Privacy policy
PageKept Digital (“PageKept”, “we”, “us”) builds and hosts websites for business owners, provides business email, and operates this website. This policy explains what information we collect through the things we operate, why, who else handles it, and what choices you have. It covers:
- this website,
pagekeptdigital.com; - the owner portal our clients use to update their websites;
- the PageKept business email service.
It does not cover websites we build for clients. Each client decides what their own website collects and is responsible for their own privacy notice; we host those sites on the client’s behalf and act on the client’s instructions (see “Client websites” below).
1. Information we collect
When you contact us. If you use the “Let’s talk” form or email us, we receive what you send: your name, email address, and anything optional you include (business name, website, phone number, preferred contact method, a good time to reach you, and your message). We also record the time of the submission, your IP address and browser identification string to prevent abuse of the form.
When you browse this website. We use Cloudflare Web Analytics, which counts visits and page views without cookies and without building a profile of you. It records the page, referrer, browser and device type, and country. It does not record your IP address in a form we can see. The contact form is protected by Cloudflare Turnstile, which checks that a request comes from a person rather than an automated script; Turnstile may process your IP address and browser characteristics for that purpose, under Cloudflare’s privacy policy. We do not use advertising trackers, retargeting pixels, or third-party analytics beyond this.
When you are our client. We keep your business contact details, the details of the services you buy, invoices and payment records (payment card numbers are held by the payment processor, never by us), correspondence with you, and the content you give us or enter into your owner portal to publish on your website.
When you use PageKept business email. To deliver email we must process it: the messages you send and receive, their headers, addresses, attachments and the folders you keep them in; your app-password and sign-in records; and technical logs (connection times, IP addresses, message sizes, delivery results, spam and security verdicts). We do not read your mail except as described in section 4.
Owner portal accounts. Sign-in uses passkeys. We store the public part of each passkey, your account name and role, and sign-in and activity records (what was changed and when).
We do not knowingly collect information from children under 13, and our services are intended for businesses.
2. How we use information
- to respond to your inquiry and, if you become a client, to provide the services;
- to operate, secure and maintain the services: preventing spam and abuse, detecting compromised accounts, diagnosing faults, keeping backups;
- to bill for services and keep the records the law requires;
- to send service messages such as maintenance notices, security alerts and changes to terms or this policy;
- to improve the services using aggregate, non-identifying information.
We do not sell personal information, and we do not use the content of your website, portal or email to advertise to you or to anyone else.
3. Who else handles information (service providers)
We run the services on infrastructure provided by companies that process data on our instructions:
| Provider | Role | Location |
|---|---|---|
| Cloudflare | DNS, hosting of this website and the contact form, bot protection, web analytics | United States |
| Vultr | Servers and storage for client websites, the owner portal and the email service | United States |
| OVH (OVHcloud US) | Encrypted off-site backups of the email service | United States |
| Amazon Web Services (Amazon SES) | Delivery of outbound email from the email service and of contact-form notifications | United States |
Backups are encrypted before they leave our servers; the backup provider cannot read them. We may add or replace providers; we keep this table current. We may also disclose information when the law requires it, to protect the rights and safety of our clients, our users or ourselves, or as part of a sale or reorganisation of the business, in which case this policy continues to apply to the information transferred.
4. Email service: what we do and do not do with your mail
- Automated processing only. Incoming mail is checked automatically for spam, malware, forged senders and known bad sources; outgoing mail is checked against sending limits and our Acceptable Use Policy. These checks are performed by software.
- No reading by people, with narrow exceptions. A person at PageKept looks at the content of a message only when: you ask us to for support and give us the message; a message is held by our abuse controls and we need to decide whether it violates the Acceptable Use Policy; or the law requires it. We record every such access.
- Encryption. Connections between your devices and our servers, and between our servers and other mail servers where the other side supports it, are encrypted. Mail is stored on our servers so we can deliver and search it; it is not end-to-end encrypted.
- Retention. Your mail stays in your mailbox until you delete it. Deleted messages are removed from our live systems promptly and from backups within 30 days. Technical logs are kept for 90 days. When a mailbox is closed, its contents are deleted within 30 days unless you ask us to keep them longer or the law requires it.
- Your mail in other people’s hands. Messages you send to others are, naturally, kept by the recipients and their providers under their own rules.
5. Client websites
We build and host websites for clients. The client owns their website and its content and decides what it collects from its visitors (for example through a contact form or an online order). For those sites we act on the client’s instructions, keep the site running and backed up, and do not use visitor information for our own purposes. Questions about a client’s website should go to that business. We provide clients with a starting-point privacy notice they can adapt; it is a template, not legal advice.
6. Security
We protect information with measures appropriate to a small business handling other businesses’ mail: passkey sign-in for the portal, per-device app passwords for email, encrypted connections, firewalls, rate limits, monitoring for compromised accounts, and encrypted backups stored separately from the live systems. No system is perfectly secure; if we learn of a breach affecting your information, we will tell you without undue delay and explain what happened and what we are doing.
7. Your choices and rights
- You can ask us what information we hold about you, ask us to correct it, or ask us to
delete it, subject to records we must keep (for example invoices). Write to
privacy@pagekeptdigital.com. - Clients control the content of their websites, portals and mailboxes directly and can export their mail at any time using standard mail applications.
- You can stop receiving non-essential messages from us by replying and saying so. We will still send service messages needed to run what you have bought.
- If you are in a place with specific privacy laws (for example the European Union, the United Kingdom, or a U.S. state with a privacy statute), you may have additional rights under those laws, and we will honour them. We do not currently meet the thresholds of the Texas Data Privacy and Security Act, but we follow its principles.
8. Cookies
This website sets no cookies of its own. Cloudflare may set a cookie strictly needed to operate Turnstile on the contact form. The owner portal sets a session cookie when you sign in; it is required for the portal to work and is deleted when your session ends.
9. Changes to this policy
We may change this policy at our discretion as the services and the law change. The effective date at the top will change when we do, and for material changes we will notify clients by email before they take effect. Continued use of the services after a change means you accept the changed policy.
10. Contact
PageKept Digital · Texas, United States
privacy@pagekeptdigital.com for privacy questions and requests ·
abuse@pagekeptdigital.com to report misuse of our email service.