Privacy Policy.

CoverTurn respects your privacy. This policy explains what data we collect when you visit our website or contact us about a project, how we use it, and the rights you have over it.

01Who we are

For the purposes of data protection law, the data controller is CoverTurn, based in New York, USA. Throughout this policy, "we", "us", and "our" refer to CoverTurn. "You" refers to the visitor or prospect interacting with our website or our services.

02What we collect

We collect personal data in two ways. Information you give us directly, and limited information collected automatically when you visit the site.

Information you give us

• Project brief form. Name, email address, the type of work you need, an optional budget range, and the project description you submit.
• Email. If you email hello@coverturn.com, we receive your email address, any contact details you include, and the content of your message.
• Booking calls. If you book a call through our scheduling link, our scheduling provider collects your name, email, and the chosen time. Their privacy policy applies in addition to ours.

Information collected automatically

• Privacy-first analytics. We use a cookie-free, privacy-respecting analytics tool that records page views, referrer, and approximate country only. It does not use cookies, fingerprinting, or any technique that identifies individuals.
• Server logs. Standard server log information such as IP address and request headers is recorded for security and operational reasons. These are retained for short periods and not used to identify visitors.

03How and why we use it

We only use your personal data for purposes that are clear, limited, and necessary.

• Responding to your enquiry. If you submit a brief, send an email, or book a call, we use that information to reply, scope the work, and follow up.
• Delivering the work. If we go on to work together, we use your contact details to deliver the project, share previews, and invoice you.
• Improving the site. We use aggregated analytics data to understand which pages are useful and which are not, so we can improve the site.
• Legal compliance. We may use or retain data where we are required to do so by law.

Our legal bases for processing under UK and EU GDPR are: your consent (when you submit a form), the performance of a contract (when we deliver work), our legitimate interests (running and improving the site), and compliance with legal obligations.

04Who we share it with

We do not sell or rent your personal data, ever. We share data only with the small number of trusted service providers we use to operate the studio, in the following categories:

• Hosting and infrastructure providers, for running the website and processing form submissions.
• Email delivery services, for sending transactional email such as form confirmations.
• Scheduling services, if you choose to book a call with us.
• Payment processors, for engaged client work. Payment information is provided directly to them and they act as a separate data controller.
• Professional advisers such as accountants and lawyers, where strictly necessary for our business operations.

Each provider is bound by contractual data protection terms and processes data only for the purposes we have agreed with them. We may also disclose data if required by law, court order, or to protect our rights or the rights of others. A current list of providers can be requested at any time by emailing hello@coverturn.com.

05Cookies and analytics

We do not use marketing or tracking cookies. The site uses a cookie-free, privacy-respecting analytics tool that does not track visitors across sessions or websites. We do not use behavioural advertising scripts.

Some third-party tools we link to (for example a scheduling tool or payment processor) may set their own cookies when you interact with them directly. Their cookie policies apply in those cases.

06How long we keep it

We keep your personal data only as long as we need it for the purpose it was collected, plus any period required by law.

• Enquiry and brief data: up to 24 months after the last contact, unless we engage on a project.
• Client project data: for the duration of the engagement, then up to 7 years for tax and accounting purposes (US and UK requirements).
• Server and analytics logs: short retention periods set by our infrastructure providers (typically a few weeks to a few months).

07Your rights

Under UK and EU GDPR you have the right to:

• Access the personal data we hold about you.
• Ask us to correct anything that is wrong.
• Ask us to delete your data, where we no longer have a legal reason to keep it.
• Object to or restrict our processing of your data.
• Receive your data in a portable format.
• Withdraw any consent you have given us.
• Lodge a complaint with a supervisory authority. In the UK that is the Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, email hello@coverturn.com. We will respond within 30 days.

08California residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of any sale or sharing of it.

We do not sell or share personal information for cross-context behavioural advertising. To exercise any CCPA rights, email hello@coverturn.com.

09Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page will always show when the most recent change was made. Material changes will be flagged with a notice at the top of the page for a reasonable period.

10How to contact us

Questions about this policy or about how your data is handled? Email hello@coverturn.com or write to us at our principal place of business.

CoverTurn
New York, USA
hello@coverturn.com