Who we are
Tornado Design LLC (“Tornado Design,” “we,” “us”) is a web design, development and digital marketing studio based in Scottsdale, Arizona. This policy explains what personal information we collect through tornadodesign.com (the “Site”) and when you contact us, how we use it, and the choices you have.
Effective date: October 22, 2026
This policy covers the Site and our direct communications with you. It does not cover websites we build or manage for clients; each client’s own privacy policy governs those sites.
Information we collect
Information you give us. When you use our contact form, email us, call or text, or become a client, we collect what you choose to share:
- Name, company name, email address and phone number
- The content of your message and any project details or files you send
- Billing and contract details if you become a client (we do not store full payment card numbers)
Information collected automatically. When you visit the Site, our hosting, security and analytics tools may collect:
- IP address, browser type, device type and operating system
- Pages viewed, referring page, and date and time of your visit
- Approximate location derived from your IP address (city or region, not precise location)
We do not knowingly collect sensitive information such as health, financial account or government ID data through the Site.
How we use information
We use personal information to:
- Respond to inquiries and prepare proposals and estimates
- Deliver, manage and invoice client projects
- Operate, secure and improve the Site, including preventing spam and abuse
- Understand how visitors use the Site in aggregate
- Comply with legal, tax and accounting obligations
We do not use your information for automated decision-making that has legal or similarly significant effects on you.
Cookies and analytics
The Site uses cookies and similar technologies for three purposes:
|
Type |
What it does |
Examples |
|---|---|---|
|
Essential |
Keeps the Site working and secure, including spam protection on forms |
WordPress session and security cookies |
|
Analytics |
Counts visits and shows which pages are used, in aggregate |
Google Analytics, Jetpack Stats |
|
Embedded content |
Set by third parties when you view embedded media |
YouTube, Vimeo, social media embeds |
We do not use advertising or retargeting cookies.
Your choices. You can block or delete cookies in your browser settings; the Site will still work, though some features may not. You can opt out of Google Analytics with Google’s browser add-on. We honor Global Privacy Control (GPC) signals as an opt-out request where applicable.
Third-party services and embedded content
We rely on trusted service providers to run the Site and our business. They process information only to provide their services to us:
- Website hosting and WordPress/Jetpack (Automattic) — hosting, image delivery, security and site statistics
- Spam protection — reCAPTCHA screens form submissions for spam
- Analytics — Google Analytics
- Email, file sharing and accounting tools — used to communicate with you and manage client work
Pages may include embedded content (videos, images, maps or posts) from other sites. Embedded content behaves as if you visited that site directly, and the provider may collect data, set cookies and track your interaction, especially if you are logged in there.
The Site links to our profiles on LinkedIn, X (Twitter), Instagram and Dribbble. Those platforms have their own privacy policies, which govern what they collect when you visit them.
How we share information
We do not sell your personal information, and we do not share it for targeted (cross-context behavioral) advertising.
We share personal information only:
- With the service providers described above, under terms that limit their use of it
- With subcontractors working on your project, when needed to deliver it and with your knowledge
- When required by law, subpoena or other legal process, or to protect our rights, property or safety
- In connection with a merger, sale or transfer of our business, subject to this policy
Data retention and security
We keep personal information only as long as we need it:
|
Information |
How long we keep it |
|---|---|
|
Contact form submissions and inquiries that don’t become projects |
Up to 2 years |
|
Client project records, contracts and invoices |
7 years after the project ends, for tax and legal purposes |
|
Analytics data |
Per our analytics provider’s retention setting [e.g. 14 months] |
We use reasonable administrative, technical and physical safeguards, including HTTPS encryption, access controls and software updates. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please don’t send passwords or other sensitive credentials through the contact form or email.
Your privacy rights
Wherever you live, you can ask us to:
- Access the personal information we hold about you and get a copy
- Correct information that is inaccurate
- Delete your information, except what we must keep for legal, tax or security reasons
- Opt out of marketing emails at any time (use the unsubscribe link or reply to us)
Residents of California and other states with consumer privacy laws (including Colorado, Connecticut, Virginia, Texas and others) may have additional rights under those laws. Visitors in the European Economic Area and the UK may also object to or restrict processing and may lodge a complaint with their local data protection authority.
How to make a request. Email info@tornadodesign.com or call (480) 945-5653. We may need to verify your identity before acting, and we will respond within 45 days. You may use an authorized agent. We will not discriminate against you for exercising your rights.
Client data we handle on your behalf
When we build or maintain a website, CRM or marketing system for a client, we may access personal information about that client’s customers or visitors. We act as a service provider in that role: we use the data only to perform the work, keep it confidential, and follow the client’s instructions and our agreement with them. Questions about that data should go to the client who controls it.
Children’s privacy
The Site is intended for businesses and is not directed to children under 13 (or under 16 where local law requires). We do not knowingly collect their personal information. If you believe a child has sent us information, contact us and we will delete it.
International visitors
We are based in the United States, and our service providers store data in the U.S. If you contact us from outside the U.S., your information will be transferred to and processed in the U.S., where privacy laws may differ from those in your country.
Changes to this policy
We may update this policy as our practices or the law change. We will post the new version here and update the effective date above. For significant changes, we will make reasonable efforts to notify clients directly.
Contact us
Tornado Design LLC 6701 E Sharon Dr Scottsdale, AZ 85254
Email: info@tornadodesign.com
Phone: (480) 945-5653