Privacy Policy

Who this covers

This Privacy Policy explains what personal information SiteSculpt LLC ("SiteSculpt", "we", "us") collects through sitesculptny.com, why we collect it, who we share it with, and what choices you have.

It covers this website and our own business dealings with prospective and current clients. It does not cover the websites we build and host for our clients — those are controlled by the businesses that own them, and each has its own privacy policy. See the section on client websites below.

Information we collect

Information you give us

• Contact form. Your name, business name, email address, phone number, the plan or service you selected, and whatever you write in the message field.
• Email, phone and text. Anything you send us when you get in touch, including the content of the conversation.
• Client onboarding. If you become a client: business details, service areas, hours, logos, photographs, and credentials or access you choose to share so we can do the work.
• Billing. Billing name, address and the details needed to take payment. Card numbers are handled by our payment processor; we do not store full card numbers.

Information collected automatically

• Server logs. Our host records requests to the site, including IP address, browser type, referring page and timestamp, for security and reliability.
• Advertising measurement data. Through the Google Ads tag on every page: the pages you viewed, your approximate region, and whether you contacted us, tied to the advertisement you arrived from.

Advertising measurement

We advertise this business on Google. Every page of this site loads the Google Ads tag so we can tell which advertisement brought someone here and whether they went on to contact us. It sets cookies and reports to Google the pages you viewed, your IP address and approximate region, and whether you submitted a form or tapped a phone number. It does not tell us your name.

We do not run general web analytics. Apart from the advertising tag, the only third-party script is the spam protection on the contact form, described below.

If we add further tracking tools, we will update this policy first, and where the law requires consent we will ask before anything is set.

How we use information

We use personal information to:

• Respond to your inquiry and arrange a call.
• Provide, maintain and support the services you purchase.
• Take payment and keep accounting records.
• Communicate about your account, including service and billing notices.
• Keep the site secure, prevent abuse, and diagnose technical problems.
• Comply with legal obligations and enforce our agreements.
• With your consent where required, send occasional marketing about our services. You can opt out at any time.

We do not sell your personal information for money. The Google advertising tag described under Cookies and analytics does disclose information about your visit to Google, which can count as “sharing” for advertising purposes under California law. See US state privacy rights for how to opt out.

Why we are allowed to use it

Where the EU or UK GDPR applies, we rely on the following legal bases:

• Contract. To provide services you have bought or to take steps at your request before entering a contract.
• Legitimate interests. To run and secure our business, respond to inquiries, and improve our services — balanced against your rights.
• Consent. For marketing messages where consent is required, and for non-essential cookies. You may withdraw consent at any time.
• Legal obligation. To meet tax, accounting and other legal requirements.

Who we share it with

We share personal information only as needed to run the business, with:

• Hosting and infrastructure providers that serve this website and store form submissions.
• Payment processors that handle billing.
• Email, messaging and CRM providers we use to communicate with you.
• Google, through the advertising tag on every page of this site, so we can measure our own advertising. See the cookies section below.
• Advertising and analytics platforms, where you have engaged us to run campaigns on your behalf.
• Professional advisers such as accountants and lawyers, under duties of confidentiality.
• Authorities, where we are legally required to, or to protect our rights, safety or property.
• A successor, if the business is merged, acquired or its assets sold, subject to this policy.

Most of these providers act on our instructions and are not permitted to use your information for their own purposes. Google is the exception: information sent by the advertising tag is also used by Google under its own privacy policy, not only on ours.

Cookies and analytics

Google Ads

Every page loads the Google Ads tag. It sets cookies in your browser and tells Google that the page was viewed, and separately when a form is submitted or a phone number is tapped, so we can measure which advertisements actually produce enquiries. Google handles that information under the Google Privacy Policy and may also use it for its own advertising purposes, including showing you our advertisements on other sites.

If you would rather not be measured this way: turn on your browser’s Global Privacy Control setting, block or delete cookies for this site, or change your Google ad settings. None of that stops you using the site, the form or the phone number.

We do not run general web analytics on this site.

Text message sign-up

If you opt in to texts, we use your number only to reply to you and to follow up about the inquiry you started. We do not sell or share your number, and message consent is never shared with third parties for their own marketing. Reply STOP at any time to opt out, or HELP for help. Message and data rates may apply.

The site loads web fonts from Google Fonts, which means your browser makes a request to Google's servers and Google receives your IP address as part of that request. No cookie is set by that request.

Spam protection on our contact form

The contact form is protected by Google reCAPTCHA, which checks that a submission comes from a person rather than an automated script. To do that it loads a script from Google, sets a cookie, and collects information about your device and how you interacted with the page. That information goes to Google and is governed by the Google Privacy Policy and Terms of Service. We use it only to reject spam, and it runs on the contact page, not across the rest of the site.

If you would rather not use it, call or email us instead and no reCAPTCHA data is collected.

Most browsers let you block or delete cookies through their settings. We honor Global Privacy Control (GPC) signals where legally required.

Text messages and phone calls

If you give us your phone number, we may call or text you about your inquiry or your account. Message and data rates may apply. Reply STOP to any text to opt out and HELP for help.

We do not sell or share phone numbers with third parties for their own marketing.

Recording

We do not record or transcribe our own sales or support calls. If that ever changes, we will tell you at the start of the call and update this policy.

Some states require the consent of every party to a call before it may be recorded. If you are calling us from one of those states, nothing is being recorded on our end.

Messaging we configure for clients

Where our services send text messages on behalf of a client business, that client is the sender and is responsible for obtaining the consent required by law. See our Terms and Conditions.

How long we keep it

We keep personal information only as long as we need it:

• Inquiries that do not become clients: up to 24 months, so we can pick up the conversation if you come back.
• Client records: for the life of the relationship and then as long as needed for legal, tax and accounting purposes, typically seven years.
• Billing records: as required by tax law.
• Server logs: a short period for security and troubleshooting.

You can ask us to delete information sooner, and we will unless we are required to keep it.

How we protect it

We use reasonable technical and organisational measures to protect personal information, including encryption in transit (HTTPS), access controls, and limiting access to the people who need it.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and any regulator as required by law.

Your rights and choices

Subject to applicable law, you may ask us to:

• Confirm what personal information we hold about you and give you a copy.
• Correct information that is inaccurate or incomplete.
• Delete information we no longer need to keep.
• Restrict or object to certain processing.
• Provide your information in a portable format.
• Withdraw consent where we relied on it.

Email contact@sitesculptny.com and we will respond within the timeframe the law requires. We may need to verify your identity first. We will not treat you differently for exercising these rights.

You can opt out of marketing email at any time using the unsubscribe link or by replying to ask.

US state privacy rights

Residents of California, Colorado, Connecticut, Virginia and other states with comprehensive privacy laws have rights to know, delete, correct and to opt out of sale, sharing and targeted advertising.

We do not sell personal information for money. We do run the Google advertising tag described above, which discloses information about your visit to Google so we can measure our own advertising. Under the California Consumer Privacy Act as amended, a disclosure of that kind can amount to “sharing” for cross-context behavioral advertising. We treat it as sharing rather than argue that it is not, and we give you a way out of it.

To opt out: turn on Global Privacy Control in your browser and this site will not set advertising cookies or send advertising identifiers — we honor GPC. You can also block cookies for this site, or contact us using the details below and we will apply the opt-out for you.

To exercise any right, contact us using the details below. If we deny a request you may appeal by replying to our decision, and depending on your state you may also contact your Attorney General.

Visitors outside the United States

We are based in the United States and our service providers are generally located there. If you access this site from outside the US, your information will be transferred to and processed in the US, where data protection law may differ from your own.

Where required for transfers from the EEA, UK or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Children's privacy

Our services are for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.

Data on our clients' websites

When we build or host a website for a client, that client decides what personal information is collected through it and why. In that arrangement the client is the controller and SiteSculpt acts as a service provider or processor on their instructions.

If you submitted a form on a website we built for someone else, contact that business directly to exercise your rights. We will assist our client in responding.

Changes to this policy

We may update this policy as our services or the law change. The "last updated" date at the top shows when it last changed. Material changes will be highlighted on this page and, where appropriate, notified directly.

How to reach us

Questions, requests or complaints about privacy:

• SiteSculpt LLC
• 7275 NY-96, Victor, NY 14564
• Registered address: 4924 State Route 96, Shortsville, NY 14548
• contact@sitesculptny.com
• (585) 420-8542

If you are in the EEA or UK you also have the right to complain to your local data protection authority.