This Privacy Policy explains how Chris Trumbull, LLC (“we,” “us,” or “our”) collects, uses, shares and protects personal information when you visit christrumbull.com (the “Site”), contact us, receive our emails, or work with us. We are a digital strategy, marketing and web consultancy based in Cleveland, OH, USA.

If you have questions, email hello@christrumbull.com.

Summary

We collect what you choose to send us (for example, through the contact form) and basic technical information that every website receives.
We use analytics cookies to understand how the Site is used. You can opt out at any time by selecting Reject on the cookie banner or under the Cookie Settings link at the bottom of every page.
We do not sell your personal information. We honor Global Privacy Control (GPC) signals.
You can ask to access, correct, delete or export your information, or to opt out, by emailing hello@christrumbull.com.

Information we collect

Information you give us

Inquiries: your name, email address, company, phone number (optional), and anything you write when you use the contact form or email us.
Client work: business contact details, billing information and project materials you share when you engage us.
Email subscriptions: your email address and preferences, if you sign up for updates.

Information collected automatically

Server logs: our hosting provider records IP address, browser type, pages requested, referring page and time of visit, to deliver the Site and keep it secure.
Cookies and similar technologies: see “Cookies” below. Analytics data (pages viewed, approximate location derived from IP address, device and browser type, how you arrived) is collected unless you opt out.
Spam protection: when you start filling in the contact form, Google reCAPTCHA checks for automated abuse and may collect hardware and software information. Its use is subject to the Google Privacy Policy and Terms of Service.

Information from other sources

We may receive business contact information from referrals, professional networks such as LinkedIn, or public sources when you or your organization are a prospective or existing client.

We do not ask for sensitive personal information (such as government ID numbers, financial account details, health information or precise geolocation) through the Site. Please do not send it.

How we use information

We use personal information to:

Respond to inquiries and provide proposals, services and support;
Send you information you asked for, and — where permitted — occasional updates about our services;
Understand how the Site is used and improve it (you can opt out of analytics cookies);
Protect the Site, prevent spam and fraud, and keep our systems secure;
Keep business records, invoice clients, and meet legal, tax and accounting obligations;
Enforce our agreements and protect our legal rights.

Legal bases (EEA, UK and Switzerland). We rely on: taking steps at your request before entering a contract, and performing a contract (inquiries and client work); our legitimate interests in running, securing and improving our business (including understanding how the Site is used) and communicating with business contacts, balanced against your rights, which you may object to at any time; your consent (marketing emails where consent is required), which you may withdraw at any time; and compliance with legal obligations.

Cookies

Cookies are small files a website stores in your browser. We use two kinds:

Strictly necessary: needed for the Site to work and remember your privacy choice — for example, the ct_consent cookie, which stores whether you accepted or rejected optional cookies (it contains no identifier and lasts 180 days). Spam protection on the contact form also falls in this group. These cannot be switched off.
Optional analytics and marketing: for example, Google Analytics (via Google Tag Manager), which helps us understand visits to the Site. These run unless you opt out.

When analytics cookies are in use, a banner tells you about them on your first visit. Selecting Reject opts you out: analytics and marketing tags stop loading, and we remove the analytics cookies we can reach. You can change your choice at any time with the Cookie Settings link in the footer. Google tags also receive your choice through Google Consent Mode. You can also block or delete cookies in your browser settings.

Global Privacy Control and Do Not Track. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a rejection of optional cookies and an opt-out of any sale or sharing of personal information. There is no common standard for “Do Not Track” browser signals, so we do not respond to them separately; GPC is honored as described.

How we share information

We do not sell personal information. We share it only as follows:

Service providers who process it on our behalf under contract — for example, website hosting (DreamHost), analytics, tag management and spam protection (Google), and email and productivity tools. They may use it only to provide services to us.
Professional advisers such as accountants and lawyers, under confidentiality obligations.
Legal and safety reasons: to comply with law, legal process or lawful requests by public authorities, or to protect rights, property and safety.
Business transfers: as part of a merger, acquisition or sale of assets, subject to this Policy.
With your consent or at your direction.

If we use advertising cookies, California law may treat them as “sharing” personal information for cross-context behavioral advertising. You can opt out of them at any time with Reject in Cookie Settings or by enabling GPC.

Email communications (CAN-SPAM)

We send commercial email only to people who asked to hear from us or with whom we have a business relationship. We do not buy email lists or harvest addresses. Every marketing email we send:

Identifies us as the sender, with accurate “From,” “Reply-To” and subject lines;
Includes our valid physical postal address;
Includes a clear way to unsubscribe, which we honor promptly (and always within 10 business days).

You can also opt out by emailing hello@christrumbull.com. Even after you opt out, we may still send messages related to a project, invoice or request you have with us.

Your privacy rights

Depending on where you live, you may have the rights below. We extend the core rights — access, correction, deletion and opt-out — to everyone, wherever they live.

EEA, UK and Switzerland (GDPR / UK GDPR)

You have the right to access, correct or erase your personal data; to restrict or object to its processing (including for direct marketing); to data portability; and to withdraw consent at any time, without affecting earlier processing. You may also lodge a complaint with your local data protection authority.

California (CCPA, as amended by the CPRA)

California residents have the right to know what personal information we collect, use and disclose; to access a copy of it; to correct inaccurate information; to delete it; to opt out of its sale or sharing; to limit the use of sensitive personal information (we do not use it for purposes that require this); and not to be discriminated against for using these rights. You may use an authorized agent.

In the past 12 months we have collected the following categories of personal information, from the sources and for the purposes described above:

Category	Examples	Disclosed for a business purpose to
Identifiers	Name, email address, phone number, IP address	Hosting, email and spam-protection providers
Commercial and professional information	Company, role, project details, billing records	Accounting and productivity tools; professional advisers
Internet or network activity	Pages viewed, browser and device type, referring page	Hosting and analytics providers
Approximate geolocation	City or region derived from IP address	Analytics provider (only with consent)

We have not sold personal information. We have not knowingly sold or shared the personal information of consumers under 16. We keep each category only as long as described under “How long we keep information.” California residents may also request information about disclosures for direct-marketing purposes (California Civil Code § 1798.83, “Shine the Light”); we do not share personal information with third parties for their own direct marketing.

Other US states

Residents of states with comprehensive privacy laws — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island — may have the right to confirm whether we process their personal data, and to access, correct, delete and obtain a portable copy of it, and to opt out of targeted advertising, sale and profiling. If we decline your request, you may appeal by replying to our decision or emailing hello@christrumbull.com with the subject “Privacy appeal”; if you are not satisfied with the outcome, you may contact your state Attorney General. Nevada residents may opt out of the sale of covered information; we do not sell it.

How to make a request

Email hello@christrumbull.com and tell us what you would like us to do. We will verify your request by confirming information we already have (such as your email address) before acting on it, and respond within the time the law requires — generally within 30 days (one month) under GDPR and 45 days under US state laws, which may be extended where permitted. We will not charge you for a reasonable request.

How long we keep information

Inquiries that do not lead to a project: up to 2 years after our last contact, then deleted.
Client and billing records: for the duration of the engagement and up to 7 years afterwards, as tax and accounting rules require.
Analytics data: up to 14 months in Google Analytics, then automatically deleted.
Server logs: a short period, typically up to 30 days, unless needed to investigate a security incident.

Security

We use reasonable administrative, technical and physical safeguards, including encrypted connections (HTTPS), access controls, and keeping software up to date. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the authorities as the law requires.

International transfers

We are based in the United States, and personal information is processed in the United States and other countries where our service providers operate. When we transfer personal data from the EEA, UK or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or providers’ certification under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions).

Work we do for clients

When we provide marketing, analytics, advertising or web services to clients, we may process personal information on their behalf — for example, in their website, analytics, CRM or advertising accounts. In that role we act as a “service provider” or “processor”: we use the information only to provide the services, under our agreement and the client’s instructions, and the client’s own privacy policy applies. Please direct requests about that information to the client.

Children’s privacy

The Site is intended for business audiences and is not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA and UK), consistent with the Children’s Online Privacy Protection Act (COPPA). If you believe a child has given us personal information, contact us and we will delete it.

Links to other websites

The Site links to other websites, such as client sites and social networks. We are not responsible for their privacy practices; please read their policies.

Changes to this policy

We may update this Policy from time to time. The effective date at the top shows when it last changed. If we make material changes, we will post the updated Policy here and, where required, ask for your consent again or notify you directly.

Contact us

Chris Trumbull, LLC
Cleveland, OH, United States
hello@christrumbull.com

Privacy Policy