Sand Castle
Privacy
We collect the least we can get away with. This page says exactly what that is, rather than reserving the right to do anything at all.
Last updated : August 30, 2026
What we collect, and when
When you send a quote request, we receive what you typed: your company, your name, your email, and optionally a phone number and a website. We also receive the project details you chose and the brief you wrote, including where the work is going.
When you buy from the shop, checkout runs on Shopify. Your payment details go to Shopify and its payment processor. We never see or store a card number.
When you use Sand Castle Studio, your description and any logo you attach are sent to Google's image model to produce the render, then discarded. We do not keep the prompt, the logo, or the image.
Cookies and tracking
This site sets no cookies and runs no analytics, no advertising pixels and no third-party trackers. There is nothing to consent to, which is why you were not asked.
Shopify's checkout sets its own cookies once you reach it, because a shopping cart cannot work otherwise. That happens on Shopify's domain and under Shopify's policy.
Where it goes
Quote requests are stored in our database, hosted by Supabase, and a copy is emailed to us through Resend so that a person actually sees it. Nobody outside the company has access.
We do not sell contact details, we do not share them with advertisers, and we do not add you to a mailing list because you asked for a quote.
How long we keep it
Quote requests are kept while the project is live and for as long as we may reasonably need them afterwards, for example if you come back a season later and want the same specification.
Ask us to delete yours and we will, unless we are required to keep a record of a completed sale.
Your rights
You can ask what we hold about you, ask for a copy, ask for a correction, or ask us to delete it. Write to the address below and we will answer within thirty days.
Depending on where you live, you may have further rights under laws such as the GDPR or the CCPA. We apply the same practice to everyone rather than sorting people by jurisdiction.
Contact
Questions about any of this go to the same place as everything else.
Sand Castle
Paradise Valley
Arizona, United States
This page is written in plain language so it can actually be read. It is not legal advice, and it does not replace a lawyer's review for your own situation.
