Legal centre
This Privacy Policy explains how INSPIRED CANVASSES, a computer integrated systems design atelier, collects, uses, stores and protects information when a visitor reads this website or contacts the atelier at its Virginia Beach premises. The policy was written and is maintained under the direction of the developer CanvasMuse, who oversees the technical systems that serve this website and who is named here so that readers can identify the party responsible for the digital side of the service.
The atelier is registered at 5608 N Pawnee Rd, Virginia Beach - 23462-4011, United States (US). The postal address is reproduced here exactly as it appears on official records so that a reader may send a written request, a correction or a question by mail without further lookup.
The policy applies to the website at inspiredcanvasses.com and to any message sent to the atelier through the contact form, the email address or the telephone number shown on these pages. It does not apply to third party websites that a reader may reach by following an external link, because those sites set their own rules and the atelier has no control over them.
The atelier keeps this policy short enough to be read in one sitting and precise enough to be trusted. Every paragraph below is written in plain English on purpose, because a notice that can only be understood by a lawyer protects nobody. Where a technical term is unavoidable, the policy explains it in the same sentence and gives a practical example so that the reader is not left guessing.
A visitor does not have to create an account, supply a password or accept optional tracking to read these pages. The atelier believes that reading a business website should not cost a reader their privacy, and the website is constructed to honour that belief. The remainder of this policy sets out the small amount of information that does pass through the atelier and the duties the atelier accepts for it.
The data controller for the purposes of this policy is INSPIRED CANVASSES, operating from 5608 N Pawnee Rd, Virginia Beach - 23462-4011, United States (US). The atelier designs and integrates computer systems for professional clients, and it maintains this website to describe those services and to receive enquiries from prospective and existing clients.
The developer CanvasMuse acts under the authority of the controller for matters of website engineering, hosting configuration and security. A reader who wishes to reach the person responsible for this website may address correspondence to the developer through the email address published below, and the request will be routed to the correct party.
The atelier is a small professional practice, and its size shapes this policy in practical ways. Decisions about information are made by the people who do the work rather than by a distant department, and a reader who sends a question will receive an answer from a person who can act on it. A question about a project reaches the engineer who holds the frame for that project, and a question about the website reaches the developer who built it.
The atelier does not maintain a marketing database and does not buy contact lists. The information it holds arrives because a reader chose to send it or because a client commissioned work. That narrow door into the atelier keeps the burden of protection small and the duty of care clear, because every record has a named reason for existing and a named bench that owns it.
The atelier collects only the information that a visitor chooses to provide and the small amount of technical data that a web server records in the ordinary course of serving pages. The categories are described in the paragraphs that follow so that a reader may judge the scope of collection without reading between the lines.
The form on the contact page asks for a name, an email address, a subject line and a message. None of these fields is used to build a profile, and none is passed to an advertising network. The name lets the atelier answer the reader by name, the email address lets the reply arrive, and the subject and message let the fitting desk route the enquiry to the right bench without a round of clarifying questions.
Technical data recorded by the hosting service is kept in a form that is useful for diagnosis rather than for identification. The atelier can see that a form submission failed from a particular browser at a particular hour, and it can repair the fault, without needing to know who the reader was. Where an investigation does require a closer look at a single record, only the people working on the fault open it, and the look is recorded.
The atelier uses the information it holds for a small number of stated purposes. Each purpose is tied to a lawful basis, and no information is used for a purpose incompatible with the reason it was collected. The atelier does not sell information, does not rent it and does not trade it for marketing lists belonging to other firms.
A reply to an enquiry may include a proposal, a suggested date for a fitting desk, a request for a sketch of the existing systems or a short note that the work falls outside the field of the atelier. The atelier writes such a reply only to serve the enquiry, and it does not add the reader to a mailing list as a condition of receiving the reply. A reader who wants no further contact simply says so, and the atelier records the request and honours it.
Records of a client engagement are kept so that the atelier can support the delivered system over time. A maintainer who takes over a bench years later needs to know which frame was drawn, which batch of cloth was primed and which varnish day sealed the coat. Without those records the atelier could not keep its promise that a system remains legible long after delivery, and the promise is central to the way the practice describes its work.
Security work is a purpose in its own right. Logs and form records help the atelier detect an attempt to abuse the website, stop a flood of automated submissions and trace the origin of a fault. This work is limited to what is needed to keep the service sound, and it never becomes a reason to observe a reader beyond the ordinary running of the site.
Where the law requires a stated basis, the atelier relies on one of a short list. Consent covers messages that a visitor volunteers and any optional communication the visitor agrees to receive. Performance of a contract covers the information needed to deliver work a client has commissioned. A legitimate interest covers the security and stability of the website, the defence of legal claims and the ordinary running of the atelier, always weighed against the rights and expectations of the reader.
The atelier applies the lawful basis that fits the moment. A reader who sends a message has given consent for the atelier to answer it, and the atelier answers only in the way the message invites. A client who commissions work enters a contract, and the atelier processes what the contract requires so that the work can be delivered and supported.
A legitimate interest covers the everyday running of a professional practice. Keeping the website secure, preventing abuse, defending a legal claim and maintaining an accurate business archive all rest on this basis, and each is weighed against the rights and expectations of the reader. Where a reader objects to a use that rests on a legitimate interest, the atelier will consider the objection and will stop the use unless a compelling reason requires it to continue.
Where the law requires explicit consent for a particular use, the atelier asks for that consent separately and does not bundle it with any other permission. A refusal of consent for an optional use has no effect on the delivery of a service that a client has commissioned.
The hosting service keeps server logs for a limited period so that the atelier can investigate faults and detect attempts to abuse the form or the site. A log entry typically records the address of the requesting device, the time, the page requested and the result returned. The atelier does not use these logs to build a profile of an individual reader, and it does not combine them with information gathered from other sources.
Server logs are kept for a short window that is long enough to investigate a fault and short enough to avoid becoming an archive of every visit. When the window closes, the hosting service removes the entries on a schedule, and the atelier does not copy them elsewhere. A log that is needed for an active investigation is held only until the investigation closes, and then it follows the same schedule as the rest.
The atelier does not merge server logs with the records of an enquiry unless a fault makes that necessary, and it does not use logs to learn about the interests of an anonymous reader. A reader who wishes to know whether a particular page kept a log entry may write to the atelier and will be told what the ordinary schedule records.
The atelier is based in the United States and serves clients from its Virginia Beach premises. Some service providers may process information in another country, and where that happens the atelier takes steps to ensure the transfer is lawful and that the information remains protected by duties comparable to those described here.
A service provider that processes information in another country can create a risk that the protection of the reader is weaker than at home. The atelier manages that risk by choosing providers that accept written duties, by limiting the information that travels to the minimum needed and by reviewing the arrangement when a provider changes its terms. A reader who wishes to know whether a particular provider processes information outside the United States may write to the atelier and will receive a clear answer.
Where a transfer relies on a standard contractual clause or an equivalent instrument, the atelier keeps a copy of the instrument and applies it to the provider. The atelier does not treat a transfer as invisible, because a reader is entitled to know where the information goes and which duties travel with it.
The atelier keeps information only for as long as it is needed for the purpose that made collection necessary or for as long as the law requires. An enquiry that does not become a project is usually removed once the correspondence has closed and the reasonable period for a follow up has passed. A project record is kept for the duration of the client relationship and then for the period required by accounting and tax rules. Server logs follow the shorter retention schedule set by the hosting service.
When a retention period ends, the atelier deletes the information or renders it anonymous in a way that cannot be reversed. A reader may ask the atelier to delete information sooner where no legal duty requires it to be kept, and the atelier will explain within a reasonable period what can be removed and what must remain.
Retention is set by purpose, not by habit. An enquiry that leads nowhere is removed once the correspondence has closed and a reasonable follow up window has passed. A project record outlives the project because a maintainer may need it, and the atelier keeps it for the period required by accounting and tax rules and then removes it on a stated schedule.
A reader may ask for earlier deletion, and the atelier will explain what can be removed and what must remain. A record that the law requires the atelier to keep will not be destroyed on request, but its use will be restricted to the legal duty, and the reader will be told that the restriction has been applied.
The atelier protects information with technical and organisational measures suited to its size and to the sensitivity of the work. Access to project records is limited to people who need it for the task at hand. The website is served over an encrypted connection. Passwords and keys are held in a managed store rather than in documents that travel by email. Backups are taken on a schedule and are tested by an actual restore before a varnish day closes.
No measure, however careful, removes every risk. If the atelier becomes aware of a breach that is likely to affect the rights of a reader, it will take immediate steps to contain the breach and will notify the persons concerned and the relevant authority where the law requires notice.
Security measures at the atelier follow the same discipline as the systems the atelier builds. Access is limited to named people with a named reason. Credentials are rotated on a schedule and stored in a managed vault. Backups are proven by a restore before a varnish day closes. A weakness found during a review is written down plainly, assigned an owner and repaired on a stated date rather than carried forward as a quiet risk.
The atelier trains the people who hold information to recognise a suspicious request and to report it rather than act on it. A report is reviewed by the person who holds the relevant bench, and a confirmed attempt to obtain information by deception is treated as a security event even when it fails.
If a breach occurs, the atelier contains it first, then establishes what was affected, then notifies the persons concerned and the competent authority where the law requires notice. The notice explains what happened, what the atelier has done and what the reader can do to reduce a risk. The atelier does not wait for a perfect account before warning the people who need the warning.
A reader has rights over the information that the atelier holds. The atelier will honour a request within the period set by the law that applies, and it will explain in plain language what it has done and what, if anything, it cannot do and why.
A right is only useful if it can be exercised without a struggle. The atelier accepts a request in any reasonable form, by email, by letter or by telephone, and it does not insist on a formal template. A request is logged on the day it arrives, is acknowledged promptly and is answered within the period set by the law that applies.
Where a request is complex, the atelier may extend the period once and will explain the reason in writing. Where a request concerns information that the atelier holds about a client project, the atelier may need to consult the client before answering, because the client may hold a right of its own over the same material. The reader will be told when that consultation happens and why.
To exercise a right, write to hello@inspiredcanvasses.com or send a letter to INSPIRED CANVASSES at 5608 N Pawnee Rd, Virginia Beach - 23462-4011, United States (US). A request should state clearly which right is being exercised and should give enough detail for the atelier to locate the relevant information. The atelier may ask for a small amount of additional information to confirm that a request comes from the person entitled to make it, and it will not use that additional information for any other purpose.
There is no charge for a first request in most circumstances. Where a request is manifestly unfounded or excessive, the atelier may refuse it or charge a reasonable fee that reflects the administrative cost, and it will state its reason in writing.
A request should state clearly what the reader wants, because a vague request costs everyone time. A reader who wishes to see the information held may ask for a copy. A reader who wishes to correct a detail may state the correction and the reason. A reader who wishes to delete a record may ask, and the atelier will answer honestly about what can be deleted and what a legal duty requires to remain.
The atelier may ask for proof of identity where a request concerns sensitive information, and it will explain why the proof is needed. A small piece of additional information, such as a confirmation sent to the email address on file, is usually enough. The atelier does not keep the proof longer than the request requires and does not use it for any other purpose.
The website is intended for professional readers and is not directed at children. The atelier does not knowingly collect information from a child. If a parent or guardian believes that a child has submitted information through the website, the atelier asks that parent or guardian to contact hello@inspiredcanvasses.com so that the information can be removed and the circumstances reviewed.
The atelier designs systems for professional spaces, and its website is written for adults who manage those spaces. It does not offer a product for a child, does not run a competition for a child and does not ask a child to create an account. If a child sends a message by mistake, the atelier will remove it on a request from a parent or guardian and will not treat the removal as a burden.
A parent or guardian who wants to know what the atelier may hold about a child should write to the email address below and describe the circumstances. The atelier will search the records that could reasonably contain the information, report what it finds and remove what the law allows to be removed.
The atelier handles information in line with the law of the jurisdictions in which it operates and with the professional duties that apply to computer integrated systems design work. Where a client engagement is subject to a specific confidentiality regime, the terms of that regime are set out in the engagement contract and take precedence over the general description offered here.
Computer integrated systems design often touches the systems of a client whose own sector carries a regulatory duty. A studio, a clinic or a manufacturer may be subject to a rule about how its records are held, and the atelier designs the integration so that the client can meet that rule. The atelier does not itself become the regulator of the client sector, but it documents the points where the integration touches a regulated record so that the client can show that it remained in control.
The atelier keeps the records needed to show that a commission was performed with reasonable skill and care. Those records are held under the same confidentiality as the project material, and they are produced only to the client, to a court or to an authority acting within its powers.
This website may mention or link to a third party service, a vendor or a professional body. A link does not imply that the atelier endorses the privacy practice of that third party, and a reader who follows a link leaves the protection of this policy. The atelier encourages readers to review the privacy notice of any site before submitting personal information to it.
The website may point to a supplier, a professional body or a reference source, and a reader may follow such a pointer to learn more about a subject. The atelier checks a link when it adds it, but a third party may change its own site without notice. A reader who finds a link that leads to surprising content is invited to tell the atelier so that the link can be reviewed and removed if it no longer fits.
The atelier does not embed a third party player, a social widget or an advertising script on these pages. A reader can therefore read the site without a hidden party observing the visit, and the small amount of technical data that the site records stays within the arrangement described earlier in this policy.
The atelier reviews this policy at least once a year and updates it when the way it handles information changes. A change is published on this page with a new effective date. Where a change materially affects how the atelier uses information already held, the atelier will take reasonable steps to inform the affected readers before the change takes effect.
A change is made when the way the atelier handles information changes, not merely to refresh the wording. A change that widens collection, lengthens retention or adds a recipient receives a careful review before it is published, and the review is recorded so that a reader may ask why the change was made and receive a factual answer rather than a promise.
A reader who wants to know whether a change affected them may write to the atelier and will be told which version of the policy applied on a given date. The atelier keeps earlier versions of the page so that the history of the policy can be reconstructed when a dispute requires it.
A reader who is unhappy with the way the atelier has handled information should first write to hello@inspiredcanvasses.com or to the postal address above so that the matter can be reviewed. The atelier takes a complaint seriously and aims to reply within a reasonable period. If the response does not resolve the matter, the reader may raise the complaint with a supervisory authority that has jurisdiction over the matter in the reader place of residence.
A complaint is treated as useful information rather than as a nuisance. The atelier reads it, finds the bench that holds the relevant record, establishes what happened and writes back with a plain account and a proposed remedy. Where the atelier was at fault, it says so and corrects the matter rather than defending a practice that should change.
If the reply does not resolve the matter, the reader may raise it with a supervisory authority in the reader place of residence. The atelier will cooperate with the authority and will provide the records it holds, subject to any duty of confidentiality that applies to a client, and it will explain where such a duty limits what it can share.
For any question about this policy, write to hello@inspiredcanvasses.com, call +17314832557, or send a letter to INSPIRED CANVASSES at 5608 N Pawnee Rd, Virginia Beach - 23462-4011, United States (US). The developer CanvasMuse can be reached through the same email address for matters that concern the technical systems of the website.
The atelier prefers a written message for matters that concern privacy, because a written record helps both parties. A telephone call is welcome where a question is simple or where a reader needs a quick confirmation. Whichever route a reader uses, the atelier will confirm that the message has arrived and will give the name of the person who will answer it.
A reader who is not sure whether a matter concerns privacy, contract or the website may write to the same address and describe the situation in ordinary words. The atelier will route the message to the right bench and will tell the reader where it has gone, so that nobody is left guessing which part of the atelier is handling the question.
The atelier asks for little, uses what it receives for the stated purpose and keeps it only while needed. It does not sell information, it does not run advertising trackers on this site and it answers a rights request plainly. Those principles are the shortest possible account of this policy, and they are offered so that a reader may take the measure of the full document without reading every clause first.
A reader who keeps only this summary in mind will not be misled. The atelier asks for little, uses what it receives for the purpose that made collection necessary, keeps it only while needed and answers a request plainly. Those four habits, applied without exception, describe almost every duty in this policy and explain why the document can be read without a glossary.
The atelier welcomes a question about any paragraph on this page. A policy is a promise, and a promise that cannot be explained in a sentence is not yet ready to be made. The atelier will explain its practice in words a client can repeat to a colleague, because a duty that travels only inside a legal department has not really travelled at all.