Privacy

The short version: we collect only what you hand us (a contact form, a shop order) and what a site needs to function. No analytics, no ad tracking, no behavioral surveillance. We never sell your data.

This is the privacy policy for daylit.studio, run by Daylit Studio, a web studio based in Allen, Texas, USA. We build a compliance product for a living, so we hold our own site to the same bar: plain about what happens to your data, and able to prove it.

What we collect, and why

When you use the contact form

Our “Start a project” form runs on Gravity Forms. It collects exactly what you type into it: your name, your email address, and whatever you tell us about your project. We use it to read your message and reply to you. That is the whole purpose.

Submissions are stored in this site’s database and emailed to us so we see them. Nothing in that form feeds an ad network or a marketing list.

When you buy from the shop

Our shop runs on WooCommerce and sells physical goods, so a purchase needs the usual order details: your name, billing and shipping address, email, and the items you ordered. We use this to take the order, ship it to you, and handle returns or support if something goes wrong.

We do not store your card number. Payment is handled by our payment processor (a Stripe-class provider), and your card details go to them, not to us. We see that an order was paid and the order details around it, not the card itself.

Cookies

By default the site sets only functional cookies, the ones a site genuinely needs to work: keeping your cart during checkout, holding your session, and recording your cookie choice so we don’t ask again on every page. Anything non-essential waits until you say yes. The full breakdown is in our cookie policy.

To be plain about what we do not do: we run no Google Analytics, no Facebook pixel, no ad-network tags, and no third-party behavioral tracking of any kind. We are not watching where you go or building a profile on you.

How long we keep it

Contact messages we keep while we’re talking and for a reasonable window after, in case the conversation picks back up, then we clear them out. Shop orders we keep as long as we need them for the order, support, returns, and the tax and accounting records the law requires us to hold. If you want something removed sooner, ask us (see below) and we’ll do it where we’re allowed to.

Who we share it with

A short list, and it really is short:

• Our payment processor handles your payment and card details when you buy something.
• Our hosting and email providers store the site and carry the emails that let us reply to you. They process data on our behalf, under their own security and privacy obligations.
• Nobody else. We do not sell your data, we do not rent it, and we do not hand it to advertisers or data brokers. Not now, not ever.

The only other time we’d disclose anything is if the law genuinely required it, and even then only the specific thing required.

Your rights

Wherever you live, you can ask us to show you the personal data we hold about you, correct it if it’s wrong, or delete it. Just email us and we’ll handle it.

If you’re in the EU or UK, GDPR gives you those rights formally: access, correction, deletion, the right to restrict or object to certain processing, and the right to get your data in a portable form. You can also complain to your local data protection authority if you think we’ve got it wrong.

If you’re in California, the CCPA gives you the right to know what we collect and why, the right to have it deleted, and the right not to be discriminated against for asking. We don’t sell personal information, so there’s nothing for you to opt out of on that front, but the right to ask and the right to delete are yours all the same.

How to reach us

Email us at hello@daylit.studio with any question about your data or any of the rights above. A real person reads it and will get back to you.

Last updated: June 2026.