How we handle your information
This page is maintained by The Refinery Co. to answer common questions about privacy and security on therefinery-co.com. It describes the controls currently in place on this site and is not an independent certification or audit.
What this site does
therefinery-co.com is the marketing site for The Refinery Co., a hospitality and experience consultancy. The site presents our services, background, and a contact form for prospective clients to reach Melissa.
There is no public account sign-up, no customer login, and no end-user dashboard on this site.
Information we collect
When you submit the contact form, we collect the information you provide: your name, email address, business name, the vertical you selected, and the message you wrote. We use that information to reply to your inquiry.
We do not run third-party advertising trackers on this site. Standard request logs (such as IP address and user agent) may be retained by our hosting and email providers for operational and abuse-prevention purposes.
How we use it
Contact form submissions are emailed to melissa@therefinery-co.com so we can respond to you. We do not sell your information, and we do not share it with third parties except the service providers listed below that help us deliver the site and respond to inquiries.
Service providers
- Lovable Cloud — application hosting and backend infrastructure.
- Calendly — scheduling for discovery calls you choose to book.
- Email delivery infrastructure for transactional messages from notify.therefinery-co.com.
Each provider processes data according to its own terms. We only send them the information needed to operate the site and respond to you.
Security controls in place
- Traffic to therefinery-co.com is served over HTTPS.
- Backend data access is governed by row-level security policies; database functions used by the email pipeline are restricted to the server role.
- Server-side credentials and API keys are stored as secrets and are not exposed in client-side code.
- Contact form submissions are validated on the server before any email is queued.
No website can guarantee absolute security. We work to apply reasonable controls appropriate to a marketing site that handles inbound inquiries.
Cookies & analytics
This site does not set advertising cookies. Essential cookies may be used by the platform to keep the site working correctly.
Your choices
If you would like us to update or delete information you submitted through the contact form, email melissa@therefinery-co.com and we will take care of it. Transactional emails from us include an unsubscribe link.
Contact
Questions about privacy, security, or this page can be sent to melissa@therefinery-co.com. You can also reach us via the contact page.
This page is editable content owned by The Refinery Co. and may be updated as our practices evolve.
