Privacy Policy

1. Information you give us

When you use our contact form, we collect the details you choose to provide:

If you book a call, your booking details are collected by our scheduling provider (see Section 4).

2. Information collected automatically

We use Google Analytics 4 to understand how visitors use our site: pages viewed, time on site, approximate location (city/region), device and browser type, how you arrived at our site, scrolls and outbound link clicks, and interactions such as submitting the contact form, choosing a portfolio tab, or clicking a booking link. Google Analytics uses cookies and similar technologies to do this. We use this information only in aggregate to improve our website and services; we do not use it to identify you personally.

You can opt out of Google Analytics across all websites with Google’s browser add-on, or block cookies in your browser settings.

3. How we use your information

We do not sell or rent your personal information.

4. Services we rely on

We share information only with providers that help us run our business, and only as needed:

Some portfolio images on our site are loaded from Behance (Adobe) and derekrobinson.tech, and icons from cdnjs (Cloudflare). When your browser loads that content, those services may receive standard technical information such as your IP address. Each provider handles data under its own privacy policy.

5. Your project files and AI

We use our own privately hosted AI tools in parts of our design process. Because these tools run on our own systems, files and information you share with us for a project are not sent to outside AI services. Final design decisions are always made by our designers.

6. How long we keep information

We keep inquiry and client information as long as needed to respond to you, deliver our services, and meet legal, tax, and accounting requirements. If you don’t become a client, we periodically delete old inquiries. Google Analytics data is kept according to the retention period set in our Analytics account.

7. Your choices and rights

You can ask us to access, correct, or delete the personal information we hold about you, or to stop sending you updates, by emailing info@heavybrea.net. Depending on where you live, you may have additional rights under local privacy laws; we will honor valid requests as required by law.

8. Visitors in the European Union and United Kingdom

If you are in the EU, EEA, or UK, the following also applies under the General Data Protection Regulation (GDPR) and UK GDPR. Paraggello LLC, doing business as Heavybrea Multimedia, is the controller of your personal data.

Why we use your information (legal bases):

Your rights: you may request access to, correction of, or deletion of your personal data; ask us to restrict or stop processing it; object to processing based on legitimate interests; receive your data in a portable format; and withdraw consent at any time (this does not affect processing that happened before you withdrew). To exercise these rights, email info@heavybrea.net. We will respond within one month. You also have the right to lodge a complaint with your local data protection authority.

International transfers: we are based in the United States, and our service providers (including Google) may process data in the United States and other countries. When your data is transferred outside the EU, EEA, or UK, it is protected by safeguards such as the European Commission’s Standard Contractual Clauses or the EU–U.S. Data Privacy Framework, as used by our providers.

9. Security

We use reasonable measures to protect your information, including encrypted (HTTPS) connections to our site. No method of transmission or storage is completely secure, so we can’t guarantee absolute security.

10. Children

Our site and services are intended for businesses and adults. We do not knowingly collect personal information from children under 13.

11. Changes to this policy

We may update this policy from time to time. The effective date above shows when it was last changed.