top of page

Privacy Policy

General

The Millwork Studio ("we," "us," or "our") is committed to protecting the privacy of the people who visit our website, request an estimate from us, or receive documents through our customer portal. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have.

Information We Collect

1. Information you give us

When you contact us through the website or when we send you an estimate or contract, we may collect:

  • Name

  • Business/company name

  • Email address

  • Phone number

  • Mailing or project address

  • Any information you voluntarily include in a message, quote request, or signed document
     

2. Information we collect automatically when you sign a document

Because electronic signatures must be legally traceable under the U.S. ESIGN Act and state UETA statutes, when you open or sign a document we send you through our customer portal, we automatically record:

  • The date and time you opened the signing link

  • The date and time you signed

  • Your IP address

  • Your browser and device information (user agent)

  • The name and email address you used to sign

  • The signature image itself

This information is stored with the signed document as part of the audit trail. It is used solely to prove that the document was executed by you and has not been altered afterwards.
 

3. Cookies and analytics

The marketing website may use cookies and standard web-analytics tools to understand traffic patterns and improve the site. You can control cookies through your browser settings. Our customer portal uses only the minimum cookies required to keep you signed in during a session — no advertising or cross-site tracking cookies.

How We Share Your Information

We only share your information in the following limited situations:

  • Service providers we rely on to run our business. These vendors process data on our behalf under contractual confidentiality obligations. Current providers include:

    • Supabase — application database and file storage

    • Vercel — website and application hosting

    • Microsoft 365 — email delivery, calendaring, and file storage

    • LiveKit — video and voice communication (when applicable)

  • Legal or regulatory requirements. We may disclose information if required by law, subpoena, court order, or to protect the rights, safety, or property of The Millwork Studio, our clients, or the public.

  • Business transfers. If The Millwork Studio is ever acquired or restructured, customer information may transfer to the successor entity, subject to the terms of this policy.

Data Retention

We keep signed estimates, contracts, and their audit trails for as long as they may be needed for tax, accounting, legal-defense, or contract-enforcement purposes — typically at least seven (7) years after the project closes.

We keep contact and inquiry information only as long as reasonably needed to serve you or as required by law.

Data Security

We use industry-standard technical and organizational safeguards to protect your information, including encrypted connections (HTTPS/TLS), encrypted storage, role-based access controls, and audit logging inside our applications. No system is perfectly secure, but we work to make the risk of unauthorized access as low as reasonably possible.

Your Rights

Depending on where you live, you may have the right to:

  • Request a copy of the personal information we hold about you.

  • Ask us to correct information that is inaccurate.

  • Ask us to delete information that we no longer have a legal or contractual reason to keep.

  • Opt out of marketing communications at any time.

  • Request a paper copy of any document you signed electronically.

To make any of these requests, email us at support@themillworkstudio.com. We will respond within a reasonable time, typically within 30 days.
 

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we have collected and to request deletion (subject to the record-retention exceptions above). We do not sell or "share" personal information as those terms are defined by the CCPA.
 

If you are in the European Union / United Kingdom, our legal basis for processing your personal information is (a) performance of a contract with you, (b) compliance with a legal obligation, or (c) our legitimate interest in operating and improving our business. You have the right to lodge a complaint with your local data-protection authority.

Third-Party Links

Our website and documents may contain links to third-party sites. We are not responsible for their privacy practices and encourage you to review their policies before providing any information to them.

Children's Privacy

Our services are directed at businesses and are not intended for children under the age of 13. We do not knowingly collect personal information from children. If we learn that we have, we will delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last updated" date at the bottom of this page. Continued use of our website or customer portal after an update means you accept the revised policy.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at support@themillworkstudio.com.

​

By using our website and submitting information through our contact forms, you agree to the terms outlined in this Privacy Policy.

​

This Privacy Policy was last updated on August 21, 2026.

bottom of page