1. Who We Are

Surette Data Systems provides web design, managed website hosting, website care plans, custom business software, in-home tech services, and office network setup to clients primarily in Southwest Florida. Our website is surettesystems.com. You can reach us at (239) 404-8505 or through our contact page.

2. What Information We Collect

We collect information in the following categories:

• Contact details — your name, email address, and phone number, provided when you fill out our contact form or create an account.
• Business information — your company name and website URL, which you may provide in your account settings.
• Project details, messages, and optional attachments — the content you write in our contact form, consultation form, service checkout form, client portal messages, optional uploaded photos/screenshots, or messages sent via WhatsApp as part of an active care plan.
• Account credentials — your email address and a hashed password managed through Supabase authentication when you register for a client account.
• IP address (via Google Fonts) — our pages load fonts from Google Fonts CDN. When your browser requests those fonts, your IP address is sent to Google's servers. This is standard behavior for any site using Google Fonts. See Google's Privacy Policy for details.

We do not collect payment card numbers directly. Any payment processing is handled by third-party providers.

3. How We Collect Information

• Supabase — account registration, login, client profile data, form submissions, client portal messages, and optional form attachments are stored in a Supabase-hosted database/storage system using secure authentication and access policies.
• WhatsApp / Meta — care plan clients communicate with us through a dedicated WhatsApp account. Messages sent there are subject to Meta's privacy policies in addition to ours.
• Google Fonts CDN — font files are loaded directly from Google's servers on each page load.

4. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide the services you requested.
• Manage your client account and maintain your service history.
• Communicate with you about your project, including updates, questions, and ongoing care plan requests.
• Send occasional service-related notices (never marketing without your consent).
• Improve our services and website based on how people use them.
• Meet our legal and business record-keeping obligations.

We do not sell your personal information to anyone, ever.

5. How We Share Your Information

We do not sell or rent your personal data. We share information only in these limited circumstances:

• Service providers — Netlify may host static website files, while Supabase processes account, form, message, and attachment data on our behalf. Each has its own privacy and security practices.
• WhatsApp / Meta — messages sent through WhatsApp pass through Meta's infrastructure.
• Legal requirements — we may disclose information if required by law or in response to a valid legal process.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services to you. After an account is closed or a project ends, we may retain records for a reasonable period for legitimate business purposes such as billing history, legal compliance, or responding to disputes. You can request deletion at any time (see Section 8).

7. Security

We take reasonable steps to protect your information:

• Our website enforces HTTPS on all connections.
• Account authentication is handled through Supabase's secure authentication system, which uses industry-standard hashing and session management.
• Form submissions are handled through Netlify's secure form processing infrastructure.

No method of transmission over the internet or electronic storage is 100% secure. While we use commercially reasonable protections, we cannot guarantee absolute security.

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Right to know — you can ask us what personal information we hold about you.
• Right to deletion — you can ask us to delete your personal information. We will honor deletion requests except where we are required by law to retain certain records.
• Right to correct — if any information we hold about you is inaccurate, you can ask us to correct it. You can also update your account details directly through your client account settings.
• Right to opt out of sale — we do not sell personal data, so there is nothing to opt out of in that regard.

To exercise any of these rights, contact us through the contact page or call us at (239) 404-8505. We will respond within a reasonable time frame.

9. California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you additional rights regarding your personal information. These include the right to know what categories of personal information we collect and disclose, the right to request deletion, and the right to non-discrimination for exercising your rights. As noted above, we do not sell personal information. To submit a request, use the contact information in Section 8.

10. Children's Privacy

Our services are not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

11. Third-Party Links

Our website may contain links to third-party websites or services (for example, WhatsApp, Google Fonts). This Privacy Policy does not cover those third parties. We encourage you to review the privacy policies of any third-party services you use.

12. Governing Law

This Privacy Policy is governed by the laws of the State of Florida, United States, without regard to conflict of law principles.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. If the changes are significant, we will make reasonable efforts to notify active clients. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your information, please reach out:

• Surette Data Systems
• Southwest Florida
• Phone / text: (239) 404-8505
• Website: surettesystems.com/contact.html