Privacy Policy

1. Information We Collect

Information you provide directly. When you submit the contact form on our website, we collect:

• Your name
• Your email address

We do not collect payment information, phone numbers, or any other personal data through the form.

Information collected automatically. When you visit our website, our server may automatically log:

• Your IP address
• Browser type and version
• Pages visited and time spent
• Referring URL
• Date and time of your visit

This information is used for security monitoring, spam prevention, and aggregate analytics. It is not linked to your name or email unless you submit the contact form.

Analytics. We use or may in the future use Google Analytics 4 to understand how visitors use our website. Google Analytics collects data such as pages viewed, session duration, device type, and approximate geographic location. This data is aggregated and anonymized where possible. For more information, see Google's Privacy Policy. You can opt out using the Google Analytics Opt-out Browser Add-on.

2. How We Use Your Information

We use the information we collect to:

• Respond to your inquiry and deliver the free sample image you requested
• Communicate with you about our services, pricing, and project details
• Prevent spam and fraudulent submissions (honeypot and rate-limiting)
• Monitor and improve website security
• Analyze aggregate website traffic and improve user experience
• Comply with legal obligations

We do not:

• Sell, rent, or trade your personal information to third parties for their marketing purposes
• Send you unsolicited marketing emails without your consent
• Use automated profiling or make automated decisions that produce legal effects concerning you

3. Third-Party Services

We share your information only with the following service providers who help us operate the website and respond to inquiries:

Telegram (Telegram Messenger Inc.)
When you submit the contact form, your name, email address, and IP address are transmitted to a private Telegram channel accessible only to AmzBrandLab staff. Telegram's privacy policy is available at telegram.org/privacy.

Google Analytics (Google LLC)
We use Google Analytics to collect anonymized usage data. Google may process this data on servers in the United States and other countries. Google LLC is certified under the EU-U.S. Data Privacy Framework. See Google's Privacy Policy.

Google Fonts (Google LLC)
Our website loads fonts from Google Fonts servers. This may result in your IP address being transmitted to Google. See Google's Privacy Policy.

Cloudflare CDN / jsDelivr / unpkg
We load JavaScript libraries (GSAP, Tailwind, Lenis) from public CDNs. Your IP address may be logged by these services as part of normal CDN operation.

We do not sell personal information to any third party and we do not share your information with advertisers or data brokers.

4. Cookies & Tracking Technologies

Our website currently uses no first-party cookies for tracking or advertising. However, third-party services embedded on our site (Google Analytics, Google Fonts, CDNs) may set their own cookies or use similar technologies such as pixel tags, web beacons, or local storage.

Google Analytics cookies (when active) include:

• _ga — distinguishes users (expires 2 years)
• _ga_* — maintains session state (expires 2 years)

You can control cookies through your browser settings or opt out of Google Analytics at tools.google.com/dlpage/gaoptout.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purpose for which it was collected:

• Contact form submissions (name, email) are retained in our Telegram channel until the project conversation concludes or until you request deletion, whichever comes first.
• Server logs (IP addresses, access logs) are retained for up to 30 days for security purposes and then deleted.
• Google Analytics data is retained for 14 months per our Analytics settings.

You may request deletion of your personal information at any time by contacting us (see Section 11).

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request that inaccurate data be corrected
• Deletion — request that we delete your personal data ("right to be forgotten")
• Portability — receive your data in a structured, machine-readable format
• Opt-out of communications — unsubscribe from any emails we send at any time by replying "unsubscribe"

To exercise any of these rights, contact us at the address in Section 11. We will respond within 45 days.

7. California Residents — CCPA / CPRA

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you additional rights.

Categories of personal information collected in the last 12 months:

• Identifiers (name, email address, IP address)
• Internet or network activity (pages visited, session data via Google Analytics)

Business purpose for collection: responding to service inquiries and improving website performance.

We do not sell or share your personal information for cross-context behavioral advertising. We have not sold personal information in the past 12 months.

Your CCPA rights:

• Right to Know — request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to Delete — request deletion of personal information we collected from you (subject to certain exceptions)
• Right to Correct — request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing — we do not sell data, so no opt-out mechanism is required; however, you may contact us to confirm
• Right to Non-Discrimination — we will not discriminate against you for exercising your CCPA rights

To submit a verifiable consumer request, contact us at the address in Section 11. We will respond within 45 calendar days. You may designate an authorized agent to submit requests on your behalf.

8. Children's Privacy (COPPA)

Our website and services are directed to business professionals and are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.

If we learn that we have inadvertently collected personal information from a child under 13, we will delete it promptly. If you believe we have collected such information, please contact us immediately.

9. Security

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, or disclosure, including:

• HTTPS encryption on all pages (TLS 1.2+)
• Rate limiting on form submissions (5 requests per 10 minutes per IP)
• Honeypot fields to detect and discard automated spam submissions
• Server access restricted to SSH key authentication only
• Firewall rules blocking unauthorized ports

No method of transmission over the Internet is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page.

Your continued use of our website after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

11. Contact Us

If you have questions, requests, or complaints regarding this Privacy Policy or our data practices, please contact us:

This Privacy Policy was written for amzbrandlab.com and applies solely to information collected through this website.