Privacy Policy
This site collects only what you choose to send us, through the contact form, the meeting booking page, or by email. No accounts, no ad trackers, no marketing lists, and no cookies set by this site itself.
Scope
This policy covers goodfield.studio only. Each app we build is a separate product with its own privacy policy, linked from its own page. What an app does with data is governed by its own policy, not this one.
What we collect
If you use the contact form, we collect your name, email address, and whatever else you choose to include — business or organisation name, phone number, the category of enquiry, and your message. That submission is delivered to us as an email and kept in our inbox for as long as it's useful for handling the enquiry. There's no account system, no comment sections, no newsletter, and no advertising or social-media trackers embedded on the Site.
How we use it
Only to respond to your enquiry and keep the correspondence. We don't add you to a list (there isn't one), we don't use it for marketing, and we don't share it with anyone except as described below.
Meeting bookings
If you book a meeting at goodfield.studio/book, we collect your name, email address, the meeting type and time you choose, your timezone (read from your browser so we can show times correctly), and anything you add in the optional business and notes fields. Unlike the contact form, bookings are stored in a booking database we run ourselves on Cloudflare's infrastructure — this is our own system, not a third-party scheduler — so we can hold your time, prevent double-bookings, and honour the cancellation link we email you. Confirmation and cancellation emails, including the calendar invite, are delivered via Resend, the same service that delivers contact form submissions. To limit automated abuse, the system also keeps a one-way cryptographic hash of the booking request's IP address; the address itself is never stored and cannot be recovered from the hash. Booking records are kept for as long as they're useful for running the meeting and our records; email us any time and we'll delete yours.
Third-party services involved in the form
The form itself is served from Cloudflare's infrastructure (Pages and Workers), and your submission is delivered to us as email via Resend, an email delivery service — Resend's own privacy policy governs that delivery. Before a submission is accepted, Cloudflare Turnstile checks that it came from a person rather than an automated script, using limited browser signals; Turnstile does not use tracking cookies or track you across other sites.
Chat assistant
If you use the Goodfield Assistant chat widget, what you type is sent to an Appwrite Cloud Function we run, which uses Google's Gemini API to generate a reply — and, for some technical questions, may run a live web search to check its answer. We don't tie this to your identity in any way; there's no account, and we don't ask for or store your name or contact details through the chat. The conversation itself is kept only in your browser's session storage (it clears when you close the tab) and isn't saved on our servers. Please don't type sensitive personal or financial information into the chat — treat it like you would any other AI assistant.
Cookies
This site does not set any cookies itself. The meeting booking page was built without cookies too. If we ever add a feature that does set them, this policy will be updated first, with the new cookies described here before they're used.
Analytics
We may turn on Cloudflare Web Analytics for this Site. It's designed to be privacy-preserving: it sets no cookies, does not fingerprint devices, does not track you across sites, and shows us only aggregate counts (page views, referrers, country-level location, browser type). We can't identify you from it. This page will say so plainly if that ever changes.
Hosting
The Site is served by Cloudflare. Like any web host, Cloudflare transiently processes technical request data (such as IP addresses) to deliver the Site and protect it from abuse. We don't receive or store that raw data ourselves; Cloudflare's own privacy policy governs its processing.
If you email hello@goodfield.studio directly, we receive your address and whatever you write. We use it only to reply and keep the correspondence for as long as it's useful for that purpose. We don't add you to any list and we don't share your address with anyone.
What we never do
We don't sell personal data, run ads, or share anything with data brokers. There's nothing to sell.
Your rights
Depending on where you live, you may have legal rights over personal data — access, correction, deletion. Since the only personal data we hold is what you've sent us through the contact form, the booking page, or by email, exercising them is simple: email us and ask.
Changes
If our practices change, this policy will be updated here first, with a new effective date. That's what happened when meeting booking was added on 24 August 2026.