Legal · privacy
Privacy, in plain English
Last updated October 25, 2026. Design Inc LLC, trading as The Traveling Designer. Contact: the contact form.
What I collect
- What you send: your name, email and answers when you book a call, use the calculator or health check, join the lounge waitlist or newsletter, pay an invoice or leave a review.
- Records that protect us both: when you sign up or confirm a subscription, pay or claim a payment, or agree to share a review, I record the time, your IP address and approximate location, and your browser, as proof of what was agreed.
- Analytics: Google Analytics loads only after you interact with the page, to see which pages help people.
- Cookies and storage: your light/dark choice, a random id so your lounge votes can be updated, and a session cookie for logged-in admin. No advertising cookies.
What I don't collect
Card numbers (Stripe handles them), and nothing is sold or rented to anyone, ever.
Who processes data for me
BigScoots (hosting), Cloudflare (DNS and email routing), Stripe (payments), toSend (email delivery), Google (Analytics and the Lighthouse speed test), Happy Scribe (transcripts of review videos you send) and TidyCal (call booking). Each only gets what it needs for its job.
The technology behind it
The same stack I build client systems on. Every piece is chosen for security first, then speed.
Hosting & delivery
- BigScoots managed hosting on LiteSpeed, PHP 8.3
- Cloudflare DNS and email routing; Cloudflare Workers, D1, KV, R2 and Queues for client apps
- Brotli compression and long-lived caching for static files
Security
- HTTPS everywhere, with HSTS and strict security headers
- Data stored outside the public web folder, readable only by the app
- Keys and passwords never in code or in email
- Cloudflare Zero Trust sign-in in front of client dashboards
- Spam and bot filtering on every form
Payments
- Stripe Checkout (PCI DSS Level 1): card numbers never touch my servers
- Zelle and bank transfer for fee-free payments
- toSend for transactional email, with SPF and DKIM authentication
- Double opt-in and one-click unsubscribe on every list
AI
- Claude (Anthropic's API) for drafting, sorting and summarising, with spending caps; under Anthropic's commercial terms, API data isn't used to train their models
- A person approves anything customer-facing
Media, booking & insight
- Happy Scribe for transcripts, Bunny.net for video and files
- TidyCal for booking calls
- Google Analytics (deferred until you interact) and Google Lighthouse for speed checks
- Sentry error monitoring on client apps
Want the full list of platforms I connect for clients? See 50+ integrations.
Newsletter and waitlist sign-ups are double opt-in: you're only added after clicking the confirmation link, and every email has a one-click way out. Report and invoice emails are sent because you asked for them.
How long I keep it
Invoices and payment records are kept as long as tax law requires. Everything else is kept while it's useful to you and deleted on request.
Your choices
Ask for a copy of your data, a correction, or deletion at any time through the contact form. I'll reply within a week, usually much sooner.