Privacy Policy

Your Privacy Matters to Us

At Bite Size Elephant, we believe privacy shouldn't require a law degree to understand. This policy explains how we collect, use, and protect your information in clear, bite-sized pieces. We're committed to transparency and giving you control over your data.

1. Information We Collect

What we collect depends on how you interact with us:

When you contact us:

• Name and email address
• Phone number (if provided)
• Company name and role
• Any information you include in your message

When you visit our website:

• IP address (automatically anonymized)
• Browser type and settings
• Pages visited and time spent
• Referring website
• General location (country/state level)

When you subscribe to our newsletter:

• Email address
• Name (optional but helpful for personalization)
• Subscription preferences
• Email engagement data (opens, clicks)

When you become a client:

• Business contact information
• Project-related communications
• Payment information (processed securely through third-party providers)
• Any data necessary for service delivery

2. How We Use Your Information

We use your data to deliver great service and improve our business:

Service delivery:

• Responding to inquiries and providing customer support
• Delivering consulting services and digital products
• Sending newsletters you've subscribed to
• Processing payments and maintaining records

Business improvement:

• Understanding how visitors use our website
• Analyzing which content resonates with our audience
• Improving our service offerings
• Ensuring website security and preventing fraud

Legal compliance:

• Meeting tax and accounting obligations
• Responding to legal requests (rare, but sometimes necessary)
• Enforcing our terms of service
• Protecting our intellectual property rights

3. Our Legal Basis for Processing (GDPR)

For our EU friends, here's why we process your data:

• Consent: For newsletter subscriptions and marketing communications
• Contract: To deliver services you've purchased
• Legitimate interests: For business analytics and improvement (balanced against your rights)
• Legal obligations: For tax records and compliance requirements

4. Technology We Use

Google Analytics 4

We use GA4 to understand website usage patterns. Key facts:

• IP addresses are automatically anonymized
• We've enabled privacy-focused settings
• Data is retained for 14 months
• You can opt-out using browser plugins

Kit (Email Marketing)

Our newsletter platform that:

• Stores subscriber information securely
• Tracks email engagement to improve content
• Provides easy unsubscribe options
• Complies with CAN-SPAM and GDPR requirements

HubSpot CRM

Helps us manage client relationships by:

• Organizing contact information
• Tracking project communications
• Providing secure data storage
• Enabling better customer service

5. Cookies and Tracking

We use cookies to make your experience better:

Essential cookies (Required for website functionality):

• Session management
• Security features
• Form submissions

Analytics cookies (Help us understand site usage):

• Google Analytics tracking
• Page visit patterns
• User journey analysis

Marketing cookies (Improve our outreach - only with consent):

• Conversion tracking
• Remarketing capabilities
• Cross-site analytics

Your control: You can manage cookies through your browser settings or our consent banner. Note that blocking essential cookies may limit website functionality.

6. Your Privacy Rights

You have control over your personal data:

• Access: Request a copy of data we hold about you
• Correction: Fix inaccurate information
• Deletion: Ask us to delete your data (with some legal exceptions)
• Portability: Receive your data in a common format
• Objection: Opt-out of certain processing activities
• Restriction: Limit how we use your data

For California residents (CCPA):

Additional rights to know what we collect, delete personal information, opt-out of "sales" (we don't sell data), and non-discrimination for exercising rights.

How to exercise rights:

Email privacy@bitesizeelephant.com with your request. We'll respond within 30 days (45 for complex requests).

7. Data Sharing and Third Parties

We don't sell your data. Period.

We share data only when necessary:

• Service providers: Companies that help us operate (hosting, email, payments)
• Professional advisors: Lawyers or accountants under confidentiality obligations
• Legal requirements: If required by law or to protect rights
• Business transfers: If we sell or merge our business (with notice to you)

International transfers: Some providers operate globally. We ensure appropriate safeguards through standard contractual clauses and privacy frameworks.

8. Data Security

We protect your data through:

• Encryption in transit and at rest
• Access controls and authentication
• Regular security assessments
• Employee training on data protection
• Incident response procedures

Your part: Please use strong passwords and notify us immediately of any suspected security issues.

9. Data Retention

We keep data only as long as necessary:

• Newsletter subscribers: Until you unsubscribe plus 6 months
• Client records: 7 years for tax and legal requirements
• Website analytics: 14 months
• Contact form inquiries: 3 years unless you become a client
• Payment records: 7 years per financial regulations

10. Children's Privacy

Our services are for businesses and professionals. We don't knowingly collect data from anyone under 18. If you believe we have children's data, please contact us immediately.

11. Updates to This Policy

We'll update this policy as our business and laws evolve. Material changes will be announced via:

• Website notice
• Email to active clients and subscribers
• 30-day advance notice for significant changes

12. Contact Us

Privacy questions or requests?

Email: privacy@bitesizeelephant.com
Data Protection Officer: Bill Thornton
Mailing Address:
Bite Size Elephant, LLC
2566 S Arlington Mill Dr Apt A
Arlington VA 22206

Response time: Within 30 days for most requests