_legal

privacy_policy

Effective June 8, 2026

Summary. Website Support Studio is operated by Corriston Consulting, LLC. We process the information you submit when you contact us or use the platform, and the operational records needed to deliver our managed service. When analytics is configured, we also collect limited, aggregate analytics about how this site is used; analytics is only active when enabled, and is not running by default. We do not sell personal information. This policy explains what we collect, why, who processes it on our behalf, and the rights you have under the GDPR and CCPA/CPRA.

1. Who we are

Website Support Studio ("WSS", "we", "us") is a managed website operations and support platform operated by Corriston Consulting, LLC, a limited liability company organized in the State of Florida, United States. Our principal place of business is in Tampa, FL. Corriston Consulting, LLC is the data controller for personal information described in this policy. For platform data submitted by our customers, we may act as a processor on the customer's behalf under our service agreement.

2. Scope

This policy covers the public Website Support Studio website and the personal information we handle when you contact us, request a quote, or use the Website Support Studio platform. It does not cover third-party websites we link to, which have their own policies.

3. Information we collect

Information you provide

Contact and sales information — your name, email address, organization, and the contents of your message when you email us, book a call, or request a quote.
Platform request data — the website, marketing, and operations requests you or your team submit to the desk, including any details, files, or context attached to those requests.
Account information — authentication identifiers and operator/role information used to access the platform.

Information collected automatically

Usage analytics (only when configured) — analytics is not enabled by default. When it is configured, we use Google Analytics 4 (via Google Tag Manager) to collect, in aggregate, pages viewed, approximate (city-level) location derived from IP address, device, browser and operating system, referral source, and interaction events such as clicks and form submissions. This data is used only to understand and improve the site.
Operational and security logs — our hosting and database providers record technical logs (such as IP address and request metadata) needed to operate the service securely.

We do not use advertising cookies, retargeting pixels, or cross-site tracking, and we do not collect sensitive personal information through site analytics.

4. How we use information

To respond to inquiries, scope engagements, and provide quotes.
To deliver, maintain, and support the Website Support Studio managed service.
To operate the request workflow, including triage, drafting, approval, delivery, and the audit trail required for accountability.
To send transactional and notification emails related to your requests and account.
To measure and improve the performance of this website.
To comply with legal obligations and enforce our agreements.

5. Legal bases (GDPR / UK GDPR)

Where the GDPR applies, we rely on the following legal bases:

Contract — to provide the service and respond to your requests.
Legitimate interests — to secure, operate, and improve the service and this website, balanced against your rights.
Consent — for non-essential analytics cookies where consent is required; you may withdraw consent at any time.
Legal obligation — to meet recordkeeping, tax, and compliance requirements.

6. Cookies

We use a small number of cookies and similar technologies. Essential cookies are required for the site and platform to function. When analytics is configured, analytics cookies (Google Analytics 4) are used only to understand site usage; analytics is not enabled by default. Full details — including categories, purposes, and how to opt out — are in our Cookie Policy. You can opt out of Google Analytics using Google's browser add-on at tools.google.com/dlpage/gaoptout.

7. How we share information

We do not sell personal information and do not share it for third-party marketing. We share information only with service providers ("sub-processors") who process it on our behalf under contract, and where required by law. Our current sub-processors are:

Supabase — Application database, authentication, and audit logging (United States).
Vercel — Site hosting, edge delivery, and build infrastructure (United States).
Stripe — Subscription billing and payment processing (United States).
Resend — Transactional and notification email delivery (United States).
Google (Analytics 4 / Tag Manager / Fonts) — Privacy-respecting usage analytics and web font delivery (United States).

8. International transfers

Our service providers are located in the United States. If you access the service from outside the United States, your information will be transferred to and processed in the United States. Where required, transfers from the EEA, UK, or Switzerland rely on appropriate safeguards such as the Standard Contractual Clauses.

9. Data retention

We retain personal information for as long as needed to provide the service, maintain the audit records that accountability requires, comply with legal obligations, resolve disputes, and enforce our agreements. Analytics data is retained according to our analytics provider's configured retention period. When information is no longer needed, we delete or anonymize it.

10. Your rights

GDPR / UK GDPR. Subject to applicable law, you may request access to, correction of, deletion of, or restriction of your personal information; object to certain processing; request portability; and withdraw consent. You also have the right to lodge a complaint with your supervisory authority.

California (CCPA / CPRA). California residents may request to know the categories and specific pieces of personal information we collect, request deletion or correction, and opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the CPRA. We will not discriminate against you for exercising these rights.

To exercise any right, contact us at corristonconsulting@gmail.com. We will verify your request and respond within the timeframes required by applicable law.

11. Security

We use administrative, technical, and organizational safeguards appropriate to the sensitivity of the information, including access controls, authentication, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children

Website Support Studio is a business service not directed to children, and we do not knowingly collect personal information from anyone under 16.

13. Changes to this policy

We may update this policy from time to time. We will revise the effective date above and, where appropriate, provide additional notice. Continued use of the site or service after an update constitutes acceptance of the revised policy.

14. Contact

Questions or requests regarding this policy or your personal information can be sent to Corriston Consulting, LLC at corristonconsulting@gmail.com. Our principal place of business is in Tampa, FL.