Privacy Policy

1. Who We Are

GridPoint Digital Solutions LLC ("GridPoint", "we", "us", or "our") is a digital marketing and web development agency headquartered in Baltimore, Maryland, United States. We operate the website at gridpointdigitalsolution.com and all subdomains thereof (the "Site").

For questions about this Privacy Policy or our data practices, please contact us at: gridpointdigitalsolution@gmail.com

2. Information We Collect

2.1 Information You Provide Directly

We collect information you provide when you interact with us, including:

• Contact form submissions: name, email address, company name, phone number, service interests, budget range, and message content.
• Newsletter sign-ups: name and email address.
• Booking requests: information collected when you book a strategy call through the booking form on our contact page, including your name, email, and any information you share in that form.
• Client communications: information exchanged during email, WhatsApp, or call communications.

2.2 Information Collected Automatically

When you visit our Site, we automatically collect:

• Log data: IP address, browser type and version, operating system, referring URLs, pages visited, and timestamps.
• Device information: device type, screen resolution, and general location (city/country level) derived from your IP address.
• Usage data: pages viewed, time spent on pages, links clicked, and navigation paths.
• Cookies and similar technologies: as described in Section 5 below.

2.3 Information from Third Parties

We receive aggregate information about how visitors reach and use this Site from Google Analytics and Google Search Console. We do not run advertising networks on this Site, so no advertising platform sends us information about you.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to inquiries: Processing and responding to contact form submissions and booking requests.
• To provide our services: Delivering digital marketing, web design, and related services to clients.
• To send marketing communications: Sending our weekly insights newsletter to subscribers who opt in. You can unsubscribe at any time using the link in any email we send.
• To analyze and improve our Site: Understanding how visitors use our Site so we can improve its content, performance, and user experience.
• To run advertising campaigns: Serving and measuring the performance of digital advertising on Google, Meta, and LinkedIn platforms.
• To comply with legal obligations: Meeting our obligations under applicable law, including retaining business records.
• To protect our rights: Detecting, preventing, and addressing fraud, security breaches, and other potentially prohibited or illegal activities.

4. Sharing Your Information

We share your personal information only in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our business. These providers are contractually obligated to protect your data and may not use it for their own purposes:

• Google LLC. Analytics (Google Analytics 4 and Search Console) and workspace tools (Gmail, Docs). Privacy policy: policies.google.com/privacy
• Meta Platforms, Inc.. Our Facebook and Instagram profiles, which this Site links to. We run no Meta advertising and place no Meta tracking on this Site. Privacy policy: facebook.com/privacy/policy
• Google Meet. Video call scheduling. Privacy policy: policies.google.com/privacy
• WhatsApp LLC (Meta). Business communication. Privacy policy: whatsapp.com/legal/privacy-policy

4.2 Legal Requirements

We may disclose your information if required to do so by law or in the good-faith belief that such action is necessary to comply with a legal obligation, protect and defend our rights or property, prevent or investigate possible wrongdoing in connection with our services, protect the personal safety of users of our services, or protect against legal liability.

4.3 Business Transfers

If GridPoint Digital Solutions LLC is involved in a merger, acquisition, or asset sale, your personal information may be transferred. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to analyze how this Site is used. We do not use them to serve advertising. The types in use are:

• Strictly necessary cookies: Required for the Site to function. These cannot be opted out of.
• Our own visit measurement: We count visits on our own server rather than through an analytics company. It sets no cookie, and it does not store your IP address: your address and browser are combined into a one-way code that changes every midnight, so the same person is counted once within a day and cannot be recognized from one day to the next. We record the page, the referring website, whether the screen is a phone, tablet or desktop, how far down the page you scrolled, roughly how long you stayed, and which of a short list of actions you took, such as tapping WhatsApp or sending an inquiry. We do not record anything you type, with one exception: a question you type into the assistant on this Site is recorded, because that is what the assistant exists to answer. If your browser sends a Global Privacy Control signal, none of this is recorded at all.
• Preference and session storage: Your chosen language, whether you have already seen the cookie notice or the assistant greeting, and a random code identifying the current browser tab. These are held in your own browser and are not sent to anyone.
• Google Analytics 4: We use Google Analytics 4 to understand which pages are read and how visitors arrive. It sets its own cookies in your browser and your IP address is anonymized before Google stores it. You can opt out of it on every website at once with the browser add-on linked below.

You can control cookies through your browser settings. Disabling cookies may affect your experience on our Site. To opt out of Google Analytics on every website at once, install the Google Analytics Opt-out Browser Add-on.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Inquiry and contact data: Retained for up to 3 years after your last interaction with us.
• Newsletter subscriber data: Retained until you unsubscribe or request deletion.
• Client records: Retained for 7 years after the end of the business relationship in accordance with US tax and accounting requirements.
• Analytics data: Google Analytics data is retained for 26 months by default.

When personal information is no longer required, we securely delete or anonymize it.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to access: Request a copy of the personal information we hold about you.
• Right to correction: Request that we correct inaccurate or incomplete personal information.
• Right to deletion: Request that we delete your personal information, subject to certain exceptions.
• Right to opt out of marketing: Opt out of receiving marketing communications from us at any time by using the unsubscribe link in any email or contacting us directly.
• Right to data portability: Request your personal information in a structured, commonly used format.
• Right to object: Object to our processing of your personal information in certain circumstances.

To exercise any of these rights, please contact us at gridpointdigitalsolution@gmail.com. We will respond to your request within 45 days. We may ask you to verify your identity before processing your request.

8. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with the following additional rights:

8.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information: identifiers (name, email, IP address); commercial information (services inquired about, budget ranges); internet or other electronic network activity (browsing behavior on our Site); geolocation data (city/country level only); and inferences drawn from the above.

8.2 No Sale of Personal Information

GridPoint Digital Solutions LLC does not sell personal information as defined under the CCPA. We do share certain identifiers with advertising platforms (Google, Meta, LinkedIn) for targeted advertising purposes. You may opt out of this sharing by contacting us.

8.3 Non-Discrimination

We will not discriminate against you for exercising your CCPA rights. We will not deny you goods or services, charge you different prices, or provide a different level of service because you exercised your privacy rights.

8.4 How to Submit a Request

California residents may submit a verifiable consumer request by emailing gridpointdigitalsolution@gmail.com with the subject line "CCPA Privacy Request". We will verify your identity and respond within 45 days, with a possible 45-day extension if needed.

9. EU / UK Data Subjects (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, the following additional provisions apply to you under the General Data Protection Regulation (GDPR) and UK GDPR.

9.1 Legal Basis for Processing

We process your personal data on the following legal bases:

• Legitimate interests: Operating our business, responding to inquiries, and analyzing Site usage.
• Consent: Sending marketing emails and using non-essential cookies. You may withdraw consent at any time.
• Contract: Processing data necessary to deliver services to clients.
• Legal obligation: Retaining business records as required by law.

9.2 International Data Transfers

GridPoint Digital Solutions LLC is based in the United States. If you are located in the EEA or UK, your personal data will be transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) and other appropriate safeguards where applicable for such transfers.

9.3 Right to Lodge a Complaint

If you are an EU or UK resident, you have the right to lodge a complaint with your local data protection supervisory authority if you believe we have processed your personal data unlawfully.

10. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (HTTPS/TLS), access controls limiting who can access personal data, regular security reviews, and use of reputable third-party service providers with strong security practices.

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

11. Children's Privacy

Our Site and services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child under 16 has provided us with personal information, please contact us and we will take steps to delete such information promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically.

Your continued use of our Site after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy inquiries within 5 business days.