Privacy Policy

1. Introduction

Stormglass Agency ("Stormglass," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [insert website URL], engage our services, or otherwise interact with us (collectively, the "Services").

By using our Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

This policy is designed to comply with applicable data protection laws, Florida Digital Bill of Rights, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and other U.S. state privacy laws including those of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Delaware, New Jersey, New Hampshire, Minnesota, Maryland, and Rhode Island.

2. Information We Collect

2.1 Information You Provide to Us

We collect information you voluntarily provide, including:

Contact details: name, email address, phone number, mailing address, company name, and job title.
Account information: username, password, and profile preferences if you create an account.
Communications: the contents of messages, inquiries, project briefs, attachments, and other materials you send to us.
Business and project information: details about your organization, marketing goals, brand assets, content, and other materials you share in connection with our agency services.
Payment information: billing address and payment details (processed by our third-party payment processors; we do not store full payment card numbers).
Recruitment information: if you apply for a role with us, your resume, cover letter, work history, and references.
Marketing preferences: your choices regarding newsletters, event invitations, and other communications.

2.2 Information Collected Automatically

When you interact with our Services, we automatically collect:

Device and connection data: IP address, browser type and version, operating system, device identifiers, and language preferences.
Usage data: pages visited, referring and exit URLs, time spent on pages, clickstream data, and interactions with content.
Location data: approximate location derived from your IP address.
Cookies and similar technologies: as described in Section 7 below.

2.3 Information From Third Parties

We may receive information about you from:

Social media platforms when you interact with our pages or content.
Analytics and advertising providers.
Business partners, service providers, and publicly available sources.
Recruitment platforms (if you apply for a role).

3. How We Use Your Information

We use personal information for the following purposes:

To provide, operate, and deliver our agency services.
To respond to your inquiries, proposals, and requests.
To manage client relationships, contracts, billing, and accounts.
To improve, personalize, and develop our Services and offerings.
To send administrative communications (service updates, security alerts, policy changes).
To send marketing communications where permitted by law and consistent with your preferences.
To conduct analytics, research, and measure the effectiveness of our content and campaigns.
To protect the security and integrity of our Services and prevent fraud or abuse.
To comply with legal obligations and enforce our terms and agreements.
To evaluate job applications and manage recruitment.

We do not use personal information for automated decision-making that produces legal or similarly significant effects without appropriate safeguards.

4. How We Share Your Information

We do not sell personal information in the traditional sense. We share information only as described below:

Service providers and processors: vendors that support our operations, including hosting, cloud storage, analytics, email delivery, CRM, payment processing, and customer support. These providers are contractually obligated to protect your information and use it only for the services they provide to us.
Professional advisors: lawyers, accountants, auditors, and insurers when reasonably necessary.
Business partners: when jointly delivering services or events, with notice to you.
Corporate transactions: in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case personal information may be transferred subject to standard confidentiality protections.
Legal and safety reasons: to comply with law, respond to lawful requests, enforce our agreements, or protect the rights, property, or safety of Stormglass, our clients, or others.
With your consent or at your direction.

Some U.S. state laws define "sale" and "sharing" broadly to include certain uses of cookies for cross-context behavioral advertising. To the extent any of our advertising or analytics practices constitute a "sale" or "sharing" under those laws, you can opt out as described in Section 9.

5. Cookies and Similar Technologies

We use cookies, pixels, web beacons, and similar technologies to operate our website, analyze usage, remember preferences, and deliver relevant content and advertising.

We use the following categories of cookies:

Strictly necessary cookies: required for the website to function.
Functional cookies: remember your preferences and settings.
Analytics cookies: help us understand how visitors interact with the site.
Advertising and targeting cookies: used to deliver and measure marketing campaigns, including across third-party sites.

Where required by law, we obtain your consent before placing non-essential cookies through our cookie banner. You can change your preferences at any time through our cookie settings tool or by adjusting your browser settings. We honor Global Privacy Control (GPC) signals where applicable.

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this policy, including to provide our Services, comply with legal, accounting, and reporting requirements, resolve disputes, and enforce our agreements. Specific retention periods depend on the nature of the data and the applicable legal requirements. When information is no longer needed, we securely delete or anonymize it.

7. Your Privacy Rights

9.1 Rights Under U.S. State Privacy Laws

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Delaware, New Jersey, New Hampshire, Minnesota, Maryland, Rhode Island, or another state with applicable privacy legislation, you may have the right to:

Know and access the categories and specific pieces of personal information we have collected about you.
Correct inaccurate personal information.
Delete personal information, subject to certain exceptions.
Receive a portable copy of your personal information.
Opt out of the sale or sharing of personal information and targeted advertising.
Opt out of certain profiling activities.
Limit the use and disclosure of sensitive personal information.
Be free from unlawful discrimination for exercising these rights.

California Shine the Light: California residents may request information about disclosures of personal information to third parties for their direct marketing purposes.

9.2 How to Exercise Your Rights

You may submit a request by:

Emailing us at [insert privacy email]
Writing to us at [insert mailing address]
Using our online request form at [insert link, if applicable]

We will verify your identity before responding and will respond within the timeframes required by applicable law. You may also designate an authorized agent to make a request on your behalf, subject to verification.

If we deny your request, you may appeal our decision by contacting [insert appeals email].

8. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. These include encryption in transit, access controls, employee training, and vendor due diligence. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If we become aware of a security incident affecting your personal information, we will notify you and applicable authorities as required by law.

9. Third-Party Links and Services

Our Services may contain links to third-party websites, products, or services that we do not control. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third party before providing personal information

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date above and, where required, provide additional notice (such as a banner on the website or an email notification). We encourage you to review this policy periodically.

This Privacy Policy is provided as a general template reflecting common privacy law requirements as of 2026. Privacy laws vary by jurisdiction and change frequently. You should have this policy reviewed by qualified legal counsel before publishing to ensure it accurately reflects your specific data practices and complies with all laws applicable to your business.