Privacy Policy
Effective Date: January 1, 2026 | Last Updated: October 2026
Summary at a Glance
Cole Don Media is dedicated to protecting your privacy. We collect minimal personal data necessary to design, develop, and deliver high-performance websites, brand identities, and SEO architectures. We never sell your personal information, monetize your data, or engage in invasive tracking. This Privacy Policy details our practices in compliance with the Colorado Privacy Act (CPA), California Consumer Privacy Act (CCPA/CPRA), GDPR, and applicable federal regulations.
1. Data Controller Information
Cole Don Media operates the website https://coledonmedia.com (the "Site") and acts as the Data Controller responsible for the processing of your personal information.
- Legal Entity: Cole Don Media
- Principal Studio Address: 10671 Upper Ridge Rd, Longmont, Colorado 80504, United States
- Principal Contact: Cole Don
- Email: hello@coledonmedia.com
- Text / SMS: Text Me Here: (970) 966-5480
2. Personal Information We Collect
We collect information that identifies, relates to, describes, or is reasonably capable of being associated with you. The categories of personal data we collect include:
A. Information You Provide Directly
When you submit an inquiry through our Contact Form, utilize our Project Estimator, schedule a consultation, or execute a service contract, we collect:
- Identity & Contact Data: Full name, business email address, telephone number, job title, and organization name.
- Project Specifications: Scope details, budgetary parameters, current digital assets, branding preferences, and domain information.
- Billing Information: Commercial billing address, VAT/tax IDs, and payment transaction metadata (all card processing is executed directly by PCI-DSS compliant third-party gateways; we never store raw card numbers).
B. Automatically Collected Technical Data
When you navigate our Site, our infrastructure automatically records technical access logs to ensure server stability, Core Web Vitals optimization, and cybersecurity:
- IP address and approximate geographic location (city/state level).
- Browser user-agent, operating system, device classification, and screen resolution.
- Referring URL, requested URI paths, HTTP response status, and timestamp of requests.
3. Purposes & Legal Bases for Processing
We process your personal information strictly for legitimate commercial and operational purposes, grounded in valid legal bases:
| Purpose of Processing | Data Categories | Legal Basis (GDPR / CPA) |
|---|---|---|
| Responding to project inquiries & consultations | Identity, Contact, Project Details | Pre-contractual steps / Legitimate interest |
| Executing design, development & SEO contracts | Identity, Billing, Project Assets | Performance of contract (Article 6(1)(b)) |
| Server security, DDoS prevention & firewall monitoring | IP Address, HTTP logs | Legitimate interest in cyber protection |
| Compliance with commercial accounting & tax laws | Transaction records, Invoices | Legal obligation (Article 6(1)(c)) |
4. Comprehensive Cookie & Tracking Policy
Our website is engineered for sub-second performance without invasive trackers or cross-site surveillance cookies. We categorize our cookie usage as follows:
1. Strictly Necessary & Security Cookies
Essential for fundamental site navigation, CSRF protection, and firewall verification. These cannot be disabled without breaking website functionality.
2. Performance & Cache Optimization
Utilized by LiteSpeed Server Cache to serve pre-rendered HTML copies and prevent server load. Contains no personally identifying information.
3. Analytics & Diagnostics (Google Site Kit)
Anonymized aggregated metrics (such as page view counts, session duration, and device types) to assess user experience and improve website architecture. All IP addresses are masked.
Managing Cookies: You can configure your browser to block or alert you about cookies. If you choose to disable cookies in your browser settings (Chrome, Safari, Firefox, Edge), the public pages of this website will remain fully readable.
5. Third-Party Service Providers
We partner with vetted, secure cloud infrastructure providers who act strictly under data processing agreements:
- Cloud Infrastructure & Hosting: Hostinger International Ltd. (High-performance NVMe cloud infrastructure).
- Analytics & Verification: Google LLC (Google Search Console, Google Site Kit, Google Analytics with IP anonymization).
- Payment Processing: Stripe, Inc. (PCI-DSS Level 1 certified gateway for commercial invoices).
- Email Delivery: AWS SES / Secure SMTP for encrypted transactional communications.
Zero Data Sales: Cole Don Media does not sell, rent, monetize, or disclose your personal data to data brokers or third-party advertisers for monetary or other commercial benefit.
6. Your Privacy Rights
Depending on your geographic location and residence, you possess specific statutory rights regarding your personal data:
A. Colorado Privacy Act (CPA) Rights
Under Colorado law (Colo. Rev. Stat. § 6-1-1301 et seq.), Colorado consumers have the right to:
- Confirm whether Cole Don Media processes your personal data and access such data.
- Correct inaccuracies in your personal data.
- Delete personal data provided by or obtained about you.
- Obtain personal data in a portable, readily usable format.
- Opt out of processing for targeted advertising, sale of personal data, or profiling.
B. California Rights (CCPA / CPRA)
California residents maintain the right to know the categories of data collected, request deletion, correct inaccurate data, and remain free from discrimination for exercising statutory privacy rights.
C. European Economic Area & UK (GDPR)
Data subjects in the EEA and UK maintain rights under GDPR Articles 15–22, including the right of access, rectification, erasure, restriction of processing, and data portability.
Exercising Your Rights: To submit an inquiry or exercise any privacy right, email us directly at hello@coledonmedia.com with the subject line "Privacy Rights Request". We verify identity and respond within statutory deadlines (45 calendar days).
7. Data Retention & Cybersecurity
We maintain technical, physical, and organizational security measures to protect your information against unauthorized access, loss, or alteration. All web communications are encrypted via SSL/TLS 1.3.
Retention Periods: Active client project assets and correspondence are retained throughout our commercial relationship. Accounting and transactional invoicing records are preserved for 7 years to satisfy federal and state tax mandates. General contact inquiries are retained for up to 24 months.
8. Inquiries & Contact
If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our studio:
