Effective Date: August 26, 2026

1. Introduction

This Privacy Policy explains what personal information we collect, how we use and disclose it, how long we retain it, and the choices and rights you may have. 
The company responsible for processing your personal data is Grace Fuller Design, LLC, a New York liability company doing business as Grace Fuller Design (“Grace Fuller,” “we,” “us,” and “our”), located at 927 Madison Avenue, 2nd floor, New York, NY, 10021. This Privacy Policy applies to visitors to https://gracefullerdesign.com/ (the “Site”). Please read this Privacy Policy so that you know what we do with your personal data, and see the “Contact Us” section below for how to reach us.

2. Definitions

In this Privacy Policy:

• Personal Data (also referred to as personal information) means any information that relates to you from which you can be identified.
• Process means any activity relating to personal data, including collection, use, sharing, storage, and transmission.

3. How Do We Obtain Your Information?

Most of the personal information we process is provided to us directly by you when you engage with us (for example, when you complete our contact form, email us, or call us to inquire about our interior design services).

When you visit, use, or navigate the Site, certain information about you may be processed automatically. This information may not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, referring URLs, approximate location, and information about how and when you use the Site. This information is collected through server logs and, where you have consented, through the analytics cookies described in Section 5, and is needed to maintain the security and operation of the Site and for our internal analytics and reporting purposes.

We may also collect information through security tools such as Google reCAPTCHA, as described in Section 5.

4. What Information Do We Collect and Why?

We collect the following limited categories of Personal Data:

• Identity and Contact Information: first name, last name, email address, telephone number, and any other information you choose to include when you contact us through the Site’s contact form, by email, or by phone.
• Communications: the contents of your inquiries, emails, and other communications with us, including feedback.
• Device and Usage Information: as described in Section 3, including analytics data collected via Google Analytics where you have consented.

We do not collect financial or payment information, health information, or other sensitive personal information through the Site, unless you later provide such information to us in another context. Our design services are engaged under separate written agreements, which govern any information collected in the course of an engagement.

We use this information for the following business purposes:

• Responding to your inquiries and communicating with you about our services;Providing our design services and managing our relationships with clients;
• Managing, evaluating, and improving our business, our marketing, and the Site (including through consented analytics);
• Ensuring the security of the Site, including protecting our contact form from automated abuse; and
• Complying with applicable law.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law.

5. COOKIE POLICY — Cookies and Similar Technologies

5.1 What cookies are

Cookies are small text files placed on your device when you visit a website. Similar technologies include local storage, pixels, and scripts; we use the word “cookies” to cover all of these.

5.2 The categories of cookies we use

• Strictly necessary cookies. These are required for the Site to function and to keep it secure, including cookies associated with our website platform and our consent management tool (which remembers your cookie choices). These are required for the Site to function and keep it secure. If you block them, some parts of the Site may not work properly. In addition, we use:
• __cf_bm  – cloudflare.com – This cookie, set by Cloudflare, is used to support Cloudflare Bot Management.
• trustedsite_visit – This cookie is set by the provider McAfee for website security. This cookie is used for storing the number of visits.
• AWSALBCORS – aws.amazon.com – Amazon Web Services set this cookie for load balancing.
• _scc_session – scc-c2.min.js – Maintains the user’s session and temporary website state during the current visit. Used by GoDaddy’s Signals/SCC client to associate requests with a server-side session.
• cookieyes- – cookieyes.com – CookieYes sets this cookie for consent solution management.
• Security tools (Google reCAPTCHA). We may use Google reCAPTCHA to protect our contact form from spam and automated abuse. reCAPTCHA collects device and behavioral information and sends it to Google to distinguish humans from bots.
• Analytics cookies (Google Analytics). With your consent, we may use Google Analytics to understand how visitors use the Site (including pages visited, time on site, approximate location, and device type). Analytics cookies are NOT set unless and until you opt in through our consent banner. In addition, we use:
• _tccl_visitor – traffic-assets/js – Godaddy sets this to collect aggregated, anonymized data to improve the site’s performance.
• _tccl_visit – traffic-assets/js – Godaddy sets this to collect aggregated, anonymized data to improve the Site’s performance.
• trustedsite_tm_float_seen – ywxi.net – TrustedSite sets this in coordination with the secure commerce certificate on the webpage.
• Embedded social media content. The Site may display content from our social media profiles (such as an Instagram feed). Where such content is served by the social media platform itself, the platform may set its own cookies or receive information about your visit, as described in the platform’s privacy policy. 

We do not use advertising or targeting cookies, session-recording tools, or chat widgets on the Site.

6. Third-Party Websites and Social Media

The Site contains links to third-party websites, including our social media profiles. While we seek to link only to sites that share our standards and respect for privacy, we cannot be responsible for the privacy practices of other websites. By accessing third-party websites through the Site, you are subject to the terms and privacy policies of those websites. 

7. How We Disclose Information

We disclose Personal Data only to: (a) service providers that help us operate the Site and our business  who may process it only on our behalf and for the purposes described in this Privacy Policy; and (b) recipients required by law. The categories of service providers we use may change from time to time as we change vendors, but the categories of Personal Data we disclose and the purposes of disclosure will remain as described here unless we update this Privacy Policy. These service providers may include website hosting, analytics, anti-abuse, email delivery, and form-processing vendors.

8. Children’s Privacy

The Site is not intended for children under 18 years of age, and we do not knowingly collect personal information from children under 18. If you are under 18, do not use the Site or provide any information about yourself to us. If we learn we have collected personal data from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us at office@gracefullerdesign.com.

9. Your California Privacy Rights (CCPA Notice)

This section applies to California residents and supplements this Privacy Policy. It describes rights available under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (the “CCPA”).

9.1 Information We Collect

In the preceding 12 months, we have collected the following categories of personal information:

• Identifiers, such as name, email address, telephone number, and Internet Protocol (IP) address.
• Internet or other electronic network activity information, such as information about interactions with the Site, server logs and, with your consent, Google Analytics data.
• Geolocation data, inferred from your IP address. We do not collect precise geolocation data.

9.2 Use, Disclosure, Sale, and Retention

We collect personal information for the business purposes described above and disclose it only to the recipients described in Section 7. We do not, and have not in the last 12 months, sold personal information, and we have not shared personal information for cross-context behavioral advertising, and we have no actual knowledge that we sell or share the personal information of consumers under 16 years of age. We retain personal information only as long as reasonably necessary for the purposes described above, including to maintain business records, comply with legal obligations, resolve disputes, and enforce agreements

9.3 Your Rights Under the CCPA

Subject to applicable exceptions, California residents may have the right to:

• Right to Know and Access. You have the right to request the categories of personal information we have collected about you; the sources of that information; the business purposes for collecting it;  and the categories of recipients.
• Right to Delete. You have the right to request that we delete personal information we collected from you.
• Right to Correct. You have the right to request correction of inaccurate personal information. 
• Right to Opt Out of Sale or Sharing. You have the right to opt out of the sale of your personal information and of its sharing for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information. We do not currently collect sensitive personal information through the Site, so this right does not apply to our Site visitors.
• Right to Non-Discrimination. You have the right to receive equal service ad pricing when exercising CCPA rights.

9.4 How to Submit a Request

You may submit a verifiable consumer request by contacting us at office@gracefullerdesign.com. To verify your identity, we may ask you to provide your first and last name, email address, and/or telephone number, and to confirm information unique to you (such as the details of a prior inquiry). 

You may also use an authorized agent to submit a request on your behalf, in which case we require documentation signed by you demonstrating the agent’s authority to act.

9.5 Response Timing and Format

We will confirm receipt of a request within 10 business days and endeavor to respond substantively within 45 days of receipt. If we require more time, we will inform you of the reason and extension period in writing. If you wish to appeal a decision, please contact us at office@gracefullerdesign.com and clearly denote that it is an appeal.

10. Data Retention and Security

We retain Personal Data for as long as reasonably necessary for the purposes described in this Privacy Policy (including maintaining business records, responding to inquiries, operating the Site, meeting legal and accounting obligations, resolving disputes, and enforcing agreements).

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the revised policy on this page and update the effective date.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact:

Grace Fuller Design, LLC
927 Madison Avenue, 2nd floor, New York, NY, 10021

Phone: 646-847-7870

Email: office@gracefullerdesign.com