Privacy Policy

This Privacy Policy explains how [LEGAL ENTITY NAME] (“Analog Elk,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards your information when you visit analogelk.com, use our client portal, or otherwise engage our creative and production services (collectively, the “Services”). By using the Services, you agree to the practices described here.

1. Information We Collect

We collect the following categories of information:

• Information you provide directly. Your name, email address, phone number, company, billing details, project briefs, and any content or files you share when you contact us, request a proposal, or work with us through the client portal.
• Account & portal data. Credentials and project records associated with your client portal account, including invoices, deliverables, and communications.
• Payment information. When you pay an invoice, your payment is processed by our payment processor (see Payment Processing below). We do not store full card numbers on our servers.
• Usage & device data. Privacy-respecting analytics such as pages visited, referring URLs, approximate region, and device/browser type, collected via our self-hosted analytics (see Cookies & Analytics below).

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Services;
• Communicate with you about projects, proposals, and support;
• Process payments and send invoices and receipts;
• Maintain the security and integrity of the client portal;
• Understand how our site is used so we can improve content and performance; and
• Comply with legal obligations and enforce our agreements.

3. Cookies & Analytics

We use Matomo to understand how visitors use our site. We run it ourselves, on our own server at analytics.analogelk.com. Your visit data is never sent to Google Analytics, to an advertising network, or to any other third party, and it is never sold or used to build an advertising profile.

Here is exactly what that means in practice:

• No analytics cookies. Matomo is configured to run cookieless on this site. It does not set the _pk_id or _pk_ses cookies it would normally use, and it does not store an identifier in your browser. Because there is no analytics cookie to consent to, there is no cookie banner.
• No profile of you. Without that identifier we cannot link your visit today to your visit next week, and we do not try to. We see aggregate counts, not people. Nothing follows you to other websites, and analytics data is never combined across our clients’ sites or with your client portal account.
• Anonymized IP addresses. Your IP address is truncated before it is stored, so it identifies an approximate region rather than a household or a device.
• What is recorded. The page you viewed, the site that referred you, approximate region, and coarse device and browser type. Web addresses are cleaned before they are stored: private links such as share and proposal links have their access tokens stripped out, and query parameters are discarded apart from standard campaign tags.
• Global Privacy Control and Do Not Track. If your browser sends a Global Privacy Control signal, analytics is switched off automatically and nothing at all is loaded or recorded. You do not need to tell us twice.
• Signed-in areas are excluded. The employee portal and the client portal are not tracked by our site analytics at all.

We do still use a small number of strictly necessary cookies to operate the site itself, such as keeping you signed in to the client portal. Those are not analytics and are not covered by the opt-out below.

Opting out

If you would rather not be counted at all, use the control below. It takes effect immediately and is remembered in this browser.

You can also turn on Global Privacy Control in your browser or a browser extension, which opts you out here and signals your preference to every site that honors it.

4. Payment Processing

Payments are processed by Stripe, Inc., a PCI-DSS compliant payment processor. When you make a payment, your card and billing details are submitted directly to Stripe and handled under Stripe’s privacy policy. We receive limited information from Stripe (such as the last four digits of your card, payment status, and billing metadata) to manage invoices and our financial records. We do not store complete payment card numbers.

5. How We Share Information (Service Providers)

We do not sell your personal information. We share information only with trusted service providers who process data on our behalf and under contract, including:

• Stripe for payment processing;
• Matomo (self-hosted) for website analytics;
• Directus for content management, used to store project and site content; and
• Hosting, email, and infrastructure providers necessary to operate the Services.

We may also disclose information when required by law, to protect our rights, or in connection with a business transfer such as a merger or acquisition.

6. Data Retention

We retain personal information for as long as necessary to provide the Services, maintain business and financial records, resolve disputes, and comply with our legal obligations. When information is no longer needed, we delete or anonymize it. Retention periods for tax and financial records are governed by applicable law in [STATE/JURISDICTION].

7. Your Privacy Rights

Depending on where you live, you may have rights under laws such as the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA), including the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate information;
• Request deletion of your information;
• Object to or restrict certain processing;
• Request a portable copy of your information; and
• Opt out of the “sale” or “sharing” of personal information (note: we do not sell personal information).

To exercise any of these rights, contact us at mike@analogelk.com. We will not discriminate against you for exercising your rights, and we will respond within the timeframes required by applicable law.

8. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect your information, including encrypted connections (HTTPS), access controls on the client portal, and reliance on PCI-compliant payment infrastructure. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

9. Children’s Privacy

Our Services are intended for businesses and individuals aged 18 and older. We do not knowingly collect personal information from children under 13 (or the minimum age in your jurisdiction). If you believe a child has provided us information, please contact us so we can delete it.

10. International Visitors

We operate from [STATE/JURISDICTION], United States. If you access the Services from outside the United States, you understand that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes may be communicated through the Services or by email. Your continued use of the Services after an update constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at:

• Email: mike@analogelk.com
• Entity: [LEGAL ENTITY NAME]
• Mailing address: [MAILING ADDRESS]

See also our Terms of Service.