Privacy Policy

How I collect, use and protect your information, in plain words.

Last updated: October 18, 2026

The short version

  • I only collect what I need to answer you, do the work, and run the AI receptionist service.
  • I never sell your information, and I don't use it for advertising.
  • Google Analytics only runs if you allow it. Visitors outside the US are asked first, and a Global Privacy Control signal is always respected.
  • Card payments are handled by Stripe. I never see or store your full card number.
  • Calls to an AI receptionist are announced as AI and as recorded, at the start of every call.
  • You can ask to see, correct or delete your information at any time: michael@consciouswebdesign.com.

Who I am

This website and its services are run by Conscious Web Design, LLC, Bend, Oregon 97702, USA ("I", "me"). I'm Michael de Fauw, and I'm the person responsible for your information. Under the EU and UK GDPR, I'm the "controller" for information collected through this website.

Questions or requests: michael@consciouswebdesign.com.

What I collect

When you write to me. The contact form sends your name, email, business and website, the topic you choose and your message. Emails you send me directly are kept in my inbox.

When you buy. Stripe's checkout collects your name, email, phone number, billing address, business name and website, and your card. I receive everything except the full card details. If you tick add-ons you're interested in, those ticks are recorded with your purchase.

When someone calls an AI receptionist. For businesses that use the service: the caller's phone number, the call recording, a transcript, a short summary and any message or details the caller gives (for example a name, an order number or a callback time). See "AI receptionist calls" below.

When you browse. My hosting and security providers keep standard technical logs (IP address, browser, pages requested, time) to keep the site running and protect it from abuse. If you allow analytics, Google Analytics records which pages you visit, roughly where you are (city level), and your device and browser type.

I don't knowingly collect sensitive information (such as health data) through this website. Please don't send it in the contact form.

How I use it, and why

What forLegal basis (GDPR)
Replying to you, preparing your free review, quoting and doing the work you ask forSteps you've asked for before a contract, and the contract itself
Billing, receipts, and keeping tax and accounting recordsContract, and legal obligation
Running the AI receptionist for a business: answering calls, taking messages, sending summariesThe contract with that business (I act on its behalf)
Keeping the site secure and workingLegitimate interests
Understanding which pages are useful (Google Analytics)Your consent (outside the US). In the US, legitimate interests, and you can opt out at any time

I don't sell personal information, share it for cross-context advertising, or use it to make automated decisions that have legal or similarly significant effects on you.

Who helps me

A few trusted services process information for me. Each only gets what it needs for its job:

ServiceWhat it does
CloudflareDelivers and protects the website (security, speed), and counts page views anonymously, without cookies
KnownHostHosts the website and the AI receptionist system (USA)
Google WorkspaceMy email
StripeTakes card payments and manages subscriptions
PostmarkDelivers contact-form messages to my inbox, and sends service emails such as call summaries
TwilioConnects phone calls to the AI receptionist
ElevenLabsRuns the AI receptionist's voice conversation, recording and transcript
Google AnalyticsWebsite statistics, only when allowed (see "Cookies")

I may also share information if the law requires it, or to protect my rights or someone's safety.

AI receptionist calls

When a business uses my AI phone receptionist, I process calls on that business's behalf. For those calls, the business is responsible for its callers' information, and I act as its service provider ("processor" under the GDPR).

  • Every call starts with the receptionist saying it's an AI assistant and that the call may be recorded.
  • Recordings, transcripts and summaries are used to answer the call, pass the message on, and send the business a summary. They are shared only with that business and the services listed above.
  • By default, call records are kept for up to 12 months. The business can delete any call sooner, and deleting a call also deletes the copy held by the voice provider. Basic billing details (date, length and cost) are kept for accounting.
  • Callers can ask the business, or me at michael@consciouswebdesign.com, to delete a recording or transcript.

The receptionist answers questions and takes messages. It doesn't give medical, legal or financial advice.

Cookies and similar storage

This site uses very little:

NamePurposeType
cwdConsent (your browser's storage)Remembers your cookie choiceNecessary
cwdIntro (this tab only)Skips the opening animation once you've seen itNecessary
Stripe cookiesFraud prevention, only when you open checkoutNecessary
_ga, _ga_* (Google Analytics)Counts visits and pages; kept up to 13 monthsAnalytics, only with permission

If you're outside the US, analytics stay off unless you choose "Allow analytics". In the US, analytics are on unless your browser sends a Global Privacy Control signal or you turn them off. You can change your choice at any time with the link at the bottom of every page.

Fonts and the 3D graphics are served from this website itself, so loading a page doesn't send your information to Google Fonts or other font or code services. Cloudflare, which delivers the site, also counts page views anonymously. It uses no cookies and doesn't identify you.

How long I keep it

  • Messages and project emails: for as long as we're working together, and a reasonable time after, so I can help with follow-up questions.
  • Billing and tax records: as long as the law requires (usually 7 years).
  • AI receptionist calls: up to 12 months by default, or less if the business deletes them.
  • Analytics: up to 13 months.
  • Security logs: kept briefly, usually a few weeks.

International transfers

I'm based in the United States, and so are most of the services above. If you're in the EU, UK, Switzerland or Canada, your information is transferred to and stored in the US. Where the law requires it, those transfers rely on the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) or on the European Commission's standard contractual clauses used by these providers.

Your rights

Wherever you live, you can ask me to show you, correct, or delete the information I hold about you, and I'll honour reasonable requests. Depending on where you live, you may also have these rights:

EU, UK and Switzerland (GDPR): access, correction, deletion, restriction, portability, the right to object (including to analytics), and the right to withdraw consent at any time. You can also complain to your local data protection authority.

California (CCPA/CPRA) and other US states: the right to know what I collect and why, to delete it, to correct it, and to opt out of "sale" or "sharing". I don't sell or share personal information, and I treat a Global Privacy Control signal as an opt-out. I won't treat you differently for using any of these rights.

Canada (PIPEDA): access and correction, and the right to withdraw consent.

To make a request, email michael@consciouswebdesign.com. I'll reply within 30 days, and I may need to confirm it's really you first.

Children

This website is for businesses and isn't meant for children. I don't knowingly collect information from anyone under 16. If you believe a child has sent me their information, email me and I'll delete it.

Security

The site is served over HTTPS, payments go through Stripe, access to systems is limited and protected, and I only use providers with strong security practices. No system is perfectly secure, but I take care of your information as if it were my own.

Changes to this policy

If I change how I handle information, I'll update this page and the date at the top. For important changes, I'll make that clear on the website or tell clients directly.

Contact

Conscious Web Design, LLC · Bend, Oregon 97702, USA · michael@consciouswebdesign.com