# Privacy Policy | ZINC

Source: https://www.zincdigital.co/privacy/

ZINC / privacy

# Privacy Policy

- [Home](https://www.zincdigital.co/)
- Privacy Policy

Last updated November 5, 2026

01

## Who this policy covers

ZINC Digital operates www.zincdigital.co. This policy explains information handled through this website, our inquiry process and related communications. It does not replace a client agreement or the privacy notice for a separate client website or application. Contact us about privacy at hello@zincdigital.co or ZINC Digital, 97 Oak Ave, Suite 7, Panama City, FL 32401.

- [Email ZINC about privacy](mailto:hello@zincdigital.co?subject=Privacy%20request)

02

## Information you provide

A proposal request asks for your name, company, work email, website, selected services, budget range, timeline and project message. A general message or content question asks for your name, email and message. We also record the page the form came from, submission time, message type, notification status and staff follow-up notes or status changes. Email correspondence contains what you choose to send. Please do not send passwords, payment-card details, sensitive personal information or information you are not authorized to share.

03

## How we use inquiries

We use this information to answer questions, understand proposed work, prepare and discuss proposals, coordinate follow-up and maintain our business records. Proposal requests and general messages are routed to Jaymie; article and editorial questions are routed to Wendy. Submitting an inquiry or message is a request for a response, not a purchase or a subscription to a marketing newsletter.

04

## Topic email subscriptions

Email how-to subscriptions are separate from project inquiries. On the Subscribe page, you choose the subjects you want. Constant Contact receives your email address and selected topic lists when you submit its form. We use these choices to send the corresponding how-tos; selecting one topic does not enroll you in unrelated topics. The form loads only when you choose Open signup form. Opening it connects to Constant Contact and Google reCAPTCHA, which receive technical information and can use cookies to operate the form and help prevent spam. This action does not enable the website’s optional analytics or advertising. Use the links in subscription emails to update your interests or unsubscribe, or contact us for help. Constant Contact maintains subscriber and opt-out records under its service practices.

- [Constant Contact customer contact data notice](https://www.constantcontact.com/legal/customer-contact-data-notice)
- [Google Privacy Policy](https://policies.google.com/privacy)

05

## Hosting and security information

The website is built with Astro and hosted on Vercel. Requests expose technical information such as your IP address, requested URL, browser and device details, timing and approximate location to the hosting infrastructure. Our submission handler uses an IP-derived hash to limit repeated requests, and Vercel country information to restrict inquiry forms to US connections. We also use field validation, a hidden spam field and origin checks. These controls reduce abuse; they cannot establish your physical location or prevent every unwanted submission.

06

## Inquiry storage and email

Supabase provides our inquiry database and private staff sign-in. Google Workspace handles inquiry notifications and email correspondence. Authorized ZINC staff use the private inquiry board to manage messages and follow-up. A message can therefore exist in both the database and an email mailbox. Visitors do not need an account; invited staff use authentication cookies for the private admin.

07

## Google measurement and advertising

With your permission for the relevant purpose, we use Google Analytics 4 and Google Ads tags on public pages to measure visits, traffic sources, service and article engagement, proposal-form steps and successful proposal submissions. Google can receive browser and device information, IP addresses, page and referrer information, cookie identifiers and campaign or ad-click parameters. Our own event code does not send the name, email or message you type in a form. Google uses cookies and similar identifiers for measurement and, depending on its settings and your choices, advertising and personalization. Search Console also supplies search-performance reports to staff; it is not an additional visitor tracking script.

- [How Google uses information from partner sites](https://policies.google.com/technologies/partner-sites)
- [Google advertising controls](https://myadcenter.google.com/)

08

## Microsoft Clarity and activity recordings

With your permission, we use Microsoft Clarity for behavior measurements, heatmaps and recordings of page activity to understand navigation and improve our website and marketing. It records interactions such as clicks, scrolling and page activity alongside technical and browser information. Clarity uses first- and third-party cookies and similar technologies; Microsoft can process this information for its own purposes, including advertising, under its Privacy Statement. Our inquiry and message forms are marked for Clarity masking. Masking is a safeguard, not a reason to enter sensitive information. Clarity is not loaded by our private admin pages.

- [Microsoft Privacy Statement](https://www.microsoft.com/en-us/privacy/privacystatement)
- [Clarity cookies](https://learn.microsoft.com/en-us/clarity/setup-and-installation/clarity-cookies)

09

## Cookies and your browser choices

Optional tracking is off until you choose. The privacy bar offers Accept all, Reject optional and Choose settings, with separate choices for website measurement, recording clicks and scrolling, and advertising. Open Privacy settings in the footer to change your choices at any time. We save your preference in this browser for 180 days; saving reloads the page. Missing, expired or unreadable permission keeps optional tracking off. If your browser blocks saving preferences, we cannot remember your choice. We do not load these tracking scripts when your browser sends Global Privacy Control or an enabled Do Not Track signal; those signals override a saved permission. Essential forms and staff sign-in remain available. When you allow the relevant purpose, Google and Microsoft can read or set cookies such as _ga, _clck and _clsk, subject to browser restrictions and provider settings. Our website passes purpose-specific consent signals to these providers. Turning tracking off prevents future loading on this browser; it does not erase information previously sent or remove existing provider cookies. You can also block or delete cookies through your browser. Contact us with a privacy or tracking objection.

- [Google Analytics browser opt-out](https://tools.google.com/dlpage/gaoptout)
- [Microsoft privacy controls](https://account.microsoft.com/privacy)

10

## Who receives information

We disclose information to the hosting, database, email, measurement and AI providers described in this policy as needed for those functions, and to authorized staff handling the work. Google and Microsoft may recognize a browser across sites through their services. Advertising-related disclosures of identifiers and browsing activity can be treated as sharing or targeted advertising under some privacy laws. We may also disclose information when legally required or to respond to fraud, security incidents or legal claims. Links to social networks and other websites take you to services with their own privacy practices.

11

## AI-assisted work

Staff use Claude, provided by Anthropic, for website and SEO review. That review sends collected public page content, retained research and aggregated Google Analytics and Search Console reports to Anthropic; the current SEO review does not include inquiry records, Clarity recordings or payment records. Separate private research tools can send staff-selected documents, excerpts and prompts to Anthropic or to OpenAI through our Codex research runner, depending on the staff selection. There is no public AI chat in the proposal form. Provider retention and data-use terms apply; we do not promise zero retention or that every AI feature has the same settings.

- [Anthropic commercial data practices](https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training)
- [OpenAI privacy policy](https://openai.com/policies/privacy-policy/)

12

## Quotes, invoices and payments

The public inquiry forms do not collect card numbers or take payment. If ZINC sends you a separate Square quote, invoice or payment link, information you enter in Square is handled through that service and its applicable notices. Any related client records and commercial terms are governed by the actual engagement and transaction. A website form submission does not itself create a Square transaction.

- [Square buyer privacy notice](https://squareup.com/us/en/legal/general/buyer-features)

13

## Retention and removal

We review records manually for removal under the following schedule: closed or unconverted inquiries and unaccepted quotes after 12 months from the last substantive contact; confirmed spam after 30 days; project-specific research after 90 days from confirmed project closure; completed or failed AI job copies after 30 days once the answer has been saved and reconciled; and inquiry anti-abuse hashes after 7 days. We retain essential agreements and accounting evidence for 7 years after the relevant fiscal year ends, and minimal privacy-request records for 24 months after resolution. Active work, applicable obligations and documented legal or security holds can require a different period for specific records. We review retention monthly and approve exact removal batches manually; these periods are review targets, not automatic deletion deadlines. Archiving is not deletion. Copies in email, security logs, AI providers and backups require separate handling under their actual retention settings. We do not promise immediate erasure from every provider or backup. Contact us to request an individual review sooner.

14

## Privacy requests and rights

Kirk is responsible for privacy requests. Email hello@zincdigital.co with the subject “Privacy request” and enough information to identify your interaction with ZINC. You can request access, correction or deletion, or object to a use of your information. We aim to acknowledge requests within 3 business days and resolve them within 30 calendar days; any earlier deadline required by applicable law takes priority. If a lawful extension or retention exception applies, we explain it. Depending on applicable law and its business thresholds, you may also have rights to a portable copy, restrictions, an opt-out of sale, sharing or targeted advertising, an appeal or a complaint to a privacy regulator. We may need to verify your identity or an authorized agent. Do not email an identity document unless we arrange a suitable method. An email request does not itself block tracking in your browser; use Privacy settings for that.

- [Send a privacy request](mailto:hello@zincdigital.co?subject=Privacy%20request)

15

## Location, children and security

ZINC is based in the United States, and our providers may process information in the United States and other countries. US-only inquiry submission controls do not prevent visitors elsewhere from reading the public site. The site is intended for business users, not children under 13; contact us if you believe a child has submitted personal information. We use HTTPS, restricted staff access and server-side validation, but no transmission or storage system can be guaranteed completely secure.

16

## Policy updates

The date above identifies the current version. We will post changes on this page and provide additional notice when required by applicable law. Privacy questions and requests can be sent to hello@zincdigital.co.

- [Website Terms & Conditions](https://www.zincdigital.co/terms/)