Privacy Policy

1. Introduction

Phillip Fairbrother LLC, doing business as The Digital Fair ("The Digital Fair," "Company," "we," "us," or "our"), is a North Carolina limited liability company that provides web design, development, hosting, content management, and related services (the "Services") through our website located at thedigitalfair.com (the "Site").

This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit our Site, create an account, use our Services, or otherwise interact with us. This Privacy Policy also explains your rights and choices regarding your personal information and how you can contact us with questions or concerns.

By accessing or using our Site or Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described in this Privacy Policy, please do not use our Site or Services.

Contact Information: For any questions about this Privacy Policy or our data practices, please contact us at support@thedigitalfair.com.

2. Information We Collect

We collect personal information in the following ways:

2.1 Information You Provide to Us

Account Registration Information. When you create an account, we collect your name and email address.

Domain Registration Information. If you use our domain registration services, we collect your mailing address as required by domain registrars and ICANN regulations. This address may be shared with the applicable domain registrar and may appear in public WHOIS records, subject to applicable privacy protections.

Communications. When you contact us via email or through our Site, we collect the content of your messages along with your email address and any other information you choose to provide.

Client Content. Any text, images, media, or other content you upload to your website through our CMS platform.

2.2 Information Collected Automatically

Analytics Data. We use Umami, a privacy-focused analytics provider, to collect anonymized usage data about how visitors interact with our Site. Umami does not use cookies, does not collect personal information, and does not track visitors across websites. The analytics data we collect includes page views, referral sources, browser type, device type, and general geographic location (country level). This data is aggregated and cannot be used to identify individual visitors.

Server Logs. Our hosting infrastructure may automatically collect certain technical information when you visit our Site, including your IP address, browser type, operating system, referring URLs, and access times. This information is used solely for maintaining the security and performance of our Services.

2.3 Information We Do Not Collect

We want to be transparent about what we do not collect. The Digital Fair does not collect sensitive personal information such as Social Security numbers, financial account information (payment processing is handled entirely by Stripe, our third-party payment processor), biometric data, precise geolocation data, racial or ethnic origin, religious beliefs, health information, or sexual orientation. We do not use cookies for tracking or advertising purposes. We do not use tracking pixels. We do not sell, share, or rent your personal information to third parties for their own marketing purposes.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

Providing and Maintaining the Services. To create and manage your account, provide website hosting and CMS access, facilitate domain registration, process subscription plans, and provide customer support.

Communications. To send you account-related notifications, billing information, service updates, renewal notices, and respond to your inquiries. We may also send you information about new features or services, from which you may opt out at any time.

Improving the Services. To understand how our Services are used, diagnose technical issues, and improve the functionality, security, and user experience of our platform.

Legal Compliance and Protection. To comply with applicable laws, regulations, and legal processes; to enforce our Terms of Service; to protect the rights, property, and safety of The Digital Fair, our Clients, and others; and to prevent and address fraud, unauthorized activity, and other misuse of the Services.

Business Operations. To facilitate business transfers, mergers, or acquisitions, in which case personal information may be among the assets transferred, subject to the protections described in this Privacy Policy.

4. How We Share Your Information

We do not sell, rent, or share your personal information with third parties for their own marketing purposes. We may share your personal information only in the following limited circumstances:

Service Providers. We share personal information with third-party service providers who perform services on our behalf, including:

• Stripe - for payment processing. Stripe collects and processes your payment information directly. We do not have access to your full credit card or bank account details. Stripe's privacy policy is available at stripe.com/privacy.
• Supabase - for database hosting and authentication services.
• Vercel - for website hosting and deployment infrastructure.
• Porkbun - for domain name registration services. Your registrant contact information may be shared with Porkbun as required for domain registration.
• Umami - for privacy-focused website analytics (no personal information is shared; only anonymized aggregate data is collected).

Our service providers are contractually obligated to use your personal information only for the purposes of providing services to us and in accordance with this Privacy Policy.

Legal Requirements. We may disclose your personal information if required to do so by law, regulation, legal process, or governmental request, or if we believe in good faith that such disclosure is necessary to comply with legal obligations, protect our rights or property, protect the safety of our Clients or others, investigate fraud, or respond to a government request.

Business Transfers. In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of such transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

With Your Consent. We may share your personal information with third parties when you have given us your explicit consent to do so.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Services. If you cancel your account, we will make commercially reasonable efforts to delete or anonymize your personal information within thirty (30) days following termination, except where we are required to retain information to comply with legal obligations, resolve disputes, or enforce our agreements. Backup copies of your data may persist in our systems for a reasonable additional period as part of our normal backup and disaster recovery processes.

Anonymized and aggregated analytics data that cannot be used to identify any individual may be retained indefinitely for research and improvement purposes.

6. Data Security

We implement commercially reasonable technical and organizational security measures to protect your personal information from unauthorized access, use, alteration, and destruction. These measures include encryption of data in transit (TLS/SSL), secure authentication protocols, access controls limiting personnel access to personal information on a need-to-know basis, and regular security reviews of our platform and infrastructure.

However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach affecting your personal information, we will notify you and the appropriate authorities as required by applicable law, including N.C.G.S. §75-65 (North Carolina Identity Theft Protection Act).

7. Your Rights and Choices

7.1 All Users

Regardless of your location, you have the following rights with respect to your personal information:

• Access. You may request access to the personal information we hold about you.
• Correction. You may request that we correct inaccurate personal information.
• Deletion. You may request that we delete your personal information, subject to certain exceptions required by law.
• Opt-Out of Communications. You may opt out of receiving promotional communications by following the unsubscribe instructions in any such communication or by contacting us at support@thedigitalfair.com.
• Account Data Export. You may request an export of your account data and Client Content at any time.

To exercise any of these rights, please contact us at support@thedigitalfair.com. We will respond to your request within thirty (30) days, or within the timeframe required by applicable law.

7.2 California Residents - Your CCPA Rights

If you are a California resident, the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), provides you with additional rights regarding your personal information. This section supplements the information in this Privacy Policy and applies solely to California residents.

Categories of Personal Information Collected. In the preceding twelve (12) months, we have collected the following categories of personal information: Identifiers (name, email address, mailing address for domain registration, IP address); Internet or other electronic network activity information (browser type, device type, pages visited via anonymized analytics); and Professional or employment-related information (only if voluntarily provided in communications).

Sources of Personal Information. We collect personal information directly from you (account registration, communications, content uploads) and automatically through our Site (server logs).

Business Purposes for Collection. We collect personal information for the purposes described in Section 3 of this Privacy Policy, including providing the Services, processing payments, communicating with you, improving our platform, and complying with legal obligations.

Sale or Sharing of Personal Information. The Digital Fair does not sell your personal information. The Digital Fair does not share your personal information for cross-context behavioral advertising purposes. Because we do not sell or share personal information, we are not required to offer a "Do Not Sell or Share My Personal Information" link. However, if our practices change in the future, we will update this Privacy Policy accordingly and provide such mechanisms as required by law.

Your CCPA Rights. As a California resident, you have the right to: (a) request that we disclose the categories and specific pieces of personal information we have collected about you; (b) request that we delete your personal information; (c) request that we correct inaccurate personal information; (d) not be discriminated against for exercising your CCPA rights. To exercise these rights, contact us at support@thedigitalfair.com. We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf, subject to verification.

Right to Limit Use of Sensitive Personal Information. We do not collect or process sensitive personal information as defined under the CCPA/CPRA. Therefore, this right is not applicable to our data practices.

Retention. We retain personal information as described in Section 5 of this Privacy Policy.

Financial Incentives. We do not offer financial incentives or price differences in exchange for personal information.

7.3 North Carolina Residents

If you are a resident of North Carolina, you have rights under North Carolina law regarding the security of your personal information. In the event of a security breach involving your personal information, we will notify you in accordance with N.C.G.S. §75-65 without unreasonable delay. Such notification will include a description of the incident, the types of information involved, steps we have taken in response, and contact information for the Federal Trade Commission and the North Carolina Attorney General's Office.

7.4 Other U.S. State Privacy Laws

Residents of other U.S. states with applicable data privacy laws (including but not limited to Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others) may have similar rights to access, correct, delete, and port their personal information, as well as the right to opt out of the sale of personal information and targeted advertising. As The Digital Fair does not sell personal information or engage in targeted advertising, many of these provisions do not apply to our data practices. If you wish to exercise any rights available to you under your state's privacy law, please contact us at support@thedigitalfair.com.

8. Children's Privacy

The Services are not directed to individuals under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete such information as soon as possible. If you believe that a child under 18 has provided personal information to us, please contact us at support@thedigitalfair.com.

9. Third-Party Websites and Services

Our Site and Services may contain links to third-party websites, services, or applications. This Privacy Policy does not apply to, and we are not responsible for, the privacy practices of any third-party websites or services. We encourage you to review the privacy policies of any third-party websites or services before providing them with your personal information. The inclusion of a link to a third-party website does not imply endorsement by The Digital Fair.

10. Privacy Practices for Websites Hosted by The Digital Fair

The Digital Fair hosts websites on behalf of our Clients. When you visit a website hosted on our platform, please be aware that:

Client-Controlled Content. The content, features, and data collection practices of individual Client websites are determined by the respective Client, not by The Digital Fair. Each Client is responsible for their own privacy practices and compliance with applicable privacy laws.

Data Processor Role. With respect to personal information collected through Client websites (such as information submitted through contact forms or e-commerce features on Client sites), The Digital Fair acts as a data processor on behalf of the Client. The Client is the data controller and is responsible for providing their own privacy policy to their end users.

Platform Data. The Digital Fair may automatically receive certain technical information (such as IP addresses and browser information) when visitors access websites hosted on our platform. This information is used solely for platform security, performance monitoring, and abuse prevention.

If you have questions about the privacy practices of a specific website hosted on our platform, please contact the website owner directly.

11. Cookies and Tracking Technologies

The Digital Fair does not use cookies for advertising or tracking purposes on our Site. We do not use tracking pixels, web beacons, or similar technologies for behavioral advertising or cross-site tracking. Our analytics provider, Umami, is designed to be privacy-friendly and does not use cookies to track visitors.

Our Site may use strictly necessary cookies for essential functionality, such as maintaining your login session and security tokens. These cookies are required for the Site to function properly and cannot be disabled. We may also use a Global Privacy Control (GPC) signal detector to honor browser-level privacy preferences.

12. International Data Transfers

The Digital Fair is based in the United States, and your personal information is processed and stored in the United States. If you are accessing our Services from outside the United States, please be aware that your personal information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence. By using the Services, you consent to the transfer of your information to the United States.

13. Do Not Track Signals

Our Site respects Do Not Track ("DNT") signals transmitted by your web browser. Because we do not engage in tracking or cross-site behavioral advertising, our data collection practices remain the same regardless of whether a DNT signal is detected. We also honor Global Privacy Control (GPC) signals as a valid expression of your privacy preferences.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Effective Date" at the top of this page and may provide additional notice via email or through the Services. Your continued use of the Site or Services after any changes to this Privacy Policy constitutes your acceptance of such changes. We encourage you to review this Privacy Policy periodically. This Privacy Policy will be reviewed and updated at least every twelve (12) months in accordance with CCPA requirements.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

To submit a privacy-related request (including requests to access, correct, or delete personal information), please email us at support@thedigitalfair.com with the subject line "Privacy Request." We will respond to verified requests within thirty (30) days.

For complaints regarding our privacy practices, you may also contact the North Carolina Attorney General's Office or the Federal Trade Commission.