Privacy Policy.

1. Who we are

ATT Agency is a registered limited liability company (LLC) based in Boulder, Colorado, United States. For the purposes of data-protection law, ATT Agency is the controller of personal information collected through attagency.co. You can reach us at [email protected].

2. What we collect

a. Information you give us

When you submit the contact form, we receive:

• Your name
• Your email address
• The name of your business or project (optional)
• The services you indicated interest in
• The details you write in the project-details field

If you email [email protected] or book a call through our scheduling tool, we also receive the contents of that email and the calendar information you provide.

b. Information collected automatically

attagency.co is hosted on Cloudflare Pages. Cloudflare automatically logs basic request information (IP address, user agent, request URL, timestamp) as part of normal operation and security protection. We do not run any analytics, advertising, or tracking pixels. We do not set cookies on this site.

3. How we use it

We use the information you give us only to:

• Reply to your inquiry and discuss a potential project.
• Scope, quote, and deliver work if we end up collaborating.
• Improve our intake process and our services overall.
• Comply with legal obligations.

We do not sell your information. We do not share it with advertisers. We do not use it to train AI models. We do not use it to send marketing email unless you explicitly opt in.

4. Service providers we use

To operate the site we rely on a small number of third-party providers. Each has its own privacy practices:

• Cloudflare, our hosting and content-delivery provider. Cloudflare Privacy Policy.
• Web3Forms, the service that delivers contact-form submissions to our inbox. Your form data passes through their servers on the way to us. Web3Forms Privacy Policy.
• Google Workspace, the provider behind [email protected] email. Google Privacy Policy.
• Calendly, used for booking intro calls, only when you choose to book one. Calendly Privacy Policy.
• Google Search Console, used to monitor how the site appears in Google Search. It does not receive any visitor personal information from us.

5. How long we keep it

Contact-form submissions are kept for as long as it takes to respond and, if we work together, for the life of the project plus a reasonable period afterward for legal and tax purposes (typically up to seven years). Inquiries that do not result in a project are deleted within twenty-four months of the last contact. You can ask us to delete your information sooner, at any time.

6. Your rights

Depending on where you live, you may have the right to:

• Know what personal information we hold about you.
• Receive a copy of it.
• Correct it if it is wrong.
• Ask us to delete it.
• Object to or restrict certain uses.
• Withdraw consent where we relied on it.
• Lodge a complaint with a data-protection authority.

To exercise any of these rights, email [email protected]. We will respond within thirty days. We will never charge you to exercise a right or discriminate against you for exercising one.

7. California residents

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) give you the rights listed in Section 6, plus the right to opt out of any sale or sharing of personal information. We do not sell or share personal information as those terms are defined under California law.

8. Residents of the EU, UK, and similar regions

If you are in the European Economic Area, the United Kingdom, or another region with comprehensive data-protection law, our legal bases for processing your information are:

• Your consent, when you choose to send us a brief through the contact form or email us.
• Performance of a contract or steps to enter one, when we discuss or deliver work for you.
• Legitimate interests, when we keep basic records to run and improve our small business.
• Legal obligation, when we are required to keep records for tax or other compliance reasons.

Because ATT Agency operates from the United States, any information you send us is processed in the US. We rely on standard contractual clauses with our processors where required.

9. Security

We use industry-standard precautions to protect the information we hold, including HTTPS encryption on attagency.co, access controls on our inbox and storage, and providers (Cloudflare, Google, Web3Forms) with their own security programs. No system is perfectly secure. If we discover a breach that affects your information, we will notify you and any required authority as soon as reasonably possible.

10. Children

attagency.co is not directed at children under thirteen, and we do not knowingly collect personal information from them. If you believe a child has sent us information, email [email protected] and we will delete it.

11. Changes to this policy

If we update this policy we will change the "Last updated" date at the top. Material changes will be reflected here and, where reasonable, called out on the site. If you want to be notified of every change, email us and we will add you to a short list.

12. Contact

Questions, requests, or complaints? Email [email protected] or use the contact page. We answer privacy emails personally, usually within one business day.