Privacy Policy

1. Introduction

Coffman Media, LLC ("Coffman Media," "we," "us," or "our") operates coffmanmedia.com and affiliated websites, portals, and online services (collectively, the "Services"). This Privacy Policy governs our collection, use, disclosure, and protection of personal information obtained from visitors to and users of the Services ("you" or "Users"). Services to which this Privacy Policy is not expressly linked may be governed by a separate policy.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please discontinue use of the Services.

2. Data Controller

For purposes of applicable data protection laws, including the EU/UK General Data Protection Regulation ("GDPR"), Coffman Media, LLC is the data controller responsible for your personal information. Our primary place of business is:

3. Information We Collect

We collect personal information in the following categories:

3.1 Information You Provide Directly

When you complete a contact form, request a quote, book a discovery call, or otherwise communicate with us, you may provide: your full name; business entity name, type, and address; primary contact name, email address, and telephone number; project details and budget information; and any other information you choose to include. We do not require registration to access most portions of the Services.

3.2 Automatically Collected Information

When you visit the Services, we and our third-party service providers automatically collect certain technical and usage data, including: IP address and approximate geographic location; browser type, version, and operating system; device identifiers; pages visited, time spent on pages, and referring URLs; and clickstream data. This information is collected through server logs, cookies, and analytics tools.

3.3 Cookies and Similar Technologies

We use cookies, pixel tags, and similar tracking technologies to operate and improve the Services. Cookies are small data files stored on your device. We use:

• Strictly necessary cookies — required for the Services to function (e.g., session management). These cannot be disabled.
• Analytics cookies — used to understand how visitors interact with the Services. We use Google Analytics 4 (GA4), which sets cookies to collect anonymized usage data. Google's privacy policy is available at policies.google.com/privacy. You may opt out of GA4 tracking by installing the Google Analytics Opt-out Browser Add-on.
• Advertising / targeting cookies — may be set by third-party advertising partners to serve relevant advertisements. We do not control these cookies; they are subject to the third parties' own privacy policies.

You may disable cookies in your browser settings at any time. Disabling certain cookies may affect the functionality of the Services. By continuing to use the Services without disabling cookies, you consent to our use of cookies as described in this policy.

3.4 Payment Information

If you make a payment through the Services, we collect billing address, credit card number, and expiration date solely to process the transaction. We do not store credit card information after the transaction is complete. Payment processing is handled by PCI-DSS-compliant third-party processors.

4. Lawful Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following lawful bases as required by GDPR Article 6:

• Contractual necessity (Art. 6(1)(b)) — processing required to respond to your inquiry, provide a quote, or fulfill a service agreement.
• Legitimate interests (Art. 6(1)(f)) — processing for analytics, fraud prevention, website security, and improvement of our Services, where our interests are not overridden by your rights.
• Consent (Art. 6(1)(a)) — processing for marketing communications, where you have opted in. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Legal obligation (Art. 6(1)(c)) — processing required to comply with applicable law.

5. How We Use Your Information

We use the information we collect for the following purposes:

• Responding to inquiries, providing quotes, proposals, and project communications
• Delivering and managing the Services you request
• Maintaining your account and transaction history
• Sending marketing and promotional communications (only where you have provided consent or where permitted by applicable law)
• Analyzing site traffic and usage to improve our website and Services
• Detecting, preventing, and responding to fraud, security incidents, and illegal activity
• Complying with legal obligations and enforcing our agreements
• Performing statistical analysis of user behavior to measure interest in our Services

6. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties for their own marketing purposes. We may share your information in the following limited circumstances:

• Service providers and vendors — trusted third parties who assist us in operating the Services (e.g., email platforms, CRM systems, analytics providers, payment processors). These parties are contractually obligated to keep your information confidential and use it only as directed by us.
• Affiliates and trusted suppliers — for purposes of providing better services, product improvement, research, and fulfilling your requests.
• Legal requirements — when required by law, court order, or governmental authority, or to protect the rights, property, or safety of Coffman Media, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of all or substantially all of our assets, in which case your information may be transferred as a business asset.

We do not share personal information with third parties for their own direct marketing purposes without your explicit consent.

7. International Data Transfers

Coffman Media is based in the United States. If you access the Services from outside the United States, your personal information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Services, you consent to this transfer.

For transfers of personal data from the EEA, UK, or Switzerland to the United States, we rely on applicable transfer mechanisms, including Standard Contractual Clauses (SCCs) approved by the European Commission where required. We will treat your information as subject to the protections described in this Privacy Policy regardless of where it is processed.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Contact form submissions and lead records are retained for up to three (3) years for business continuity and legal purposes. You may request deletion of your data at any time as described in Section 9.

9. Your Privacy Rights

9.1 Rights Under GDPR (EEA / UK / Switzerland)

If you are located in the EEA, UK, or Switzerland, you have the following rights under the GDPR:

• Right of access (Art. 15) — to obtain a copy of your personal data and information about how it is processed, in a machine-readable format upon request.
• Right to rectification (Art. 16) — to have inaccurate or incomplete personal data corrected.
• Right to erasure / "right to be forgotten" (Art. 17) — to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent.
• Right to restriction of processing (Art. 18) — to request that we limit processing of your data in certain circumstances.
• Right to data portability (Art. 20) — to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21) — to object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time without affecting prior processing.
• Right to lodge a complaint — to lodge a complaint with your local supervisory authority (e.g., the Information Commissioner's Office in the UK, or your national data protection authority in the EU).

9.2 California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you the following rights:

• Right to know — to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the business or commercial purposes for which it was collected, and the categories of third parties with whom it was shared.
• Right to delete — to request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to correct — to request correction of inaccurate personal information we maintain about you.
• Right to opt out of sale or sharing — we do not sell personal information. We do not share personal information for cross-context behavioral advertising. If this changes, we will update this policy and provide a "Do Not Sell or Share My Personal Information" link.
• Right to limit use of sensitive personal information — to limit our use of sensitive personal information to purposes necessary to provide the Services.
• Right to non-discrimination — we will not discriminate against you for exercising any of your CCPA/CPRA rights.

Pursuant to California Business and Professions Code Section 1798.83, California residents with an established business relationship may also request information about the types of personal information we share with third parties for their direct marketing purposes and the identities of those third parties for the preceding calendar year.

Pursuant to California Business and Professions Code Section 22581, California residents under age 18 who are registered users may request removal of content they have publicly posted on the Services.

To exercise any California privacy right, please contact us at [email protected]. We will verify your identity before processing your request and respond within 45 days as required by law.

9.3 All Users — Opt-Out and Data Requests

Regardless of your location, you may at any time: (a) opt out of marketing communications by following the unsubscribe instructions in any email we send, or by emailing [email protected]; (b) request access to, correction of, or deletion of your personal information by emailing [email protected]. We will ask you to identify yourself and specify the information requested before processing your request. Please note that deleting your personal information may terminate your access to certain Services.

Notwithstanding an opt-out from marketing, we may continue to contact you regarding your specific service requests, inquiries, or contractual obligations.

10. Children's Privacy (COPPA)

The Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected] and we will take steps to delete such information. We strongly encourage parents and guardians to monitor their children's online activities.

11. Security

Coffman Media implements reasonable administrative, technical, and physical security measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction. We comply with applicable laws regarding the storage and protection of personal information. However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and applicable authorities as required by law.

12. Third-Party Links and Services

The Services may contain links to third-party websites, social networking platforms, and other online services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party services you access through the Services. Additionally, if you voluntarily disclose personal information in an open forum, message board, or interactive communication platform on the Services, that information may be collected and used by other users or third parties beyond our control. Please exercise caution when sharing information publicly.

13. Email Communications (CAN-SPAM)

In compliance with the CAN-SPAM Act, all commercial email communications from Coffman Media will: clearly identify the sender; include a valid physical postal address; include a clear and conspicuous opt-out mechanism; and honor opt-out requests within 10 business days. To unsubscribe from marketing emails, follow the unsubscribe link in any email or contact us at [email protected].

14. Changes to This Privacy Policy

Coffman Media may update this Privacy Policy from time to time and at any time. We will notify you of material changes by updating the "Last updated" date at the top of this page and, where required by law or where we have your email address on file, by sending a notice to that address. Your continued use of the Services after any changes constitutes your acceptance of the revised policy. We encourage all Users to review this Privacy Policy periodically.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

This Privacy Policy is provided for informational purposes and does not constitute legal advice. Coffman Media recommends consulting qualified legal counsel to ensure compliance with all applicable privacy laws for your specific circumstances.