Privacy Policy

Fairfield Designs is a trade name of Dylan Cohen Design, a sole proprietorship in Fairfield County, Connecticut. For anything in this policy, including a request to delete your data, email hello@fairfielddesigns.com.

When you contact us. This site has three ways to get in touch — the contact form, the project questionnaire, and the AI chat assistant. All three collect your name, email, and optionally your phone number, along with whatever you tell us about your firm and what you need.

Chat transcripts. If you use the AI assistant, the conversation is stored alongside your enquiry. It is how we arrive at your follow-up call already knowing what you said, rather than asking you to repeat it.

If you become a client. We store your billing contact details and a record of your invoices and payments. Card and bank details go directly to Stripe — they never touch our servers and we cannot see them.

Analytics. We use Google Analytics and Vercel Analytics to see which pages get read and where visitors come from. This is aggregate traffic data, not an attempt to identify you personally.

Anti-spam. We record a hashed fingerprint derived from your IP address and email to rate-limit form submissions. It cannot be reversed to recover the original address.

To reply to your enquiry, quote and deliver work, invoice you, keep your site running, and stop bots from flooding our forms. That is the whole list.

We do not sell your data, rent it, or share it with advertisers. We do not send marketing email to people who filled in a contact form — filling in a form is not subscribing to anything.

Only the service providers needed to run the business, each handling data on our instructions:

• Supabase — the database holding enquiries and client records
• Vercel — hosting and traffic analytics
• Resend — sending email notifications
• Anthropic — powering the AI chat assistant. Conversations are processed to generate replies and are not used to train their models.
• Stripe — payment processing and invoicing
• Google Analytics — website traffic measurement

We will also disclose information if the law genuinely requires it. We have never received such a request.

Enquiries that never become projects are kept up to two years, then deleted — people do come back a year later, and we would rather have the context.

Client and billing records are kept for seven years, because tax and accounting rules require it.

Rate-limiting fingerprints are cleared automatically within days.

Email us and we will tell you what we hold about you, correct it, or delete it. No account needed, no form to fill in. We will action a deletion request within 30 days, except for billing records we are legally required to retain.

Depending on where you live you may have additional statutory rights, including under the Connecticut Data Privacy Act. We apply the above to everyone regardless of location, because maintaining two standards is how mistakes happen.

This site sets a cookie to remember your light or dark theme preference. Google Analytics and Vercel Analytics set their own cookies to distinguish repeat visits. Stripe sets cookies on its payment pages for fraud prevention. We do not use advertising or cross-site tracking cookies.

This site is for businesses and is not directed at anyone under 18. We do not knowingly collect information from children.

If this policy changes, the “last updated” date above changes with it. If a change materially affects how we handle data we already hold about you, we will email you rather than quietly editing this page.