Last updated: September 30, 2026

Your privacy matters

This page explains what data is collected on christianfleming.org (the "Site"), how it's used, and your choices. If you have questions, contact info@christianfleming.org. Christian Fleming LLC operates the Site.

1) Data we collect

Please avoid including sensitive personal information in your inquiry.

Inquiries and direct contact. Our inquiry form collects your first and last name, email, organization/artist, project type, location, project details, and dates or confirmation that dates are undecided. Your phone number is optional. Our contact API also processes your IP address, browser user-agent, and submission timestamp for delivery and abuse prevention. Direct emails include the content and contact details you send.
Server logs. Our hosting provider may log requests (IP address, request URL, headers, and basic diagnostics) for reliability and security.
Cookies / browser storage. We set a small consent record (cf_cookie_consent) to remember whether you allowed analytics. It records your answer — accepted or rejected — along with the record version, save time, and expiry time. It contains no identifier for you. If you begin filling in the inquiry form, what you have typed is held in your browser's sessionStorage (cf_inquiry_draft) so a reload does not lose it. That draft never leaves your device until you press Send, and it is discarded when you submit or close the tab.
Third-party assets. The site loads YouTube thumbnail images. YouTube may receive your IP address and user-agent. Fonts are self-hosted and served from this Site, so no third party receives your data for fonts.

2) How we use data

To respond to your inquiries, discuss your project, and manage follow-up communications.
To deliver and improve the Site, ensure reliability, and prevent abuse.
To honor your analytics choice and load optional scripts only if you allowed them.

3) Lawful bases (where applicable)

Where required by law (e.g., EU/UK), we rely on the following bases:

Legitimate interests to operate and secure the Site and to respond to messages you send.
Consent for optional cookies/analytics when you choose to enable them.
Contract when communicating with you about potential work you requested.

We do not sell your personal information. We use service providers to run the Site:

Hosting: Vercel (site hosting and serverless functions).
Vercel Analytics: Loaded only after you accept analytics. Sends aggregated, privacy-friendly page-view data to Vercel. No cross-site tracking or advertising IDs are used. See Vercel's Privacy Policy.
Inquiry delivery: Our contact API runs on Vercel and supports Resend for email delivery and Google Apps Script for recording inquiries in Google Sheets. Depending on the configured delivery destinations, your inquiry and submission metadata are sent to these providers and our receiving mailbox. They are used to respond to and manage your request.
Google (YouTube): YouTube thumbnail servers provide images on project cards. Font files are self-hosted on this Site, not loaded from Google Fonts.

We may disclose information if required by law or to protect rights, safety, and security.

5) Cookies & tracking

The Site uses an essential consent record stored in localStorage (cf_cookie_consent, retained up to 365 days (no more than 12 months)). Vercel Analytics is loaded only after you accept analytics; it measures page views, referrers, approximate location, and browser/device information to help improve this site (no advertising IDs or cross-site tracking). No other analytics scripts are set without your consent. You can change your choice or withdraw consent using “Cookie settings” and then “Deny.” Rejection is remembered for the same period as acceptance. Withdrawal blocks future analytics events; it does not undo data already sent. Old, invalid, or expired choices require a new decision. If browser storage is unavailable, your choice applies only to the current page. The inquiry form additionally keeps an unsent draft of your own entries in sessionStorage (cf_inquiry_draft). It is not a cookie, is not used for analytics or tracking, and is removed when you submit the form or close the tab.

6) Data retention

Inquiries: Inquiry records can remain in our receiving mailbox and configured Google Sheet after delivery; this website does not automatically delete those copies. Retention depends on whether follow-up or a project is ongoing and whether records are needed for accounting, disputes, or other legal obligations. Contact info@christianfleming.org to request deletion of an inquiry, subject to any applicable recordkeeping requirements.
Server logs: retained by the hosting provider for a limited period for operations and security.
Cookie consent: up to 365 days (no more than 12 months), or until you clear it.
Unsent inquiry draft: kept on your device for the current browser tab session only, then discarded.

7) Security

We use reasonable technical and organizational measures (HTTPS, least-privilege access, and provider-level safeguards). No method of transmission or storage is 100% secure.

8) Your rights

Depending on your region, you may have rights to access, correct, delete, or restrict certain uses of your data. To make a request, email info@christianfleming.org. We may need to verify your identity before acting on a request.

9) Children's privacy

The Site is not directed to children under 13. If you believe a child has provided personal information, please contact us to request deletion.

10) Changes to this policy

We may update this policy to reflect changes to the Site or applicable laws. If material changes are made, we will adjust the "Last updated" date.

11) Contact

Questions about this policy? Email info@christianfleming.org.