own advertising.

• Netlify hosts this site, receives inquiry-form submissions, and screens them for spam using a third-party filter as part of Netlify Forms.
• Supabase stores a second copy of each inquiry in a database whose data centre is in the United States. Only the studio can read it.
• Zoho Mail provides the design@sacardo.com email account.
• Notion is the workspace where inquiries and client projects are tracked.
• Google serves the typefaces on the two project sites hosted here and an embedded map on one of them. Sacardo's own pages don't contact Google. See "Fonts and other embedded resources" below.
• Stripe sends Sacardo's invoices and receipts and processes payments by card or bank account. If you choose a monthly care plan, Stripe keeps your payment method on file and charges it each month, and you can update it on Stripe's customer page. Stripe receives your name, email address, billing address, what you're paying for, and your payment details. It also uses some of this information for its own purposes, such as preventing fraud and meeting financial regulations, under its own privacy policy.
• Client-project tools. If you hire Sacardo, the tools used to sign the agreement, schedule calls, and share files will see what they need for that job and nothing more. Sacardo will tell you which ones apply when you hire.

Information may also be disclosed to an accountant or attorney who is bound to keep it confidential, or when the law requires it or it's needed to protect someone's rights or safety. These providers are based in the United States, so your information is processed there.

How long it's kept

• Inquiries that don't lead to a project: deleted 12 months after your last message, from Netlify, Supabase, Notion, and email. Deletion is done in a periodic cleanup, so an inquiry may sit a few weeks past that date.
• Client records (the agreement, invoices, project correspondence, and your permissions): kept for 7 years after the project ends, then deleted, to cover contract and tax record needs.
• Working files you send for a project (logos, photos, drafts): kept while the project is active and for 90 days after it's finished, then deleted unless you ask Sacardo to keep them.
• Server logs are kept by Netlify under its own policy.
• Payment records are kept by Stripe for as long as financial regulations require, under its own policy. You can remove a saved payment method yourself on Stripe's customer page, or ask Sacardo to remove it.

You can ask for deletion sooner at any time, as described under "Your choices." Copies in backups or email archives can take a little longer to disappear, and records the law requires Sacardo to keep, such as invoices, are kept for the required period.

Cookies, analytics, and local storage

This site does not use cookies, analytics, or any tracking script. Because nothing tracks you, there is nothing to opt out of, and browser signals like Global Privacy Control have nothing to switch off. If that changes, it will be with a privacy-respecting, cookieless analytics tool that doesn't track individuals across sites or sell data, and this policy will be updated first.

One demo page stores something in your browser: the Ember & Vine cart is kept in your browser's local storage so it survives a page reload. It stays on your device and is not sent to Sacardo unless you submit the order form on that page.

Fonts and other embedded resources

Sacardo's own pages, including the case studies, serve their typefaces from this site, so reading them sends nothing to Google or any other outside service.

The two project sites hosted here are different. Ember & Vine and All Massive Events load their typefaces from Google Fonts, and the Ember & Vine contact page embeds a Google Maps view. Loading these involves your browser making a request directly to Google's servers, which can include your IP address, subject to Google's own privacy policy. Sacardo doesn't control or receive any data from those requests.

Projects shown in the Work section

The Work section shows three projects. Two are separate sites that Sacardo hosts here as portfolio examples; the third is linked, not hosted here. Each has a case-study page on this site, which collects nothing.

Ember & Vine is a concept project: a fictional restaurant built as a demonstration. Its takeout form is a working demo of a real ordering flow. If you submit it, your name, phone number, pickup time, notes, and order summary are delivered to Sacardo through Netlify Forms. No order is placed and no food is made, so please don't enter real personal details. These demo submissions are kept no longer than inquiries are (12 months) and can be deleted on request.

All Massive Events is a real business. Its booking form doesn't send anything through Sacardo: it opens your own email app with a message addressed to the business owner, and nothing is stored on this site.

Slow Burn is a concept project: a fictional drink brand. Its site lives at its own address, slow-burn-energy.netlify.app, with its own privacy page. Its store is a demo that takes no orders and no payments, and nothing you do there reaches Sacardo.

Security

The site is served over HTTPS. Sacardo's accounts with the providers above are protected by sign-in credentials and are used only by the Sacardo team. No system is perfectly secure, so Sacardo can't guarantee absolute security. If a breach affecting your personal information ever happens, you'll be told promptly, as the law requires.

Children

This site is for business owners and isn't directed to children under 13. Sacardo doesn't knowingly collect information from children. If you believe a child has sent information through this site, email design@sacardo.com and it will be deleted.

Your choices

Email design@sacardo.com at any time to ask what information is on file for you, to correct it, or to have it deleted. Sacardo will answer within 45 days. If a request needs longer, you'll be told why and when to expect the answer. There's no charge, and to protect your privacy, Sacardo may ask you to write from the email address you originally used. These choices are open to everyone, wherever you live.

Changes to this policy

If this policy changes in any meaningful way, the "last updated" date above will change too. Material changes affecting how existing inquiry or client information is used will be communicated directly to the people they apply to.

Questions

Sacardo, Reading, Pennsylvania. Reach out any time at design@sacardo.com or (610) 741-9193.