Privacy Policy

1. Who this policy covers

This Privacy Policy describes how Andrew Nave, Ltd. ("Andrew Nave," "we," "us," or "our"), a growth and marketing-technology practice based in Loveland, Colorado, handles personal information collected through this website, andrewnave.com (the "Site"), and through related communications such as our contact form. By using the Site, you acknowledge the practices described here.

This policy applies to the Site itself. When we work with clients, any personal data we process on their behalf is handled under that client's instructions and agreements, and the client's own privacy policy governs that data.

2. Information we collect

Information you provide

When you submit the contact form or otherwise reach out, we collect the information you choose to give us, typically your name, email address, company, and the contents of your message. We use this to respond to you and to evaluate whether and how we can work together.

Information collected automatically

When you visit the Site, certain information is collected automatically by us and by our service providers, including:

• Device and connection data such as IP address, browser type, operating system, and device identifiers.
• Usage data such as the pages you view, the links you click, referring and exit pages, and the dates and times of your visits.
• Approximate location derived from your IP address.
• Cookie and similar identifiers, as described in the next section.

We use Google Analytics 4, deployed through Google Tag Manager, to understand Site usage in aggregate. Our Site is delivered through Cloudflare, which processes connection data to provide security, performance, and content delivery, and we use Cloudflare Turnstile on our contact form to reduce spam and abuse.

3. Cookies and tracking technologies

Cookies are small files stored on your device. We and our service providers use cookies and similar technologies such as pixels, tags, local storage, and device fingerprinting signals to operate the Site, remember preferences, measure performance, and support the visitor identification described below. These fall into a few categories:

• Strictly necessary: required for the Site to function and to keep it secure.
• Analytics: help us understand how the Site is used so we can improve it.
• Identification and marketing: support the visitor identification and outreach described in the next section.

You can control cookies through your browser settings, and you can opt out of several of these technologies using the methods in Your choices and opt-outs.

4. Visitor identification (identity resolution)

Using a pixel and related technologies, together with third-party data providers and identity graphs, we may match the signals collected from your visit (such as IP address, device and cookie identifiers, and on-Site activity) to identifying information about you or your organization. This information can include your name, business email address, employer, job title, professional profile, and company details.

We use this primarily in a business-to-business context to understand which companies and roles are engaging with the Site, to assess whether we may be a fit, and to conduct relevant outreach about our services. We do not use it to make decisions that produce legal or similarly significant effects about you, and we do not knowingly use it to identify individuals in a purely personal capacity.

Because this involves obtaining personal information from third-party sources and may involve cross-context behavioral data, some state privacy laws may treat it as a "sale," "sharing," "targeted advertising," or "profiling." Where those laws apply, we honor the opt-out and other rights described in Your choices and opt-outs and Your privacy rights. If you do not want to be identified, you can opt out using the methods below, and we will stop associating your visits with identifying information.

5. How we use information

We use the information described above to:

• Operate, secure, maintain, and improve the Site.
• Respond to your inquiries and communicate with you about our services.
• Measure and analyze how the Site is used.
• Identify which companies and roles engage with the Site and conduct relevant business-to-business outreach.
• Detect, prevent, and address fraud, abuse, security issues, and technical problems.
• Comply with legal obligations and enforce our terms.

Where required by law, we rely on your consent, our legitimate interests in operating and growing our practice, the need to take steps at your request before entering an engagement, and compliance with legal obligations as the bases for processing.

6. How we share information

We do not sell your personal information for money. We share information in the following ways:

• Service providers: companies that perform functions on our behalf, including hosting and content delivery (Cloudflare), analytics and tag management (Google), email delivery, anti-spam (Cloudflare Turnstile), and our visitor identification provider. They may process your information only to provide services to us.
• Data partners for identity resolution: as described in section 4, we exchange certain identifiers with third-party data providers to match visits to identifying information. Under some laws this may be considered selling or sharing, and you may opt out.
• Legal and safety: when we believe disclosure is reasonably necessary to comply with law, enforce our agreements, or protect the rights, property, or safety of any person.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

7. Your choices and opt-outs

You have several ways to control how your information is collected and used on this Site:

• Opt out of visitor identification: send a request through our contact form asking to opt out of identity resolution. Tell us the email address or IP range you want excluded where possible, and we will instruct our provider to stop associating your visits with identifying information and to suppress your record.
• Global Privacy Control and browser signals: we treat a recognized opt-out preference signal, such as Global Privacy Control (GPC), as a valid request to opt out of the sale or sharing of personal information and targeted advertising for that browser. You can enable GPC through a supporting browser or extension.
• Cookies: most browsers let you block or delete cookies and clear local storage. Doing so may affect how the Site works.
• Analytics: you can opt out of Google Analytics across sites using Google's browser add-on at tools.google.com/dlpage/gaoptout.
• Marketing communications: if we contact you, you can ask us to stop at any time by replying to that message or by using our contact form, and we will honor the request.

8. Your privacy rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• The right to know or access the personal information we hold about you.
• The right to correct inaccurate personal information.
• The right to delete your personal information.
• The right to opt out of the sale or sharing of personal information and of targeted advertising or profiling.
• The right to data portability.
• The right not to be discriminated against for exercising these rights.

Residents of California (under the CCPA as amended by the CPRA), Colorado (under the Colorado Privacy Act), and other states with comparable laws may exercise these rights. To make a request, use our contact form and tell us what you would like to do. We will verify your request, typically by confirming details associated with your information, and respond within the timeframes required by applicable law. You may use an authorized agent where the law permits. If we decline a request, you may appeal by replying to our response; where required, we will tell you how to contact your state attorney general if you disagree with the outcome.

If you are in a region with data protection laws such as the EEA or UK and believe we process your personal data, you may also have the right to object to processing, withdraw consent, and lodge a complaint with your supervisory authority.

9. Data retention

We keep personal information only as long as needed for the purposes described in this policy: to respond to and manage inquiries, to maintain analytics and business records, to conduct and document outreach, and to meet legal, accounting, or reporting requirements. When information is no longer needed, we delete it or de-identify it. Retention periods vary by data type and by our service providers' own retention settings.

10. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Children's privacy

The Site is intended for businesses and professionals and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above, and material changes will be reflected on this page. Your continued use of the Site after an update means you accept the revised policy.

13. Contact us

If you have questions about this policy, want to exercise a privacy right, or want to opt out of visitor identification, please reach us through our contact form. We are based in Loveland, Colorado, United States, and we will respond as promptly as we can, within the timeframes required by applicable law.