This policy explains what information Ten30 Studio ("Ten30", "we", "us") collects when you use ten30studio.com and its sub-pages, why we collect it, who we share it with, and the choices you have. We keep this short and plain.
Data controller. Ten30 LLC, Arlington, Texas, USA, is the data controller for personal information collected through ten30studio.com. Contact: admin@ten30studio.com. The DevTools Hub at tools.ten30studio.com has its own privacy notice covering the data flows specific to that service.
Information you give us
We collect information only when you choose to send it:
- CareFlow enquiry forms. If you submit a CareFlow enquiry, we collect the details you enter (type of care needed, funding type, hours, preferred start date, and your contact details) so we can respond.
- Email. When you email us, we receive your address and whatever you write. Email is delivered to our inbox hosted by Google Workspace.
- Purchases (AI services). When you buy an AI service (e.g. the Map / Audit / Pilot / Studio tiers on the AI Tools page), Stripe collects your name, email, billing address, and payment-card details to process the payment. Stripe shares with us: your email, the amount, the product name, and a payment confirmation. We do not see or store your card details.
- Direct messages on social platforms. If you message us on Instagram, LinkedIn, Pinterest, or GitHub, those platforms hold your message under their own policies; we receive what you send.
Information collected automatically
When you visit the site, the following is collected automatically:
- Google Analytics & Google Ads conversion tracking (via gtag.js, ID AW-18174714356). Sets cookies and collects pages visited, approximate location (city-level), device and browser type, referral source, and ad-conversion events. Processed by Google under its own privacy terms.
- Hosting logs. Vercel (our hosting provider) records standard request metadata (IP address, user agent, request path, response status, timestamp) for security and operational reasons. Logs are retained per Vercel's defaults.
Lawful basis (UK/EU GDPR)
For visitors in the UK and EU, we process personal information on the following lawful bases:
- Contract: processing your CareFlow enquiry, AI service purchase, and delivering what you bought.
- Legitimate interest: running the website, replying to emails, basic analytics to understand and improve traffic.
- Consent: non-essential cookies (where applicable in your jurisdiction); you may decline via browser settings.
- Legal obligation: keeping records required by tax, accounting, or other applicable law.
How we use your information
- To respond to enquiries and deliver the products or services you request
- To process payments and provide receipts
- To measure and improve our website and advertising
- To comply with our legal obligations
We do not sell, rent, or share your personal information for cross-context behavioural advertising.
Who we share it with
We share information only with service providers that help us run the business:
- Stripe, Inc.: payment processing for AI services
- Google LLC: Google Analytics, Google Ads (web measurement and advertising), Google Workspace (admin@ten30studio.com mailbox)
- Vercel Inc.: website hosting and request logs
- Etsy, Inc. and Gumroad, Inc.: storefronts where digital products are sold (each handles its own checkout, customer accounts, and data per its own policies)
We may also disclose information if required by law, court order, or to protect the rights, property, or safety of Ten30 or others.
International transfers
Ten30 is based in the United States, and most of our service providers (Stripe, Google, Vercel) process data in the United States. If you are in the UK or EU, your data may be transferred to and processed in the US. We rely on the recipient providers' Standard Contractual Clauses, Data Privacy Framework participation, or equivalent transfer mechanisms where required.
Retention
- CareFlow enquiries: up to 24 months from last contact, then deleted, unless you ask us to delete sooner or law requires otherwise.
- Purchase records: at least 7 years (US tax / accounting requirements).
- Email correspondence: up to 36 months from last reply, then archived or deleted.
- Analytics: per Google Analytics retention settings (currently 14 months for user-level data).
- Hosting logs: per Vercel's defaults.
Your rights (UK / EU GDPR)
If you are in the UK or EU, you have the following rights regarding your personal information:
- Access: ask what we hold about you and request a copy.
- Rectification: ask us to correct inaccurate information.
- Erasure: ask us to delete your information ("right to be forgotten"), subject to legal retention obligations.
- Restriction: ask us to limit how we use your information.
- Portability: ask for a machine-readable copy of information you provided.
- Objection: object to processing based on legitimate interest.
- Automated decision-making: we do not make automated decisions with legal or similarly significant effects about you.
- Complaint: lodge a complaint with your supervisory authority. UK residents may contact the Information Commissioner's Office.
To exercise any right, email admin@ten30studio.com. We respond within 30 days.
Your rights (California: CCPA / CPRA)
If you are a California resident, you have the following rights regarding your personal information:
- Right to know: request the categories and specific pieces of personal information we have collected about you in the past 12 months.
- Right to delete: request deletion of personal information, subject to legal exceptions.
- Right to correct: request correction of inaccurate personal information.
- Right to opt-out of sale or sharing: we do not sell or share personal information for cross-context behavioural advertising, and we have not done so in the prior 12 months.
- Right to limit use of sensitive personal information: we do not use sensitive personal information for purposes that trigger the limit-right requirement.
- Right to non-discrimination: we will not deny service, charge different prices, or provide a lesser quality of service because you exercise a privacy right.
Categories of personal information collected (CCPA categories, past 12 months):
- Identifiers (name, email, IP address)
- Commercial information (purchase records)
- Internet activity (pages visited, referrer, device info; via analytics)
- Geolocation data (approximate, city-level; via analytics)
- Inferences (none drawn for profiling)
To exercise a California right, email admin@ten30studio.com. We may need to verify your identity before responding. You may designate an authorised agent to act on your behalf.
CareFlow enquiries: additional note
CareFlow enquiries can include health- and care-related details. We treat this information as confidential, use it only to respond to the enquiry, and retain it per the CareFlow retention period above. If you are in the UK or EU, this may constitute "special category data" under UK GDPR Article 9; our lawful basis is your explicit consent in submitting the enquiry. You may withdraw consent at any time by emailing admin@ten30studio.com.
Site chat (Tilda)
The chat on this site (our concierge, "Tilda") is powered by FMIFY, our own AI system. Messages you send in chat are processed by AI systems to generate responses, and may be used to respond to your inquiry, capture a lead if you ask us to follow up, improve our service, and maintain security and audit logs. Please don't submit sensitive personal, medical, legal, financial, or otherwise regulated information in chat. AI responses can be imperfect and should be reviewed before you rely on them. We do not sell raw chat data. To request deletion of your chat data, email admin@ten30studio.com.
Cookies
We use cookies for analytics and advertising (via Google Analytics and Google Ads). You can block or clear cookies in your browser settings. You can opt out of Google Analytics with the Google opt-out add-on and manage ad personalisation in your Google account.
Security
We take reasonable technical and organisational measures to protect personal information, including HTTPS in transit, access controls on our systems, and use of reputable service providers. No method of internet transmission or storage is completely secure.
Children
Our website and services are not directed to children under 16, and we do not knowingly collect their information. If you believe a child has provided us with personal information, contact us and we will delete it.
Changes
We may update this policy. The "last updated" date above shows when it last changed. Material changes will be flagged on this page.
Contact
Questions about privacy, or to exercise any right above: admin@ten30studio.com. Mail: Ten30 LLC, Arlington, Texas, USA.
Draft notice: this policy is drafted by Ten30 to reflect how the site currently operates and addresses common UK GDPR and California CCPA disclosure requirements. It is a starting point, not legal advice. Have it reviewed by a qualified attorney before relying on it for compliance in your specific jurisdiction.