1. Introduction
chgroupmedia ("we", "our", or "us") is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or engage our services.
By using our website or services, you agree to the collection and use of information in accordance with this policy. We comply with applicable United States privacy laws, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), as well as the GDPR where applicable to our global clients.
2. Information We Collect
2.1 Information You Provide
- Contact & enquiry data — name, email address, phone number, company name, and project details submitted via our contact forms.
- Account data — if you create a client account, we collect login credentials and billing details.
- Communications — emails, messages, and other correspondence you send us.
2.2 Automatically Collected Information
- Log data — IP address, browser type, referring URLs, pages viewed, and timestamps.
- Cookies & tracking — we use cookies for session management and analytics (see Section 7 below).
- Analytics — we use Vercel Analytics (privacy-focused, no personal data sold) to understand traffic patterns.
3. Legal Basis for Processing (GDPR / UK GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following lawful bases:
- Contractual necessity — to provide services you have requested or agreed to.
- Legitimate interests — to improve our website, prevent fraud, and communicate with clients.
- Consent — for optional communications and certain cookies (you may withdraw consent at any time).
- Legal obligation — where we are required to process data to comply with applicable law.
You have the right to object to processing based on legitimate interests. To exercise this right, contact privacy@chgroupmedia.com.
4. How We Use Your Information
We use the information we collect to:
- Respond to enquiries and deliver requested services.
- Process payments and send invoices.
- Send project updates, proposals, and administrative communications.
- Improve our website, services, and overall user experience.
- Comply with legal obligations and enforce our agreements.
- Protect against fraudulent or illegal activity.
We do not sell your personal information to third parties for their direct marketing purposes.
5. Sharing of Information
We may share your personal information with:
- Service providers — trusted third-party partners who assist in operating our business, including: Stripe (payment processing), Vercel (website hosting and analytics), and Google Workspace (email and communication). Each provider is bound by a Data Processing Agreement.
- Legal and regulatory authorities — when required by law, subpoena, or other legal process.
- Business transfers — in connection with a merger, acquisition, or sale of all or a portion of our assets.
6. International Data Transfers
Your information may be transferred to and maintained on computers located outside your jurisdiction. Where we transfer data from the EEA or UK to a third country, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission or other appropriate safeguards.
7. Cookies and Tracking
We use the following categories of cookies:
- Essential cookies — required for the website to function.
- Analytics cookies — used to understand visitor interaction (e.g., Vercel Analytics).
- Preference cookies — used to remember your settings and choices.
You can instruct your browser to refuse all cookies. A cookie consent mechanism is presented on your first visit.
8. California Privacy Rights (CCPA / CPRA)
If you are a California resident, you have the following rights:
- Right to Know — request disclosure of what personal information we collect and use.
- Right to Delete — request deletion of your personal information.
- Right to Opt-Out — we do not sell personal data, but you have the right to opt-out if we did.
- Right to Correct — request correction of inaccurate personal information.
- Right to Non-Discrimination — we will not discriminate against you for exercising these rights.
9. EEA & UK Data Subject Rights
If you are located in the EEA or UK, you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing. To exercise these rights, contact privacy@chgroupmedia.com.
10. Data Security
We implement industry-standard security measures, including TLS encryption in transit and AES-256 encryption at rest. In the event of a data breach, we will notify affected individuals as required by law.
11. Data Retention
We retain your personal information only for as long as necessary. Client project data is typically retained for 7 years following project completion for commercial and tax purposes.
12. Children's Privacy (COPPA)
Our services are not intended for use by children under the age of 13. We do not knowingly collect personally identifiable information from children under 13.
13. Changes to This Policy
We may update our Privacy Policy from time to time. For material changes, we will notify you by email and by posting the revised policy on our website.
14. Contact Us
If you have any questions about this Privacy Policy, please contact our Privacy Officer:
- Email: privacy@chgroupmedia.com
- Address: chgroupmedia, 17 Burston St # 1 Hempstead, NY 11550