Privacy policy.

Coram Creative designs, builds, hosts and looks after websites for small businesses on monthly plans, and runs the client portal where you manage your site and your billing. This policy covers coramcreative.com, the client portal and the emails we send you.

It does not cover the websites we build for our clients. Each of those belongs to the business it is for, and what that business collects from its own visitors is its responsibility, under its own policy.

When you contact us

Your name, how you would like to be reached (email or phone) and when, and your message. If you are asking about a new website, also your business name, trade, location and current website, so we can look at it before we reply.

When you have an account

Your email address and password, or your Google account if you sign in with Google. Your company's details, who on your team has a login, and the changes you make in your dashboard.

When you buy a plan

Your card is collected by Stripe, our payment processor. We never see or store your full card number. We keep what Stripe gives us: a reference to your saved payment method, your receipts, the status of your subscription, and a record of the purchase terms you accepted and when.

What you give us for your site

The photos, text, logos, prices, hours and other content for your website, stored so we can build it and keep it up to date.

Automatically

Like any website, our hosting and security providers log the usual technical details of a visit: IP address, browser, device and the pages opened. We keep basic visitor counts for our own site. The client portal stores a sign-in token in your browser so you stay signed in.

We use what we collect to:

• Build, host, update and look after your website
• Answer your questions and support you
• Bill you, and send receipts and notices when a payment cannot be processed
• Keep your account and the portal secure
• Give you the visitor report or the monthly performance report that is part of your plan
• Set up your Google Business listing, search and AI search presence when they are part of your plan
• Understand how our own website is used, so we can improve it

We only send marketing emails with your consent, and every one has a way to opt out. Emails about your payments are part of having a plan.

We do not sell your information. We share it only with the providers that run the service, and only what each needs:

• Stripe processes your payments and holds your card details.
• Amazon Web Services runs the client portal, stores the files you give us and sends our emails.
• Cloudflare hosts and protects our website and keeps its visitor counts.
• Google provides sign-in with Google and web fonts, and your Google Business listing when that is part of your plan.
• Search engines and AI assistants receive the public content of your website when your plan includes being found by search and AI search. They never receive your account or billing details.

We will also share information when the law requires it or to protect our rights and safety, and it would pass to a new owner if Coram Creative were ever sold.

We show the sites we look after on our Work page: the business name, a picture of the site, its address and the plan it is on. If you would rather yours were not shown, tell us and we will take it down.

We do not use advertising cookies. What is stored in your browser:

• A sign-in token for the client portal, so you stay signed in
• Cookies set by Stripe during checkout, to process your payment securely
• Cookies set by Cloudflare's protection, to tell people from bots
• A basic visitor-count tag for our own site, if one is switched on

You can clear or block these in your browser. The portal needs its sign-in token to work.

We keep your information for as long as you have an account or a site with us, and afterwards for as long as we have to keep records such as receipts for tax and legal purposes.

When you leave, your site stays public until the end of your billing period, as the terms say. After that we take it down. Tell us if you want a copy of your content first and we will give it to you. Messages sent through the contact form are kept so we can follow up, and deleted when you ask.

Everything travels over HTTPS. Sign-in runs through Amazon's identity service, cards never touch our systems, the sites we host are backed up, and access to your information is limited to the people who need it to do the work. No method of storage or transmission is completely secure, so we cannot promise absolute security, but we take it seriously.

You can always:

• Ask for a copy of the information we hold about you
• Have anything inaccurate corrected
• Ask us to delete your information, where we are not required to keep it
• Opt out of marketing emails
• Withdraw consent you have given us

Email support@coramcreative.com and a real person will take care of it.

Our services are for businesses and are not intended for anyone under 18. We do not knowingly collect information from children.

When this policy changes we post the new version here and update the date at the top. If a change affects how we use what you have already given us, we will tell you.