Privacy policy | VH Designs & Co

Short version: this site collects very little. The contact form, the free website check, the waitlist and purchases need your email address, analytics only switch on if you say yes, and nothing is ever sold.

Who is responsible

This website is run by VH Consulting LLC, trading as VH Designs & Co.

VH Consulting LLC
312 W 2nd St
Casper, WY 82601
United States
hello@vhdesigns.co

When you visit

The site is hosted by Netlify, Inc. (USA). Like every web server, it keeps short technical logs when a page is requested: your IP address, the date and time, the page you asked for, your browser and device, and the page you came from. This is needed to deliver the site and keep it secure, which is a legitimate interest under Art. 6(1)(f) GDPR. The fonts are stored on this site too, so no font service is contacted.

Analytics, only if you say yes

If you accept, the site uses Google Analytics 4 (Google Ireland Limited for visitors in the EU, and Google LLC, USA) to see which pages people read and how they find the site. It sets the cookies _ga and _ga_*, which last up to two years, and IP addresses are shortened before they are stored.

With the same yes, the site also loads the Meta pixel (Meta Platforms Ireland Limited, and Meta Platforms, Inc., USA). It tells me which of my ads on Instagram and Facebook led to a visit, a website check, a waitlist sign-up, a message or a booked call, and lets me show my ads to people who have visited the site. It sets the cookies _fbp and _fbc, which last up to 90 days. Meta receives your IP address, browser details and the page you are on, and is jointly responsible with me for collecting this data (Art. 26 GDPR). No email address, website address or answer you type here is sent to Meta.

Nothing loads before you choose, and declining keeps both switched off. The legal basis is your consent (Art. 6(1)(a) GDPR). You can change your mind at any time with Cookie settings at the bottom of every page.

What is stored in your browser

Two small notes stay in your own browser and are never sent anywhere: your cookie choice (vhd-consent, so the question is not asked on every page) and whether the short intro animation already played during this visit.

When you get in touch

If you email me or send a form, I receive your name, email address and whatever you write, and use it to reply and, if we work together, to run the project.

If you book a call, the booking page is run by Google (Google Calendar). Google processes the name, email and time you enter, and I receive them so the call can happen.

The legal basis is taking steps before a possible contract (Art. 6(1)(b) GDPR) and my legitimate interest in answering you.

The contact form

The form on the contact page asks for your name, your email address, your message and, if you pick one, what it is about. It reaches me through Netlify Forms, run by Netlify, which also hosts this site. I use it only to reply to you, and it is never added to a list or used for anything else. The legal basis is the same as for an email: steps before a possible contract and my legitimate interest in answering you (Art. 6(1)(b) and (f) GDPR).

The Website Credibility Check

When you run the free check, I receive the website address, your email address, the optional line about what you sell, and whether you want to join my email list. To stop abuse, your IP and email address are also kept as scrambled codes (hashes) for two days.

Microlink takes screenshots of the website you entered. Claude, an AI model by Anthropic, PBC (USA), writes the report from those screenshots and the website’s text; your email address is never sent to Anthropic. Netlify runs the check and stores the report, Resend, Inc. (USA) emails it to you, and I get a short note so I can answer questions about it. The report is a first read of a website, not a decision about you.

The legal basis is delivering the report you asked for (Art. 6(1)(b) GDPR) and preventing abuse (Art. 6(1)(f) GDPR). Reports and screenshots are deleted automatically after 90 days, and so is the email address you entered, unless you ticked the box to join my email list. In that case your address moves to the list and stays there until you unsubscribe (see below).

Email list and waitlist

If you join The AI Website Shortcut waitlist or tick the box to hear from me, I email you when the cart opens and send occasional notes on websites. The waitlist is received through Netlify Forms and emails are sent with Resend. The legal basis is your consent (Art. 6(1)(a) GDPR). Every email has a one-click unsubscribe, and I keep your address until you unsubscribe.

When you buy

When you buy The AI Website Shortcut, I receive your name, email address, billing country and what you bought. Payment is handled by the payment provider named at checkout, so your card details never reach me. If you request an invoice to pay by bank transfer, I store the billing details you give me in order to issue that invoice. Sessions run on Google Meet, and group calls are recorded and shared only with members. If you join the members’ WhatsApp group (WhatsApp Ireland Limited, part of Meta), the other members can see your phone number and your messages; joining is optional. The legal basis is the contract (Art. 6(1)(b) GDPR) and tax law (Art. 6(1)(c) GDPR). See also the terms and refund policy.

Links to other websites

This site links to LinkedIn, Instagram, CoLab Lisbon and client websites. Nothing from those sites loads until you click, and once you are there their own privacy policies apply. The Instagram previews on this site are images stored here.

International transfers

Netlify, Google, Meta, Anthropic and Resend are based in the United States, and so is VH Consulting LLC. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, and on the European Commission’s Standard Contractual Clauses.

How long data is kept

Server logs: for the short period Netlify keeps them for security.
Analytics: at most 14 months. Meta pixel cookies: up to 90 days.
Website check reports, screenshots and the email address entered: 90 days. If you ticked the box to join my list, your address stays on the list until you unsubscribe.
Email list and waitlist: until you unsubscribe.
Purchase records: as long as tax and accounting rules require.
Emails, contact form messages and booking details: as long as needed for our conversation or project, and longer only where tax or accounting rules require it.

Your rights

If you are in the EU, the UK or Brazil, you can ask for access to your data, correction, deletion, restriction, a copy to take elsewhere, and you can object to processing or withdraw consent at any time. Brazilian law (LGPD) also gives you the right to confirm whether your data is processed and to know who it is shared with.

Just write to hello@vhdesigns.co. You can also complain to your data protection authority, for example in your EU country or, in Brazil, the ANPD.

No selling

Your data is never sold. It is only used for advertising through the Meta pixel described above, and only if you said yes to it.

Children

This site is meant for businesses and is not directed at children under 16.

Changes

If the site changes what it collects, this page changes with it. The date at the top shows the latest version.