Privacy

Privacy notice

Effective date: November 1, 2026

Who we are

This website is operated by Angel Hernandez, a sole proprietor doing business as Helias Digital Studio ("Helias Digital Studio", "we"), based in California, United States. We work with clients in the United States and other countries. Questions or privacy requests: heliasdigitalstudio@gmail.com.

What we collect through this website

Only what you type into the project inquiry form:

Your name and email address (required, so we can reply).
Optional company or brand name, budget range and timeline.
The service you're interested in and any optional project details you choose to give.
Your project brief.

We don't ask for phone numbers, property addresses, guest or tenant details, or payment information on this site. Please don't include sensitive personal information in your brief.

Spam protection

The form uses Cloudflare Turnstile to check that a person is submitting it. Turnstile runs in your browser and sends technical signals (for example browser and device characteristics) to Cloudflare. Our server also uses your IP address, as provided by our hosting platform, for short-term rate limiting. We don't store IP addresses in our own records.

No analytics or advertising trackers

This site doesn't use analytics, advertising pixels or marketing cookies, and doesn't embed third-party video players. We don't track visitors across other websites, so there is nothing for a browser's Do Not Track or Global Privacy Control signal to switch off. If that changes, we'll update this notice, honour those signals and ask for consent where required.

If you become a client

We also keep the information needed to run your project or care plan:

Contact details for you and your team, your business name and address, and your signed agreement and scopes.
Billing records from Stripe, our payment provider: what you paid and when, and limited card details such as the card brand and last four digits. Stripe handles your full card details; we never see them.
Our emails and other messages with you, and notes from calls.
Project files you share with us (see below).
On Business and Business Pro care, the GoHighLevel account we manage for you (see below).

How we use your information

To read and reply to your inquiry, prepare a scope and quote, do the work you hire us for, bill you, keep our business and tax records, keep our systems secure, and handle any dispute. We don't add you to a mailing list or sell or share your details for advertising.

Who we share it with

Cloudflare hosts this website, runs the form's server code and provides Turnstile.
Resend delivers the inquiry as an email to the studio's inbox.
Google provides the studio's mailbox (Gmail) and the private Google Drive folders used for client files.
Stripe sends invoices and payment links and processes payments.
HighLevel (GoHighLevel) runs the lead follow-up system on Business and Business Pro care.
AI tools named in your scope, when a project uses them (see below).
Our accountant or lawyer when needed, authorities when the law requires it, and a successor if the business is reorganized or sold.

The website itself doesn't keep a separate database of inquiries. Each provider keeps its own processing records under its own retention rules. These providers process data in the United States and possibly other countries. If you contact us from outside the United States, your information is transferred to and handled in the United States.

Client files and project media

If you hire the studio, product photos, brand assets, unreleased campaign material, property photos and finished files are exchanged privately — not through this website — using a private Google Drive folder shared only with you. We don't use public "anyone with the link" sharing for client files.

We treat unreleased products and campaign material as confidential.
Some work is produced with AI-assisted tools. We currently use Higgsfield, which we work with through AI assistants from Anthropic (Claude) and OpenAI (ChatGPT). When a project uses them, the relevant source images and instructions are uploaded to these services for processing. We tell you before this happens, name any other tool before your files go into it, and only process files you've confirmed you have the right to supply. Where a provider lets us, we use account settings or plans that stop it training its models on your files.
Property photos can show addresses, faces, license plates, family photos, access codes or other sensitive details. We review images before any public use, remove embedded location data from exported files, and never publish a precise property location without permission.
Permission to process your files and permission to show the work publicly are separate. We only add a project to our portfolio with your written OK, and you can hire us without giving it.

How long we keep things

Inquiry emails that don't become projects: deleted after 12 months.
Client source files and working files: deleted 90 days after final delivery, unless you ask us to keep them longer. This includes the copies we uploaded to AI tools, where the tool lets us delete them.
Final deliverables and project records: final files are kept for 1 year so you can request another copy; invoices and contracts are kept for at least 4 years for tax and business records.
Care-plan systems: your customers' data is exported to you and then deleted within 60 days after the plan ends.

We may keep something longer if the law requires it, or while a dispute or legal claim about it is open.

Your choices and requests

You can ask what we hold about you, ask for a copy, ask us to correct or delete it, or withdraw portfolio permission, by emailing heliasdigitalstudio@gmail.com. We'll confirm your request and respond within 30 days. We may need to check your identity first, usually by replying from the email address we already have for you. We honour these requests wherever you live, and we won't treat you differently for making one. We can't delete records the law requires us to keep, such as invoices, or information we need for an open contract or dispute; if that applies, we'll tell you.

California residents: we don't sell your personal information or share it for cross-context behavioural advertising, and we don't use sensitive personal information to infer things about you.
UK and EU residents: we use inquiry details to take steps you asked for before a contract, client information to perform our contract with you, records we must keep to meet legal obligations such as tax, and spam protection, security and business records for our legitimate interests in running the studio safely. You can ask for access, correction, deletion, restriction or a portable copy of your data, object to processing based on legitimate interests, and complain to your local data protection authority. We don't make decisions about you based solely on automated processing.

Depending on where you live, you may have other rights under local law.

Care-plan clients' customers

On Business and Business Pro care plans, we manage a GoHighLevel account on behalf of our client, as their service provider. Contact details and messages from that business's own customers are processed for that client, under their instructions and their privacy notice — not used by us for anything else, and never sold or shared. If you're one of their customers, please send privacy requests to that business; if you send one to us, we'll pass it on to them.

Children

This website and our services are for businesses and adults. They aren't directed to children, and we don't knowingly collect children's personal information.

Security

The site is served over HTTPS, has no visitor accounts, and doesn't store inquiries in a website database. The studio's email, file, payment and GoHighLevel accounts use two-step verification. No system is perfectly secure, but we limit what we collect and who can access it.

Changes

We'll post updates on this page and change the effective date above. If a change materially affects how we handle current clients' information, we'll also tell them by email.