Base Oregon Privacy Policy

Base Oregon ("we," "us," or "our") is a web design and development studio building websites and apps for businesses in Oregon, Washington and beyond. This Privacy Policy covers baseoregon.com and explains what we collect, why, who we share it with, and the choices and rights you have. Base Oregon is operated from the United States and is the controller of your personal information. For privacy questions or requests, email support@baseoregon.com.

Information you give us

• Quote requests: your name, email, phone, company, website, budget and the project details you describe.
• Messages: what you write in the contact form.
• Messages to us: what you send when you contact support.

Information collected automatically

• Device and log information: IP address, browser and device type, and the date and time of requests, so we can run the service, keep it secure and fix problems.
• Analytics: see "Cookies & Analytics" below.

We use your information to respond to your request and provide the services you ask for; contact you about it; keep the service secure, including blocking spam, abuse and attacks; understand how the site is used and improve it; and comply with the law.

We do not sell your personal information, we do not share it for targeted or cross-context behavioral advertising, and we do not use it to make automated decisions with legal or similarly significant effects on you.

Legal bases (EEA, UK and Switzerland). We process your information to provide the service you asked for (contract, or steps you request before one); for our legitimate interests in keeping it secure and improving it; with your consent, which you can withdraw at any time (for example, Analytics cookies); and to meet legal obligations.

What you send through our forms goes only to Base Oregon, to answer you and prepare a quote. We don’t publish it or share it with anyone else.

We use a small number of service providers, who process information only on our instructions and only to provide their service:

• DigitalOcean: servers, database and file storage (United States);
• Resend: sending account and notification emails;
• Google: Google Analytics (see below);
• Cloudflare: an automatic security check on forms, to tell people from bots.

Our servers also run security software that blocks malicious traffic; it may share the IP addresses of attacking computers (never your account information or content) with a community blocklist.

Essential storage (always on). Your browser's storage remembers small settings, such as your cookie choice. The site can't work without it.

Analytics cookies. Google Analytics counts visits and shows which pages are used. If you're in the EU, EEA, UK or Switzerland (judged from your device's time zone), it stays off until you choose "Accept all" in the cookie banner; elsewhere it's on by default and you can turn it off at any time from Cookie settings. It sets _ga and _ga_<id> (each expires after 2 years), never receives your content, and its advertising features are turned off. You can also use the Google Analytics opt-out add-on.

We don't currently respond to "Do Not Track" browser signals, since there's no common standard for them, and we don't track you across other companies' websites or apps.

Apart from the people you choose to share with and the providers above, we disclose information only if the law requires it, to protect the rights, safety or security of our users, the public or Base Oregon, or as part of a sale, merger or transfer of the service, in which case this Policy continues to apply and we'll tell you before it changes. We never sell your personal information.

We keep what you send us as long as we need it to handle your request and for our ordinary business records (for example, for tax or legal reasons), then delete it. To ask us to delete your information sooner, email support@baseoregon.com. Copies may remain in backups for a short time until they're automatically replaced.

We protect your information with encrypted connections (HTTPS), private file storage, and attack-blocking rules. No system is completely secure; if a breach affects your personal information, we'll notify you and the authorities as the law requires.

Base Oregon is for adults 18 and older. We don't knowingly collect personal information from anyone under 18. If you believe a child has given us information, email support@baseoregon.com and we'll delete it.

Wherever you live, you can access and correct your information, delete your account, get a copy of your data (by request), withdraw consent, and object to or restrict some uses. Residents of the EEA, UK, Switzerland and U.S. states with privacy laws may have these rights under their local law. Email support@baseoregon.com; we'll confirm your identity (usually by checking you control the email address you gave us) and respond within 30 days, or the time your law allows. You may use an authorized agent where your law permits, and we won't treat you differently for exercising your rights. If we deny a request, reply with "Appeal" in the subject and we'll answer within 45 days; you can also contact your state attorney general or, in the EEA/UK, your data protection authority.

Base Oregon is run from the United States, and your information is stored and processed there. Where the law requires it, we rely on appropriate safeguards, such as standard contractual clauses with our service providers, for information transferred from the EEA, UK or Switzerland.

We may update this Privacy Policy. The date at the top shows when it last changed. For material changes we'll tell you by email or in the service before they take effect, and where the law requires it we'll ask for your consent.

Questions, requests or complaints about this Policy or your information: email support@baseoregon.com.