Privacy Policy

Privacy Policy

Last updated: October 12, 2026

Overview

This Privacy Policy explains how Greenwich Web, a Westport Web brand (“the Company,” “We,” “Us,” or “Our”), located at 500 W Putnam Ave, Greenwich, CT 06830, collects, uses, discloses, and protects your personal information when you visit our website at greenwichwebdesign.com or use any of our web development, design, SEO, hosting, or digital consulting services (collectively, the “Service”).

We are committed to protecting your privacy and handling your data with transparency. By accessing or using our Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.

This policy applies to all visitors, users, clients, and anyone else who accesses or uses the Service.

Data We Collect

We collect only the data necessary to provide and improve our Service. The categories of personal information we may collect include:

Information You Provide Directly

  • Contact information: name, email address, phone number, mailing address
  • Business information: company name, job title, website URL, project requirements
  • Account credentials: username and password if you create an account
  • Communications: messages, inquiries, feedback, or other content you send to us via contact forms, email, or phone
  • Payment information: billing address and payment details when you purchase our services (payment card data is processed by our third-party payment processor and is never stored on our servers)

Information Collected Automatically

  • Device data: IP address, browser type and version, operating system, device type, screen resolution, and language preferences
  • Usage data: pages visited, time spent on pages, click patterns, referring URL, exit pages, and date/time of access
  • Location data: approximate geographic location derived from your IP address
  • Cookie and tracking data: information collected through cookies, web beacons, pixels, and similar technologies (see “Cookies & Tracking” below)

We do not collect sensitive personal information such as Social Security numbers, driver’s license numbers, biometric data, health information, racial or ethnic origin, religious beliefs, or sexual orientation.

How We Collect Data

We collect personal information through the following methods:

  • Contact and inquiry forms on our website
  • Email, phone, and direct communications when you reach out to us
  • Service agreements and onboarding when you become a client
  • Cookies, pixels, and analytics tools that track website activity automatically
  • Third-party platforms such as social media, advertising networks, or referral partners that may share data with us in accordance with their own privacy policies
  • Hosting and server logs that automatically record technical data when you access our website
How We Use Your Data

We use the personal information we collect for the following specific purposes:

  • Providing our services: to deliver the web development, design, SEO, hosting, and consulting services you have requested or contracted
  • Communicating with you: to respond to inquiries, send project updates, provide support, and deliver information you request
  • Processing payments: to invoice for services rendered and process transactions
  • Improving our Service: to analyze usage patterns, diagnose technical issues, and enhance website functionality and user experience
  • Marketing and outreach: to send you information about our services, promotions, or industry insights, only with your consent, and you may opt out at any time
  • Security and fraud prevention: to protect our Service, detect suspicious activity, and prevent unauthorized access or abuse
  • Legal compliance: to comply with applicable laws, regulations, legal processes, or enforceable governmental requests
  • Business operations: to manage our internal operations, including record-keeping, auditing, and contractual obligations

We will not use your personal information for purposes materially different from those described above without first notifying you and, where required by law, obtaining your consent.

Cookies & Tracking Technologies

We use cookies and similar technologies to collect information about your browsing activity on our Service. A cookie is a small data file stored on your device. You can control cookie preferences through your browser settings; however, disabling certain cookies may limit your ability to use some features of our Service.

Types of Cookies We Use

Strictly Necessary Cookies (session, required for site functionality). Essential for the website to function properly. These enable core features like page navigation, secure areas, and form submissions. They cannot be disabled without breaking core functionality.

Analytics Cookies (persistent, up to 24 months). Help us understand how visitors interact with our website by collecting anonymous usage data such as pages visited, time on site, and traffic sources. We use Google Analytics for this purpose. Data is aggregated and does not personally identify you.

Functional Cookies (persistent, up to 12 months). Remember your preferences, such as language settings, cookie consent choices, and previously submitted form data, so you don’t have to re-enter them on return visits.

Marketing Cookies (persistent, up to 12 months). Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns. These may be set by third-party advertising partners. You may opt out of these through your browser or through the links provided by the respective third parties.

Web Beacons and Pixels

We may use web beacons (also known as pixel tags or clear GIFs) in our emails and on our website. These are tiny transparent images that allow us to measure open rates, click-through rates, and general engagement. You can disable web beacons in emails by configuring your email client to not load remote images.

Third-Party Services

We use the following categories of third-party service providers to operate and improve our Service. These providers may have access to your personal information only as needed to perform their functions and are contractually obligated to protect your data:

  • Website hosting: our website is hosted on third-party servers that process and store data on our behalf
  • Analytics: Google Analytics and similar tools to understand website traffic and usage patterns
  • Payment processing: third-party processors that handle billing and payment transactions securely; we do not store your full payment card information
  • Email and communication: platforms used to send transactional emails, newsletters, and client communications
  • CRM and project management: tools used to manage client relationships, projects, and communications
  • Advertising: platforms that may serve targeted advertisements and track campaign performance

Each third-party provider operates under its own privacy policy. We encourage you to review their policies. We are not responsible for the privacy practices of third-party services.

When We Share Your Data

We do not sell, rent, or trade your personal information to third parties. We may share your data only in the following circumstances:

  • Service providers: with trusted third-party vendors who assist in operating our Service, as described in the “Third-Party Services” section above
  • Legal obligations: when required by law, subpoena, court order, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, the safety of others, or to investigate fraud
  • Business transfers: in connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, in which case your personal data may be transferred to the acquiring entity. We will notify you before your data becomes subject to a different privacy policy
  • With your consent: we may share your data for purposes not described in this policy if we obtain your explicit consent
  • Affiliates: with our affiliated entities, who are bound by the terms of this Privacy Policy

We do not share your data with third parties for their own direct marketing purposes without your explicit opt-in consent.

AI & Automated Tools

We may use artificial intelligence and automated tools in providing our services, including but not limited to content generation, SEO analysis, website performance optimization, and client communications. These tools may process data you provide or data collected automatically through the Service.

We do not use your personal data to train third-party AI models. Any AI tools used are employed solely to improve the quality and efficiency of the services we deliver to you. We do not make decisions that have legal or similarly significant effects on you based solely on automated processing without human review.

If you have questions about how AI tools are used in connection with your data, please contact us at the address listed below.

Data Retention

We retain your personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

  • Client data: retained for the duration of our business relationship and for up to five (5) years after the conclusion of services, as needed for legal, tax, and accounting obligations
  • Inquiry and contact form data: retained for up to two (2) years from the date of submission, unless a business relationship is established
  • Analytics and usage data: retained in aggregated, anonymized form for up to twenty-four (24) months
  • Marketing data: retained until you unsubscribe or request deletion

When personal data is no longer needed, we will securely delete or anonymize it. If deletion is not immediately possible (for example, because data is stored in backup systems), we will isolate and protect the data from further processing until deletion is feasible.

Data Security

We implement commercially reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:

  • SSL/TLS encryption for all data transmitted between your browser and our servers
  • Access controls limiting data access to authorized personnel on a need-to-know basis
  • Regular security assessments and monitoring of our systems
  • Secure storage of data on protected servers with appropriate firewall and intrusion detection systems
  • Third-party payment processing that is PCI-DSS compliant, so full payment card data is never stored on our systems

While we take data security seriously and employ industry-standard safeguards, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security and are not liable for any breach that occurs despite our reasonable security measures. In the event of a data breach that affects your personal information, we will notify you and the relevant authorities as required by applicable law.

Your Rights

Depending on your jurisdiction, you may have some or all of the following rights regarding your personal information:

  • Right to access: request a copy of the personal data we hold about you
  • Right to correction: request that we correct inaccurate or incomplete data
  • Right to deletion: request that we delete your personal data, subject to legal retention requirements
  • Right to restrict processing: request that we limit how we use your data
  • Right to data portability: request your data in a structured, machine-readable format
  • Right to object: object to processing of your data for marketing or other purposes
  • Right to withdraw consent: withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing
  • Right to opt out: opt out of the sale or sharing of your personal data, targeted advertising, or profiling

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within thirty (30) days, or as required by applicable law. We will not discriminate against you for exercising any of your privacy rights.

We may ask you to verify your identity before fulfilling your request to protect your personal information from unauthorized access.

California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information:

  • Right to know: you may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share your data
  • Right to delete: you may request deletion of your personal information, subject to certain exceptions
  • Right to correct: you may request correction of inaccurate personal information
  • Right to opt out: you may opt out of the “sale” or “sharing” of your personal information. We do not sell your personal information. If we engage in sharing for cross-context behavioral advertising, you may opt out by contacting us
  • Right to limit use of sensitive data: you may limit the use and disclosure of sensitive personal information to purposes necessary to provide the Service
  • Right to non-discrimination: we will not deny you goods or services, charge different prices, or provide a different quality of service because you exercised your CCPA rights

To submit a CCPA request, contact us at [email protected] or call 203-717-0769. You may also designate an authorized agent to make a request on your behalf, provided the agent has your written permission and can verify their identity.

In the preceding twelve (12) months, we have not sold personal information to third parties as defined under the CCPA.

Do Not Track Signals

Some web browsers transmit “Do Not Track” (DNT) signals. There is currently no uniform standard for how websites should respond to DNT signals. At this time, our Service does not respond to DNT signals. However, you can manage your tracking preferences through your browser settings and cookie controls as described in the “Cookies & Tracking” section above.

Where required by applicable state law, we honor opt-out preference signals such as the Global Privacy Control (GPC). If we detect a GPC signal from your browser, we will treat it as a valid opt-out request for the sale or sharing of personal information associated with that browser.

Children’s Privacy

Our Service is not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will take prompt steps to delete that information from our records.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at [email protected] so that we can take appropriate action.

International Data Transfers

Our Service is operated from the United States. If you access the Service from outside the United States, please be aware that your personal information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using the Service and providing your personal information, you consent to this transfer. We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

Third-Party Links

Our Service may contain links to websites, services, or applications operated by third parties. We are not responsible for the privacy practices of these third-party sites. We encourage you to review the privacy policy of any website you visit before providing any personal information. A link from our Service does not constitute endorsement or approval of the linked site’s privacy practices.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last updated” date at the top of this page and, where required by law, notify you via email or a prominent notice on our Service prior to the change becoming effective.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after the posting of changes constitutes your acceptance of those changes.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: