Policies

Who We Are

AND MKTG Blueprint is operated by AND MKTG, LLC, which is the data controller for personal data processed through this website.

Contact email: [email protected]
Address: 5146 Kane Springs Rd

What Data We Collect

We collect the following categories of personal data through this website:

Cookie consent preferences: your choices about which cookies and similar technologies you allow, including records of your consent status and preference settings (we use our own consent management system, Trustwards).

Device and technical information: IP address, browser type, device identifiers, and similar technical data needed to load and protect the website and to maintain basic technical records.

Contact and inquiry information: information you provide when you contact us about our marketing services, such as your name, email address, company/organization (if provided), and the content of your message.

Marketing email information: your email address and related preference information when you subscribe to receive marketing communications from us, and records of your subscription and opt-out status.

Payment and billing information: information needed to process payments for our services, such as billing contact details and payment-related information provided during checkout or invoicing (payment processing is handled through payment processors).

Usage data via analytics (with your consent): information about how you interact with the website, such as page views, clicks, and session information, collected using cookies or similar technologies when you choose to allow analytics.

Social media data: information associated with your interaction with our social media features on the website (for example, when you engage with embedded social media content), which may involve identifiers and interaction data depending on your settings and the social media platform.

Sources of data:
We collect data directly from you when you submit forms or contact us.
We collect some data automatically from your device when you use the website (such as IP address and browser information).
We collect data from cookies and similar technologies for non-essential purposes only when you provide consent through our cookie settings.

Whether you must provide data:
Some information is necessary to respond to your requests and provide our services (for example, contact details and payment-related information). Analytics, advertising-related tracking, and marketing communications are optional and depend on your choices, including your cookie and marketing preferences.

How We Use Your Data

We use your personal data for the purposes below, and we rely on the legal basis listed for each purpose (depending on your location and the nature of the processing):

Providing our marketing services and managing our client relationship (contract).

Responding to inquiries and communicating with you about our services, including providing quotes or service information you request (contract).

Processing payments and billing for our services (contract).

Sending marketing emails and promotional communications (consent). You can unsubscribe at any time using the link in the email or by contacting us.

Collecting website analytics to understand how visitors use our website and to improve performance and content (consent).

Advertising and marketing tracking to measure and improve our marketing and advertising activities (consent).

Who We Share Your Data With

We share personal data only as needed to operate this website and provide our marketing services. Depending on your interactions with us and your choices, recipients may include:

Payment processors: to process payments and handle billing-related transactions. These providers process personal data according to their own privacy policies and security practices.

Email service providers: to send marketing emails and manage subscription preferences. These providers process personal data according to their own privacy policies.

Analytics services and advertising networks (only when you consent): to collect analytics and support advertising/marketing measurement. These providers process personal data according to their own privacy policies.

Social media platforms: when social media features are used on the website, the relevant platform may receive data as part of providing the feature. Their processing is governed by their privacy policies and your settings with those platforms.

Consent management (Trustwards): we use our own consent management system (Trustwards) to record and manage your cookie preferences. This data is processed internally and not shared with third parties.

International Data Transfers

We may transfer personal data to countries outside your country of residence depending on the service providers used for email delivery, analytics, advertising, payment processing, or social media features. Some providers in these categories may be located outside the EU/EEA, including in the United States.

When international transfers are required for EU/EEA/UK/Swiss users, we use appropriate safeguards designed to protect your personal data, such as Standard Contractual Clauses approved by the European Commission, and we apply additional measures where appropriate based on the circumstances of the transfer.

Our consent management system (Trustwards) is based in Spain (EU), so consent data recorded through Trustwards is not transferred internationally.

How Long We Keep Your Data

Retention periods depend on the type of data and why we process it. Each category below has its own retention period:

User-provided retention policy: As long as necessary.

Cookie consent records: 10 years (to demonstrate compliance and address potential claims within legal limitation periods).

Security logs and technical records: 12 months.

Tax and accounting records: 10 years (legal requirement).

Analytics data: until consent is withdrawn or according to the analytics tool retention settings.

Advertising/marketing tracking data: until consent is withdrawn.

Marketing email data: until consent is withdrawn or user unsubscribes.

Social media integration data: until consent is withdrawn.

Your Rights

Your rights depend on where you live. You may have the following rights, subject to applicable law and certain exceptions:

Access and information: the right to request access to the personal data we hold about you and to receive information about how we use it.

Correction: the right to correct inaccurate or incomplete personal data.

Deletion: the right to request deletion of your personal data in certain circumstances.

Restriction: the right to request that we limit how we process your personal data in certain circumstances.

Portability: the right to receive certain personal data in a structured, commonly used format and to request transfer to another organization where legally available.

Objection: the right to object to certain processing, including processing based on legitimate interests where applicable, and to object to certain direct marketing.

Withdraw consent: where we rely on consent (for example, analytics cookies, advertising/marketing tracking, and marketing emails), you can withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

Automated decision-making: the right not to be subject to automated decision-making or profiling that produces legal effects or similarly significantly affects you.

How to exercise your rights: contact us at [email protected]. We may need to verify your identity before completing your request.

Response timing: we aim to respond within one month for requests under GDPR and LGPD, within 45 days for CCPA/CPRA requests (with the possibility of an additional 45 days where permitted and with notice), and within 30 days for requests under PIPEDA, as applicable.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at [email protected].

Data Security

We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we take reasonable precautions to reduce risk.

Data Breach Notification

We maintain procedures to detect, report, and investigate security incidents. If a personal data breach occurs that poses a high risk to your rights and freedoms, we will notify you without undue delay and provide information about the nature of the breach, the likely consequences, and the measures taken or proposed to address it. If you suspect a security issue, please contact us at [email protected].

How to Lodge a Complaint

We encourage you to contact us first at [email protected] so we can try to resolve your concern.

If you are located in the EU/EEA, the UK, or Switzerland, you have the right to lodge a complaint with the competent authority in your jurisdiction.

California consumers may contact the California Privacy Protection Agency (CPPA): https://cppa.ca.gov/

Brazilian data subjects may contact the ANPD (Autoridade Nacional de Proteção de Dados): https://www.gov.br/anpd/

Canadian individuals may contact the Office of the Privacy Commissioner of Canada (OPC): https://www.priv.gc.ca/

Updates to This Policy

We review and update this Privacy Policy periodically. The “Last updated” date at the top of this policy indicates when it was last changed. If we make significant changes, we will provide notice on the website or by email where appropriate. Changes take effect from the date indicated at the top of this policy. Where processing is based on consent, we will request new consent when required.

Contact Us

Email: [email protected]
Address: 5146 Kane Springs Rd
Data Controller: AND MKTG, LLC

California Privacy Rights (CCPA/CPRA)

This section applies to California consumers and provides our Notice at Collection and additional disclosures.

Categories of personal information collected in the last 12 months:
Identifiers (such as name, email address, IP address, and online identifiers).
Internet or other electronic network activity information (such as interactions with our website, including analytics data when you consent).
Commercial information related to transactions (such as billing details and payment-related information needed to process purchases of our services).
Inferences drawn from online activity to understand engagement and improve marketing effectiveness (when you consent to analytics and advertising/marketing tracking).

Business or commercial purposes for collection and use:
Providing and operating our marketing services, responding to requests, and communicating with you.
Processing payments and managing billing.
Marketing and advertising measurement and website analytics (when you choose to allow these activities).
Maintaining the security and integrity of our website and systems.

Sale and sharing of personal information:
We do not sell personal information.
We do not share personal information for cross-context behavioral advertising.

Your CCPA/CPRA rights:
Right to know what personal information we collect, use, disclose, share, or sell.
Right to delete personal information, subject to exceptions.
Right to correct inaccurate personal information.
Right to opt-out of the sale or sharing of personal information through a “Do Not Sell or Share My Personal Information” request. Because we do not sell or share for cross-context behavioral advertising, this right is provided for completeness and future-proofing; you may still submit a request at any time.
Right to limit the use and disclosure of sensitive personal information. We do not use or disclose sensitive personal information for purposes that require offering a right to limit beyond what is permitted by law; you may contact us if you have questions.
Right to non-discrimination for exercising your rights.

How to submit a request: email us at [email protected] and describe your request. If you use an authorized agent, we may request proof of authorization and may also verify your identity directly with you.

Verification: we will take reasonable steps to verify your identity based on the nature of the request and the sensitivity of the information involved.

Response timing: we respond within 45 days, and we may extend by an additional 45 days when reasonably necessary, with notice.

Global Privacy Control: where required, we honor Global Privacy Control (GPC) signals as valid opt-out requests.

Brazilian Data Protection (LGPD)

This section applies to individuals in Brazil.

Legal bases: depending on the context, we process personal data to perform contracts and provide our services, and we process certain data based on your consent (for example, marketing emails and non-essential cookies used for analytics and advertising/marketing tracking).

Your rights under the LGPD include: confirmation of whether we process your data and access to it; correction of incomplete, inaccurate, or outdated data; anonymization, blocking, or deletion of unnecessary or excessive data or data processed in non-compliance with the law; portability where applicable; deletion of personal data processed with consent; information about sharing; and the right to withdraw consent.

You also have the right to petition the ANPD regarding our processing of your personal data.

Data Protection Officer contact: [email protected].

Canadian Privacy Rights (PIPEDA)

This section applies to individuals in Canada.

Accountability: we are responsible for personal information under our control and have practices designed to help protect it and ensure it is handled appropriately.

Meaningful consent: we seek meaningful consent for the collection, use, and disclosure of personal information, including through clear explanations in this policy and through cookie choices for non-essential cookies. You can withdraw consent, subject to legal or contractual restrictions and reasonable notice.

Access and correction: you may request access to your personal information and challenge the accuracy and completeness of the information, and we will correct it as appropriate.

How to withdraw consent: you can withdraw consent for marketing emails by using the unsubscribe link or by contacting us at [email protected]. You can also update cookie preferences through our cookie settings.

Complaints: you may contact us first at [email protected]. You also have the right to complain to the Office of the Privacy Commissioner of Canada (OPC): https://www.priv.gc.ca/