Short, plain, honest.

The only thing on this site that collects information about you is the contact form. When you fill it out, we receive what you typed in it — your name, your email address, and the message itself. The form also has optional fields for company, the platform(s) you’re working with, project type, and budget range; if you fill those in, we receive those too.

We don’t use third-party analytics that follow you across the web. We use Vercel Analytics, which is cookieless and aggregate — we can see that a page was visited, not who visited it.

Today, the form sends an email to hello@cartcreative.com. That inbox lives on Microsoft 365. The contents of your message sit in that inbox the same way any other email to us does — under Microsoft’s encryption at rest, accessible only to the people listed under “Who has access” below.

We do not currently store contact-form submissions in a database. The email is the record.

We keep inbound contact emails for as long as the conversation is live and for a reasonable period after, so we can pick a thread back up if you come back to us. In practice that means we don’t delete on a schedule — but if you want your message removed, email us and we will.

Jarrick Anderson, the founder, has access to hello@cartcreative.com. If a subcontractor is going to need to see your message to help on a project, we’ll tell you who they are before they do. We don’t share contact-form submissions with anyone else, and we don’t sell or rent them — ever.

Email hello@cartcreative.com and ask. Mention the address or name you used. We’ll delete the message from the inbox — and from any other system we store it in — and write back to confirm. We aim to do this within a few business days.

We’re building an internal CRM. When it ships, contact-form submissions will also land in our own database (Neon Postgres, encrypted at rest, hosted via Vercel) so we can track conversations properly instead of digging through email. Access stays the same — Jarrick, plus any subcontractor we’ve named to you. Deletion requests still work the same way: email us, and we remove your data from both the inbox and the database.

If anything else material changes about how we handle your information, we’ll update this page. There’s no mailing list to unsubscribe from because we don’t run one.