Privacy Policy.

Oak & Rowan ("Studio," "we," "us," or "our") provides this Privacy Policy to explain our data collection, processing, and protection practices regarding visitors to our website and our clients. We adhere strictly to the principles of data minimization and privacy by design.

Notice Regarding Third-Party Tracking
Oak & Rowan strictly prioritizes your digital privacy. We do not employ any third-party marketing trackers, cross-site tracking scripts, or invasive advertising pixels on this website.

1. Agency-Client Confidentiality & Professional Standards

Our studio understands your concerns as a client for privacy and the need to ensure the privacy of your proprietary information. Maintaining your trust and confidence is a high priority. We are bound by strict internal standards of confidentiality, and we always strive to protect your right to privacy.

WE DO NOT DISCLOSE ANY PERSONAL OR BUSINESS INFORMATION ABOUT OUR CLIENTS TO ANYONE, EXCEPT AS REQUIRED BY LAW OR TO ENABLE US TO EFFECTUATE THE PURPOSE OF OUR DIGITAL ENGAGEMENT.

We safeguard the data, server files, and digital documents containing your information and destroy, erase, or make unreadable such data prior to disposal.

2. Disclaimer: No Formal Relationship

While we employ rigorous standards to protect client data, submitting information through this website (e.g., via contact forms or emails) does not automatically create a formal, binding client relationship until a mutually signed engagement letter or contract is executed.

3. Categories of Personal Data Collected

In accordance with data minimization principles, we collect only the information reasonably necessary to operate our website and communicate with prospective or current clients:

• Directly Provided Information: Names, email addresses, phone numbers, physical addresses, billing details (for retained clients), and the contents of any project inquiries.
• Automatically Collected Information: To maintain the security and operational integrity of our edge infrastructure, we may log network-level data, including device IP addresses, browser types, requesting URLs, and timestamp data.
• Website Analytics: We measure aggregate site traffic without tracking individual user behavior across the internet.

4. Processing Purposes

We process your information exclusively to fulfill and manage digital services, respond to inquiries, maintain website infrastructure and edge security, and process necessary financial transactions.

5. Disclosures to Third Parties vs. Service Providers

Client information regarding a specific project is governed strictly by our engagement agreement. It is never shared without explicit permission or legal necessity.

• Service Providers: We engage specialized vendors to process data solely on our behalf (e.g., secure cloud hosting via Cloudflare, email services, and payment processors).
• Third Parties: We do not share, sell, rent, or trade your data with external third parties for independent use, marketing, or behavioral profiling.

6. Security Safeguards

Oak & Rowan implements commercially reasonable administrative, physical, and technical safeguards to protect your data against unauthorized access. These measures include encryption in transit and at rest, principle-of-least-privilege access controls, and secure data disposal protocols. While we utilize advanced security architectures, no method of transmission over the internet is entirely infallible.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Client data is retained for the duration of the active project and subsequent maintenance agreements. Inquiry data is retained only as long as necessary to address your request, after which it is securely destroyed or anonymized.

8. Policy Modifications

We reserve the right to amend this Privacy Policy at our discretion to reflect technological advancements or operational changes. Any modifications will be posted on this page with an updated "Effective Date."