Trust & Security

Pines Design uses reasonable safeguards designed for a small design studio handling client inquiries, project files, approvals, invoices, and electronic deliverables.

Security is reviewed as tools and workflows change, with a preference for reputable hosted services, limited access, and clear project records.

The production website should be served over HTTPS. Forms and site traffic should be protected in transit. Administrative access should use strong passwords and, where available, multi-factor authentication.

Payment details are entered on a Stripe-hosted payment page, not on pinesdesign.com. The site does not receive or store complete card numbers or card security codes.

Online payments are processed using a Stripe-hosted payment page. Pines Design does not receive or store complete card numbers or card security codes, or request complete card details by email.

Stripe shows the payment methods available for each customer or transaction, so the options presented may vary.

Payment confirmations and limited billing records may be retained for accounting, tax, dispute-resolution, and fraud-prevention purposes.

Client files are shared electronically using reasonable access controls. Final source files are released after final approval and full payment. Clients are responsible for downloading and backing up delivered files.

If a project requires confidential handling, access restrictions, or a non-disclosure agreement, those requirements should be agreed in writing before work begins.

If Pines Design learns of a security incident affecting personal information or client files, it will investigate, take reasonable containment steps, document what happened, notify affected parties where required, and improve safeguards where appropriate.

If you believe you found a vulnerability or security issue on pinesdesign.com, please contact hello@pinesdesign.com with enough detail for us to investigate. Please do not access, modify, delete, or disclose data that is not yours.