What we collect, why we collect it, and what we never do with it.
Last updated: June 2026
This Privacy Policy explains what Gem State Designs (“we,” “us”) collects, why, and what we do — and never do — with it. It covers our marketing website and client portal. For the personal data that flows through a website we host for a client, see “Hosted-client data & our role” below.
We collect information directly from you (when you fill in a form, create an account, or email us), automatically through cookies and server logs as you use the site, and from the providers that help us operate (for example, payment status from our payment processor).
To scope and deliver your project, host and maintain your site, send invoices and receipts, respond to messages, provide support, secure and improve our services, and meet legal obligations. We do not sell your data, share it with advertisers, or use it for anything unrelated to working with you.
Where the GDPR or UK GDPR applies, we process personal data on these bases: contract (to provide services you've requested), legitimate interests (to secure, maintain, and improve our services), consent (for analytics cookies — you can withdraw it anytime), and legal obligation (for example, tax and accounting records).
We share personal data only with service providers that help us operate the business, and only as needed. We do not sell your data. Our key sub-processors are:
We may also disclose information where required by law or to protect our rights, users, or systems.
For our own users (clients and site visitors), we act as the controller of personal data. When we host or manage a website for a client, the personal data that client's own end-users submit through that site is controlled by the client — for that data we act as a processor / service provider, handling it on the client's instructions and under our agreement, and not for our own purposes.
We keep personal data only as long as needed for the purposes above. Account deletions are completed within 30 days. Anonymized financial records (amounts and dates, with personal details removed) are retained as required for bookkeeping and tax. Backups age out on a rolling basis.
You can download a complete copy of your data, or request account deletion, anytime from the Account page in your portal, or by emailing us. You can also change your cookie/ analytics choice on the Cookie Policy page.
If you're a California resident, you have the right to know what personal information we collect and how we use it, to request access to or deletion of it, and to correct inaccuracies. We collect the categories described above (identifiers, customer records, commercial information, and internet activity) to provide and improve our services.
We do not sell your personal information or share it for cross-context behavioral advertising, and we won't discriminate against you for exercising your rights. To make a request, email hello@gemstatedesigns.com.
If you're in the EU or UK, you have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent at any time. You may also lodge a complaint with your local data-protection supervisory authority. To exercise these rights, email us using the contact below.
We use established providers with industry-standard certifications, encryption in transit, and access controls to protect your data. No method of transmission or storage is 100% secure, but we work to protect your information and to respond promptly if an issue arises.
Our site and services aren't directed to children under 16, and we don't knowingly collect their personal data. If you believe a child has provided us information, contact us and we'll delete it.
We're based in the United States, and our providers may process data in the U.S. and other countries. Where required, we rely on appropriate safeguards for international transfers. By using the site, you understand your information may be processed in the U.S.
We may update this policy from time to time. We'll revise the “Last updated” date above and, for material changes, take reasonable steps to notify you.
Questions or requests about your privacy? Email hello@gemstatedesigns.com — we're a studio in Twin Falls, Idaho, and a real person will reply.
