US Privacy Notice

This notice describes how ealytics (“we,” “us”) handles personal information of visitors located in the United States who use this website. It is written to meet the California Consumer Privacy Act as amended by the CPRA, and the comparable consumer privacy laws of Virginia, Colorado, Connecticut, Utah, and Texas.

ealyticsNew York, United States[email protected]

Questions about this notice, or requests to exercise the rights described in section 9, go to [email protected].

This website is built to collect as little as it can:

• We do not sell your personal information, and we never have.
• We do not share it for cross-context behavioral advertising.
• No advertising or marketing trackers, and no data sent to ad networks.
• No cookies during a normal visit to the public pages.
• Visitor statistics run on cookieless software we host ourselves — no analytics vendor receives your data.
• We collect meaningful personal information only when you choose to contact us.

In the past twelve months we have collected these statutory categories:

• Identifiers — your name, business email address, and company name when you submit the contact form; your IP address when your browser requests a page.
• Commercial information — the service you indicate interest in and the contents of the message you send us.
• Internet or other electronic network activity — pages viewed, referring site, browser type, and country of origin.

We do not collect Social Security or government ID numbers, financial account or payment card numbers, precise geolocation, biometric or genetic data, health information, racial or ethnic origin, religious beliefs, union membership, or the contents of your mail, email, or messages to others. In CCPA terms, we collect no sensitive personal information and therefore offer no “Limit the Use of My Sensitive Personal Information” link, because there is nothing to limit.

Directly from you, when you fill in the contact form or email us. Automatically from your browser, when it requests a page from our server. We do not buy personal information, and we do not obtain it from data brokers, list vendors, or social networks.

• To answer your inquiry and, if it goes that way, to scope and deliver services.
• To keep the site running: serving pages, diagnosing errors, and blocking attacks.
• To understand in aggregate which pages are read, so we know what to write more of.
• To meet legal, tax, and recordkeeping obligations that apply to us.

We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects, and we do not use it to train machine-learning models.

We have not sold personal information, and we have not shared it for cross-context behavioral advertising, in the preceding twelve months — including the personal information of anyone we know to be under sixteen. We have no plans to do either. Because there is no sale or sharing to opt out of, this site carries no “Do Not Sell or Share My Personal Information” link.

Access is limited to:

• our own personnel and affiliated service-delivery staff, restricted to those handling your inquiry or delivering services to you, under confidentiality and data-protection obligations;
• our cloud hosting provider, which stores the data on our behalf and is contractually barred from using it for its own purposes.

We disclose personal information to no one else, except where we are legally compelled to — a subpoena, court order, or comparable legal process — or where it is necessary to protect our rights or the safety of others.

Contact form submissions are kept for as long as needed to handle your inquiry and any business relationship that follows, then deleted unless a tax, accounting, or other legal retention duty requires us to hold them longer. Server logs are kept briefly for security and troubleshooting and then deleted. Aggregate analytics contain no identifiers and are retained indefinitely as statistics.

Depending on your state of residence, you have the right to:

• know what personal information we hold about you and how we use it;
• obtain a copy of it, in a portable form where technically feasible;
• correct information that is inaccurate;
• delete information we hold about you;
• opt out of sale, sharing, or targeted advertising — which we note is already the default here, since we do none of them;
• not be discriminated against for exercising any of these rights. We do not charge different prices or provide a different level of service to people who exercise them.

Send any request to [email protected]. We operate exclusively online and deal with you directly, so email is the designated method for submitting requests. We will confirm receipt within ten business days and respond substantively within forty-five days, extending once by another forty-five days if the request is complex — we will tell you if that happens.

To verify a request, we match the details you give us against what we already hold — for most people that is the email address used to contact us. We ask only for what is needed to establish that the request is yours, and we use it for nothing else. An authorized agent may submit a request on your behalf with written permission signed by you; we may still contact you to confirm it.

If we decline a request and you live in Virginia, Colorado, Connecticut, or Texas, you may appeal by replying to our decision. We will respond to the appeal within sixty days and, if we again decline, tell you how to contact your state attorney general.

We honor the Global Privacy Control signal, though in practice it changes nothing here: there is no sale, sharing, or targeted advertising for it to switch off. There is still no common standard for Do Not Track browser headers, so we do not respond to them separately.

Our servers and part of our team are located outside the United States, so personal information you provide is transferred out of the country and processed there. Privacy laws in those jurisdictions differ from US law and, in the case of our server location, are more protective. Transfers are covered by contractual data-protection commitments and backed by the safeguards described in section 12. By contacting us, you understand that your information will be handled this way.

The site is served exclusively over TLS-encrypted connections. Stored inquiries sit in our own database on infrastructure we control, and access is restricted to the people handling them. No method of transmission or storage is perfectly secure, but our Security & Data Handling page sets out the specific controls we operate.

This is a business-to-business website. It is not directed at children, and we do not knowingly collect personal information from anyone under sixteen. If you believe a child has sent us information, write to [email protected] and we will delete it.

We update this notice whenever our practices change, and revise the date at the top when we do. The version published here is the one that applies. If you are visiting from outside the United States, our international privacy policy is the one that governs.