Privacy Policy

Jennifer Anh Do Studio

Effective Date: 8/14/25
Last Updated: 8/14/25

TABLE OF CONTENTS

Introduction
Information We Collect
How We Use Your Information
Disclosure of Personal Information
Data Retention and Deletion
Your Rights Under California Privacy Law
How to Submit a Privacy Request
Do Not Sell or Share
Security Measures
Children's Privacy
Policy Changes
International Visitors
Contact Information

1. INTRODUCTION

At Jennifer Anh Do Studio ("Studio," "we," "us," or "our"), we believe privacy is sacred. It is the foundation of trust — and in our work, trust is everything. This Privacy Policy is written to honor that, and to explain exactly how we collect, use, retain, protect, and disclose personal information submitted through www.[InsertDomain].com (the "Website").

This Privacy Policy applies to all visitors, users, and others who reside in the State of California. It is intended to fully comply with the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act of 2020 (CPRA), which we collectively refer to as "California Privacy Law."

This Privacy Policy applies only to this Website and does not govern the handling of client information collected outside the Website through offline services or client agreements.

By using this Website, submitting an inquiry, or engaging in any communication initiated through this platform, you agree to the practices described in this Policy.

2. INFORMATION WE COLLECT

We collect only what you choose to share. We do not sell, profile, or track. This Website was built to inform, not to extract.

We also do not process sensitive personal information, nor do we use automated decision-making or infer user characteristics from submissions.

2.1 Information You Provide Directly

When you submit a form or send us an email, we may collect the following categories of personal information:

Your first and last name
Your email address
Your phone number (optional)
The city or region in which your project is located
Your general project details, including goals, timelines, and intended scope
Any other information you choose to submit via contact form or follow-up communication

We do not request or collect:

Government-issued identification numbers
Payment card or bank account details
Social Security numbers or sensitive health data
Racial, religious, biometric, or other protected class information

We do not store payment information on our servers or process payments through this Website. Any future payments, if applicable, will be handled by third-party platforms governed by their own security and privacy protocols.

2.2 Information Collected Automatically

When you visit this Website, we may automatically collect certain technical information, including:

Your device type, browser type, and operating system
Your Internet Protocol (IP) address and general geographic location
The pages you visit and the time spent on each page
The website or search engine that referred you to our site
The date and time of your visit

We do not associate technical data with any user profile or personal identifier.

We do not use cookies, tracking pixels, or similar technologies to monitor your behavior across multiple websites or sessions.

3. HOW WE USE YOUR INFORMATION

We use the personal information we collect for the following purposes:

3.1 Legitimate Business Purposes

Responding to inquiries: To answer your questions about our services and schedule consultations
Project evaluation: To assess whether your project aligns with our capabilities and availability
Communication: To send you follow-up information, project timelines, or answers to additional questions
Business operations: To maintain records, improve our services, and operate our business effectively

3.2 What We Do Not Do

We do not:

Sell your information to third parties
Use your information for targeted advertising
Share your contact details with vendors unless you become a contracted client and expressly authorize disclosure
Create customer profiles or behavioral analytics
Track your activity on other websites
Send unsolicited marketing emails (unless you specifically request to receive updates)

We do not analyze, compare, or score user inquiries, and we do not use AI tools or data enrichment to generate profiles from submissions.

4. DISCLOSURE OF PERSONAL INFORMATION

We may disclose personal information in the following limited circumstances:

4.1 Service Providers

We may share information with carefully selected service providers who assist us in operating our business. These include:

Email and file storage platforms (e.g., Google Workspace)
Scheduling tools (e.g., Calendly or Acuity)
Cloud-based document systems (e.g., Dropbox or HelloSign)
Website performance tools (basic logs only)

Each provider is bound by a written data processing agreement as required under CPRA, which prohibits them from retaining, using, or disclosing your information for any purpose outside the contracted service. Each provider has confirmed CPRA-compliant data practices and does not have independent ownership or control over the data.

4.2 For Legal Compliance

We may disclose information to courts, regulators, law enforcement, or attorneys:

In response to a subpoena, court order, or legal obligation
In connection with an investigation involving fraud, abuse, or harassment
To assert or defend our legal rights in a dispute

We will notify you before disclosing your information unless prohibited by law or subpoena.

4.3 With Your Written Consent

We may disclose project-related details — such as your name, address, or design preferences — to Vendors or Contractors only if:

You have signed a service agreement;
You have authorized such disclosure in writing; and
The disclosure is directly tied to product sourcing or implementation of design work under contract.

5. DATA RETENTION AND DELETION

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations.

Retention Schedule:

Unengaged inquiries (no follow-up or engagement): retained for no more than 12 months
Engaged clients: retained for up to 7 years to comply with contract, tax, and professional recordkeeping requirements

Deleted request data, backups, and archival copies are also deleted within a commercially reasonable time frame.

Once retention limits are reached, deletion includes all associated logs, metadata, and system backups unless otherwise required by law.

Upon request, we will delete your personal data unless retention is required by law.

6. YOUR RIGHTS UNDER CALIFORNIA PRIVACY LAW

If you are a resident of California, you have the following rights under the CCPA and CPRA:

6.1 Right to Know

You may request:

The categories and specific types of personal information we have collected about you
The sources of that information
The business or commercial purpose for collection
Whether we disclosed it, and to whom
The categories of third parties with whom we may have shared it

6.2 Right to Delete

You may request that we delete personal information collected from you, subject to legal exceptions.

We will delete all information that is not necessary to:

Complete a transaction you initiated
Detect or prevent fraud or abuse
Comply with a legal obligation
Defend against legal claims

We maintain deletion logs for regulatory purposes but do not use that data to reconstruct user profiles.

6.3 Right to Correct

You may request that we correct any inaccurate or outdated information in our records.

6.4 Right to Limit Use and Disclosure

You may request that we limit our use or disclosure of your sensitive personal information to only what is necessary to perform our services.

6.5 Right to Opt-Out

You have the right to opt out of the sale or sharing of your personal information. As stated in Section 8, we do not currently sell or share personal information, but if our practices change, we will honor opt-out requests.

6.6 Right to Non-Discrimination

We will not discriminate against you for exercising your privacy rights, including by:

Denying services or charging different prices
Providing a different level of service quality
Suggesting you may receive a different price or service level

6.7 Authorized Agent

You may designate an authorized agent to submit privacy requests on your behalf. The agent must provide:

A signed written authorization from you
Proof of their identity
Verification that you have given them permission to act on your behalf

We may also require you to verify your identity directly or confirm the agent's authorization.

7. HOW TO SUBMIT A PRIVACY REQUEST

To exercise your rights under California Privacy Law, please contact us using the following methods:

Email: [Insert Email Address]
Subject Line: "Privacy Request - [Specify: Know/Delete/Correct/Limit]"

Mailing Address:
Jennifer Anh Do Studio
[Insert Physical Address]
[City, State, ZIP Code]

7.1 Request Requirements

Please include the following in your request:

Your full name and contact information
A clear description of the privacy right you wish to exercise
Sufficient information to allow us to locate your personal information in our records
A declaration under penalty of perjury that you are the person whose personal information is the subject of the request

7.2 Verification Process

We will verify your identity before processing your request. This may include:

Requesting additional identifying information
Requiring you to respond from the email address associated with your inquiry
Asking you to confirm details about your interactions with us

7.3 Response Timeline

We will acknowledge receipt of your request within 10 business days and provide a substantive response within 45 days. If we need additional time, we may extend our response period by an additional 45 days with notice.

If we deny a request, you have the right to appeal by emailing the same address with the subject line "Privacy Request Appeal." We will review and respond in writing within 45 days.

8. DO NOT SELL OR SHARE

We do not sell personal information. We have not sold personal information in the 12 months preceding the effective date of this Privacy Policy.

We do not share personal information for cross-context behavioral advertising. We have not shared personal information for such purposes in the 12 months preceding the effective date of this Privacy Policy.

If our practices change in the future, we will:

Update this Privacy Policy with clear disclosure
Provide you with notice and an opportunity to opt out
Honor all opt-out requests submitted before the policy change

You can opt out of any future sale or sharing by emailing us at [Insert Email Address] with the subject line "Do Not Sell My Personal Information."

9. SECURITY MEASURES

We implement reasonable security measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Technical Safeguards:

Secure Sockets Layer (SSL) encryption for data transmission
Regular security assessments and vulnerability testing
Firewalls and intrusion detection systems
Two-factor authentication for administrative access
Regular software updates and security patches

We review user access logs quarterly to monitor potential unauthorized access and rotate administrative credentials regularly.

Administrative Safeguards:

Employee training on privacy and security practices
Limited access to personal information on a need-to-know basis
Background checks for personnel with access to sensitive data
Incident response and breach notification procedures

Physical Safeguards:

Secured facilities and restricted access to servers
Environmental controls and monitoring systems
Secure disposal of physical documents and electronic media

Important: No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

10. CHILDREN'S PRIVACY

This Website is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16.

This Website is not structured for use by anyone under 16. If you are a minor, please exit immediately and do not use our contact forms.

If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

Parents or guardians who believe their child has provided personal information to us may contact us using the information in Section 13 to request deletion.

11. POLICY CHANGES

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors.

Notification of Changes:

Material changes will be posted on this page with an updated "Last Updated" date
For significant changes that may affect your rights, we will provide additional notice via email to addresses in our records
We encourage you to review this Privacy Policy periodically

This Policy may be updated periodically to reflect shifts in legal requirements, digital infrastructure, or Studio practice. All updates will maintain our core principles of discretion, consent, and minimalism.

For transparency, an archive of past Privacy Policy versions will be maintained and available upon request.

12. INTERNATIONAL VISITORS

This Website is operated from the United States and is intended primarily for visitors from California. If you are visiting from outside the United States, please be aware that:

Your information will be transferred to and processed in the United States
U.S. privacy laws may differ from those in your country
We comply with California Privacy Law, which may provide greater protections than federal U.S. law

By using this Website, you waive any privacy rights afforded under foreign laws that conflict with U.S. federal or California privacy regulation.

If you do not agree to the transfer and processing of your information in the United States, please do not use this Website.

13. CONTACT INFORMATION

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Jennifer Anh Do Studio

Email: hello@jenniferanhdostudio.com

For privacy-related inquiries, please allow up to 10 business days for a response.

Client Portal Disclaimer (Future-Proofing): If a private client login or design portal is added to the Website in the future, data submitted through that platform will be governed by an updated Privacy Policy specific to that system.

Final Acknowledgment: By continuing to use this Website, you acknowledge and accept the boundaries and practices described in this Privacy Policy.

This Privacy Policy was last updated on 8/14/25 and is effective as of 8/14/25.

Privacy Policy

Jennifer Do