Privacy Policy

1. Scope of this Privacy Policy

This Privacy Policy explains how Demeric Forge may collect, use, retain and protect personal information submitted through this website, project inquiry forms, business communications and service delivery. It is written for a web development business serving individuals, startups and small businesses and is intended to describe actual categories of information that can reasonably arise in that relationship.

The policy does not claim that every privacy statute applies to Demeric Forge. Some laws apply only when a business meets statutory thresholds or engages in particular types of processing.

2. Information provided directly

Information provided directly may include a name, email address, company or organization name, project type, project description, current website address, requested functionality, timing information, billing information, transaction records, support communications and other details voluntarily supplied in connection with an inquiry or active engagement.

Clients may also provide text, images, brand assets, platform information, account identifiers, access permissions, product information or other project materials reasonably necessary to perform the requested web development work. Information that is not needed for the project should not be submitted.

3. Technical and usage information

Normal website operation can generate technical information such as IP address, browser type, operating system, device category, referring page, pages viewed, timestamps, cookie identifiers, security logs and diagnostic information. The exact information depends on the live Shopify configuration, installed applications, analytics tools and hosting services that are actually enabled.

4. Purposes for using information

• Review and respond to project inquiries.
• Prepare estimates, scopes, proposals, invoices and project communications.
• Develop, maintain, optimize and support websites and e-commerce stores.
• Provide authorized access to project systems where necessary.
• Maintain business, accounting and transaction records.
• Protect the website and business systems from abuse, fraud and security events.
• Diagnose technical issues and improve website performance.
• Comply with applicable legal obligations and resolve disputes.

5. Data minimization and security

Demeric Forge aims to limit information collection to what is reasonably relevant for the stated purpose. Reasonable administrative and technical measures may be used to protect business and project information. No website, hosting service, cloud platform, email provider or internet transmission can be guaranteed to be completely secure.

6. Service providers

Information may be processed by providers used for website hosting, e-commerce infrastructure, analytics, security, file storage, project management, communication, invoicing or payment processing. Those providers may process information according to their own contracts and privacy practices. The exact providers should be reviewed whenever the live website configuration changes.

7. Cookies and similar technologies

The website may use cookies, local storage or similar technologies for platform operation, security, preference storage, analytics or performance measurement. The exact technologies depend on the active Shopify theme, installed applications and enabled services. Additional information appears in the Cookie Policy.

8. Retention

Information may be retained for as long as reasonably necessary to respond to inquiries, perform services, provide support, maintain business and tax records, protect security, resolve disputes and satisfy legal obligations. Retention periods can differ by category of information. Information no longer reasonably needed may be deleted, anonymized or archived according to operational requirements.

9. Kentucky Consumer Data Protection Act

The Kentucky Consumer Data Protection Act became effective January 1, 2026. Under KRS 367.3613, the Act generally applies to persons doing business in Kentucky or targeting Kentucky residents that, during a calendar year, control or process personal data of at least 100,000 consumers, or at least 25,000 consumers while deriving more than 50% of gross revenue from the sale of personal data. Statutory exemptions also apply.

Because applicability depends on actual data volume, revenue sources and exemptions, this policy does not state that Demeric Forge is automatically subject to the Act merely because the business is located in Kentucky.

10. Rights where applicable

Where the Kentucky Consumer Data Protection Act or another applicable privacy law grants a right, eligible individuals may have rights that include confirming whether personal data is processed, accessing certain personal data, correcting inaccuracies, requesting deletion, obtaining certain portable data, and opting out of specified targeted advertising, sale or qualifying profiling. Requests may require reasonable authentication and may be subject to legal exceptions.

11. Requests, correction and deletion

An individual may contact Demeric Forge using the information below to ask about personal information previously supplied, request correction of inaccurate information, request deletion where appropriate, or raise a privacy concern. Demeric Forge may request information reasonably necessary to verify identity and locate the relevant record before acting on a request.

12. Children

The website and services are intended for general business and professional use and are not directed to children. Demeric Forge does not knowingly seek personal information from children through its standard project inquiry process.

13. Policy changes

This Privacy Policy may be revised when website technology, vendor relationships, business practices or applicable legal requirements change. The date shown at the top identifies the current published version.