Information We Collect
We collect information you provide directly (name, company, email, message body) when you submit a form, email us, or sign up for the newsletter. We collect basic technical data automatically: IP address, user agent, page URLs, and referrer headers.
How We Use It
We use your information to respond to inquiries, deliver requested resources (e.g. the Ops Audit framework), send the newsletter you subscribed to, run anonymized analytics, and improve the site. We don't sell or rent your data. Period.
Cookies & Tracking
We use first-party cookies for session continuity and a single privacy-preserving analytics tool. If you arrive from a link in an email we sent you, a first-party cookie (circl_px, up to 12 months) remembers that context so pages can greet your company by name on return visits; dismissing that banner sets a second cookie that hides it, and neither is shared with anyone. We do not use third-party advertising trackers, retargeting pixels, or fingerprinting.
Third-Party Services
We use the following processors:
- Google Analytics: aggregate, anonymized traffic analytics.
- Cloudflare / Railway: application hosting and edge delivery.
- SendGrid: transactional email (form responses, newsletter).
Each is bound by its own privacy policy and processes data on our behalf under standard data-processing terms.
Your Rights
GDPR (EEA/UK residents): you have the right to access, correct, delete, restrict processing of, port, and object to processing of your personal data. You may withdraw consent at any time.
CCPA / CPRA (California residents): you have the right to know what personal information we collect, request deletion, opt out of "sale" or "sharing" (we don't sell or share), and not be discriminated against for exercising these rights.
To exercise any right, email privacy@circlstdio.io. We respond within 30 days.
Data Retention
We retain inquiry and project data for as long as the relationship is active plus 24 months for legal and tax purposes. Newsletter data is retained until you unsubscribe. Analytics data is retained for 14 months.
Security
We use TLS in transit, encryption at rest where supported by the underlying processor, role-based access on internal systems, and quarterly access reviews. See our security page for more.
Children
The site is not directed to children under 16. We do not knowingly collect data from children.
Changes
We may update this policy. Material changes will be posted here with a revised "last updated" date. Continued use after a change constitutes acceptance.
Contact
Questions, requests, or complaints: privacy@circlstdio.io
The Circle Studios · Las Vegas, NV · United States