Effective Date: [November 11, 2025]
Company: McNealy Studios, Co. (“McNealy Studios,” “we,” “us,” or “our”)
Contact: info@mcnealystudios.com · 840 36th Street • West Palm Beach FL, 33407

1) Scope

This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you interact with us online or offline, including through our websites, contact forms, proposals, billing portals, and during delivery of our services (web design, web development, branding/brand development, print design, graphic design, and related consulting).

2) Information We Collect

• Identity & contact data: name, company, role, email, phone, mailing address.
• Business/project data: brand assets, creative briefs, content, credentials you choose to share for implementation (e.g., CMS or hosting access).
• Transaction data: invoices, payments (processed by third-party providers— we do not store full payment card numbers).
• Technical data: IP address, device/browser type, pages viewed, and similar analytics (via cookies/SDKs; see “Cookies & similar technologies”).
• Marketing preferences and communications.

3) How We Use Information

• To provide and improve services (strategy, design, development, brand and print production, support).
• To communicate about proposals, projects, invoices, status updates, and support.
• For accounting, fraud prevention, and security.
• For marketing (with consent where required) and to analyze website performance.
• To comply with legal obligations and enforce agreements.
•  

4) Legal Bases (EEA/UK visitors)

Where GDPR/UK GDPR applies, we process personal data on the following bases: contract (to deliver services), legitimate interests (e.g., site security, B2B marketing with safeguards), consent (e.g., non-essential cookies/newsletters), and legal obligation.

5) Cookies & Similar Technologies

We use first-party and third-party cookies and analytics tools to operate our site, measure performance, and improve user experience. Non-essential cookies will be activated based on your consent where required. You can change preferences via your browser or our cookie banner (if shown). See our Cookie Notice for details on types, purposes, and retention.

6) Sharing & Disclosure

We do not sell personal information. We share data only with:

• Service providers/“processors” under contract (hosting, cloud storage, analytics, email/SMS tools, payment processors, print partners, and vetted subcontractors) strictly for our business purposes.
• Clients’ platforms when implementing your project at your direction (e.g., publishing a site, connecting analytics, creating ad accounts).
• Legal/Compliance recipients if required by law or to protect rights, safety, or security.
•  

7) Data Retention

We retain personal information only as long as needed for the purposes above, to meet legal/accounting requirements, or to resolve disputes. Project files may be archived for reference and contract enforcement.

8) International Transfers

Where data is transferred outside your country (e.g., to U.S.-based providers), we use appropriate safeguards such as Standard Contractual Clauses or similar mechanisms, as applicable.

9) Security

We employ administrative, technical, and physical measures appropriate to the nature of the data (access controls, encryption in transit where supported, least-privilege credentials, vendor due diligence). No method of transmission or storage is 100% secure.

10) Your Rights

Your privacy rights depend on your location. Subject to limits, you may have the right to access, correct, delete, or restrict certain processing, object to processing, or withdraw consent.

• California (CCPA/CPRA): Residents have rights to know/access, delete, correct inaccurate data, opt out of sale or sharing (for cross-context behavioral advertising), and to non-discrimination. We do not sell personal information or share it for cross-context behavioral advertising. Submit requests via [link/email]. (Summarizes current California rights expanded by CPRA effective 2023. California DOJ)
• EEA/UK (GDPR): Individuals have rights to access, rectification, erasure, restriction, data portability, and objection; they may lodge a complaint with a supervisory authority. Contact us to exercise rights. (GDPR essentials for a compliant privacy notice. GDPR Advisor)

11) Children’s Privacy

Our services target business customers and are not intended for children under 16. We do not knowingly collect data from children.

12) Marketing Communications

We may send service and project emails. We send marketing emails only with consent where required; you can unsubscribe at any time via the link in the message or by contacting us.

13) Client Data We Process on Your Behalf

If we handle personal data as a processor for your project (e.g., installing analytics pixels, managing mailing lists, hosting or maintaining a website), we process that data only under your instructions and our agreement. You are responsible for providing any required notices/consents to your end users.

14) Third-Party Links & Tools

Our site may link to third-party sites or embed third-party tools (e.g., fonts, video, analytics). These third parties have their own privacy policies; please review them.

15) Changes to This Policy

We may update this Privacy Policy from time to time. The “Effective Date” will be revised accordingly. Material changes will be posted on this page.

16) How to Contact Us

Questions or requests about this Policy or your personal information:
Email: info@mcnealystudios.com
Mail: McNealy Studios, Co. – 840 36th Street • West Palm Beach FL 33407