Privacy Policy
What this policy covers
This policy covers westlakegoldsmiths.com and the studio portal at studio.westlakegoldsmiths.com. It describes what we collect when you submit the commission form, when you sign in to your client portal, and while your project is active — where that information lives, and how to have it removed.
It does not cover conversations that happen after we meet in person, over email, or on the phone. Those are governed by the quote, invoice, and agreements you sign with the studio directly.
What we collect
We collect only what you voluntarily submit through the commission form or your client portal:
- Name — first and last, as you provide them.
- Email address — so we can reply and send you a sign-in link.
- Phone number — required on the commission form so we can reach you quickly about your piece.
- Piece preferences — the piece type, metal, karat, stones, and style notes you select or write.
- Budget range — the bracket you choose.
- Inspiration images — any photographs you upload as reference.
- Free-text notes — anything you add to the final step or to your portal profile.
- Portal profile details — if you sign in and fill out your studio profile (address, preferences, life events such as birthday or anniversary, spouse or partner name), those fields live with your account and are visible to the studio so we can tailor our work and reminders.
We do not collect or infer anything beyond what you type or upload. We do not track your browsing, build behavioral profiles, or buy data about you from anyone else.
If you sign in to your portal, we create a client account on your behalf. Sign-in uses a one-time magic link we email you — there is no password.
How we use it
We use your submission to have a commission conversation with you. That is the purpose. Sam reads every inquiry personally and replies by email or phone within two business days.
If you have an active commission, we use your portal account to show you progress updates, designs, invoices, and your collection record, and to send sign-in links and transactional email about your project. Payments, if any, are processed by Stripe on our behalf.
We do not use your information for marketing lists, newsletters, retargeting, profiling, or any form of advertising.
Where it lives
Your information lives in a small set of tools we use to run the studio. All of them are operated by Westlake Goldsmiths:
- Supabase — our primary database. Inquiry details, your portal profile, your projects, designs, and collection records are stored here. The database is hosted on Supabase's infrastructure in the United States.
- Supabase Storage — any inspiration images you upload on the commission form, along with design photos and gallery photos, are stored in Supabase Storage on the same infrastructure.
- Resend — sends email on our behalf: your sign-in link, inquiry confirmations, project updates, and receipts. The "from" address is no-reply@westlakegoldsmiths.com.
- Vercel — hosts this website. HTTP requests and serverless functions run on Vercel's edge network.
- Cloudflare Turnstile — a privacy-friendly bot check we run on the commission form and the account-signup form. It does not track you across the web.
- Stripe — if and when you pay an invoice, Stripe processes the payment. Your card details are sent directly to Stripe and are never stored by us.
The commission form is handled by a small server endpoint that Westlake wrote and operates on Vercel. No third-party form processor, CRM, marketing platform, or ad network is involved.
Who else sees it
Nobody outside the studio. We do not sell your information. We do not rent it. We do not share it with partners or affiliates. We do not run advertising of any kind.
Supabase, Resend, Vercel, Cloudflare, and Stripe store the data on our behalf as service providers. Their own privacy policies govern how they handle it on their infrastructure. They do not use your information for their own purposes.
Cookies & tracking
We do not use analytics, tracking pixels, or advertising cookies on this site. There is no Google Analytics, no PostHog, no Meta Pixel, no session recording, and no behavioral profiling.
The following cookies and third-party requests do occur:
- Sign-in session cookie — if you sign in to your portal, we set a secure, HTTP-only cookie scoped to
.westlakegoldsmiths.comso you stay logged in. It is used only to identify you to our own servers and is deleted when you sign out. - Google Fonts CDN (
fonts.googleapis.com,fonts.gstatic.com) — the Cormorant Garamond, Jost, and Cinzel typefaces. Governed by Google's privacy policy. - Cloudflare Turnstile (
challenges.cloudflare.com) — loaded on the commission form and the account-signup form to verify you are a person. Turnstile is designed to be privacy-preserving and does not track you across the web. - Supabase Storage (
dinoceexobbhefojbvgc.supabase.co) — loaded only when you upload inspiration images on the commission request page or view content in your portal. - Stripe (
js.stripe.com) — loaded only on pages where you can pay an invoice. Governed by Stripe's privacy policy.
No analytics script, tag manager, tracking pixel, advertising cookie, or session-replay tool is loaded on any page.
Retention
We keep your inquiry and portal records while your commission conversation is active. If we don't end up working together, we retain the record so we remember you if you come back, unless you ask us to remove it.
Email us at howdy@westlakegoldsmiths.com and we will delete your profile, project records, and any uploaded inspiration or design images within a reasonable window. Some records tied to paid invoices may be retained for the period required by tax and accounting rules.
Contact
For any privacy request — to view, correct, or delete the information we hold about you — email howdy@westlakegoldsmiths.com. You can also call the studio at (512) 766-7039 or visit by appointment at 807 The High Rd, Austin, TX 78746.
Beta acknowledgment
This policy will evolve as the studio grows. Material changes will be reflected in the "Last updated" date at the top of this page.