Privacy Policy

Effective Date: October 13, 2025
Last Updated: October 13, 2025

School Branding Agency ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website schoolbranding.agency and use our services.

---

1. Information We Collect

1.1 Personal Information You Provide

We collect personal information that you voluntarily provide when you:

• Request a quote - Name, email, phone, school name, project details
• Download resources - Name, email, school name (for PDF downloads, brand audit checklist)
• Take assessments - Email address, quiz responses (brand assessment quiz)
• Contact us - Name, email, phone, message content
• Subscribe to emails - Email address, preferences

1.2 Automatically Collected Information

When you visit our website, we automatically collect certain information:

• Device Information - IP address, browser type, operating system
• Usage Data - Pages viewed, time spent, referring URLs
• Analytics Data - Via Google Analytics (see section 4)
• Cookies - Small data files stored on your device (see section 8)

1.3 Information from Third Parties

We may receive information from:

• Payment Processors - Stripe for payment processing
• Email Services - Resend for email delivery
• Analytics Providers - Google Analytics for website usage

---

2. How We Use Your Information

We use the information we collect to:

2.1 Provide Services

• Process quote requests and project inquiries
• Deliver requested resources (PDF downloads, checklists)
• Communicate about your project or inquiry
• Process payments for services

2.2 Marketing & Communications

• Send you school branding tips and resources (with consent)
• Inform you about our services and case studies
• Send newsletters and educational content
• Follow up on downloads and assessments

2.3 Website Improvement

• Analyze website usage and performance
• Improve user experience and content
• Optimize our services based on user behavior
• Prevent fraud and ensure security

2.4 Legal Compliance

• Comply with legal obligations
• Enforce our terms and policies
• Protect our rights and property

---

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data and context:

• Consent - You have given explicit consent (e.g., email subscriptions, resource downloads)
• Contract - Processing is necessary to fulfill our services to you
• Legitimate Interests - We have legitimate business interests (e.g., improving our website, preventing fraud)
• Legal Obligation - Required by law (e.g., tax records, business compliance)

---

4. Third-Party Services & Data Sharing

We share your information only with trusted third-party service providers:

4.1 Service Providers

• Resend - Email delivery service (emails you requested resources, quotes, responses)
• Stripe - Payment processing (only if you make a payment)
• Google Analytics - Website analytics (anonymized data)
• Vercel - Website hosting and infrastructure
• Supabase - Database for analytics and tracking (internal use only)

4.2 We Do NOT Sell Your Data

We never sell, rent, or trade your personal information to third parties for marketing purposes.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights and safety.

---

5. Your Data Protection Rights

5.1 GDPR Rights (EEA Residents)

If you are in the EEA, you have the following rights:

• Right to Access - Request a copy of your personal data
• Right to Rectification - Request correction of inaccurate data
• Right to Erasure - Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing - Request limitation of data processing
• Right to Data Portability - Receive your data in a structured format
• Right to Object - Object to processing based on legitimate interests
• Right to Withdraw Consent - Withdraw consent at any time

5.2 CCPA Rights (California Residents)

If you are a California resident, you have additional rights:

• Right to Know - What personal information we collect, use, and share
• Right to Delete - Request deletion of your personal information
• Right to Opt-Out - Opt-out of sale of personal information (we don't sell data)
• Right to Non-Discrimination - Equal service regardless of privacy choices

5.3 How to Exercise Your Rights

To exercise any of these rights, contact us:

• Email: hello @ schoolbranding.agency
• Phone: (845) 233-6410
• Mail: School Branding Agency, 3979 Albany Post Road, Hyde Park, NY 12538

We will respond to your request within 30 days.

---

6. Children's Privacy (COPPA Compliance)

Our website and services are directed at school administrators, educators, and decision-makers—not children under 13.

• We do not knowingly collect personal information from children under 13
• If we discover we have collected information from a child under 13, we will delete it immediately
• Student Privacy - We are FERPA-compliant and do not collect student information
• School Projects - Any student input in branding projects is collected by the school, not by us

If you believe we have inadvertently collected information from a child under 13, please contact us immediately.

---

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption - SSL/TLS encryption for data transmission
• Secure Storage - Data stored on secure servers (Vercel, Supabase)
• Access Controls - Limited access to personal information
• Regular Audits - Security reviews and updates
• Vendor Compliance - All third-party services are vetted for security

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

---

8. Cookies & Tracking Technologies

8.1 What We Use

• Essential Cookies - Required for website functionality
• Analytics Cookies - Google Analytics to understand website usage
• Preference Cookies - Remember your settings (e.g., quiz progress)

8.2 Your Cookie Choices

• Browser Settings - You can block or delete cookies via browser settings
• Opt-Out - Google Analytics opt-out: Google Analytics Opt-out Browser Add-on
• Impact - Blocking cookies may limit website functionality

8.3 Do Not Track

We do not currently respond to Do Not Track (DNT) browser signals, as there is no industry standard for DNT compliance.

---

9. Email Communications & Unsubscribe

9.1 What Emails You Receive

• Transactional - Quote confirmations, resource delivery, project updates
• Marketing - School branding tips, case studies, resources (only with consent)
• Follow-ups - Related to your downloads, assessments, or inquiries

9.2 How to Unsubscribe

• Unsubscribe Link - Every marketing email includes an unsubscribe link
• Email Us - Request removal at hello @ schoolbranding.agency
• Processing Time - Unsubscribe requests processed within 5 business days

Note: Unsubscribing from marketing emails will not affect transactional emails (e.g., quote confirmations, project communications).

---

10. Data Retention

We retain your personal information only as long as necessary:

• Active Inquiries - During project discussion and 12 months after
• Client Projects - Duration of project plus 7 years (business records)
• Marketing Contacts - Until you unsubscribe or request deletion
• Analytics Data - Anonymized data retained for historical analysis

After retention periods, we securely delete or anonymize your personal information.

---

11. International Data Transfers

We are based in the United States. If you are accessing our website from outside the U.S., please be aware that:

• Your information may be transferred to and processed in the United States
• The U.S. may have different data protection laws than your country
• We implement appropriate safeguards for international transfers
• By using our website, you consent to transfer of your information to the U.S.

EEA Residents: We rely on appropriate legal mechanisms for data transfers, including Standard Contractual Clauses where applicable.

---

12. Third-Party Links

Our website may contain links to third-party websites (e.g., school websites in our portfolio). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

---

13. California Privacy Rights (CCPA)

13.1 Information We Collect (CCPA Categories)

• Identifiers - Name, email, phone, IP address
• Commercial Information - Services requested, project details
• Internet Activity - Website usage, pages viewed
• Professional Information - School name, position, work email

13.2 California Consumer Rights

California residents have the right to:

• Know what personal information we collect and how we use it
• Request deletion of personal information
• Opt-out of sale of personal information (we don't sell your data)
• Non-discrimination for exercising CCPA rights

13.3 How to Submit a Request

California residents can submit requests by:

• Email: hello @ schoolbranding.agency
• Phone: (845) 233-6410

We will verify your identity before processing requests and respond within 45 days.

---

14. FERPA Compliance (Educational Privacy)

As a service provider to educational institutions, we comply with the Family Educational Rights and Privacy Act (FERPA):

• No Student Records - We do not collect, access, or store student education records
• School Projects - Any student input in branding projects remains under school control
• De-identified Data - Portfolio case studies use only publicly available, de-identified information
• Vendor Compliance - We follow FERPA requirements as a school vendor

---

15. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make material changes:

• We will update the "Last Updated" date at the top
• We will notify you via email if you have provided your email address
• Continued use of our website after changes constitutes acceptance

We encourage you to review this Privacy Policy periodically.

---

16. Contact Us About Privacy

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to privacy inquiries within 30 days.

---

17. Your Consent

By using our website, submitting forms, or requesting services, you consent to this Privacy Policy and agree to its terms.

If you do not agree with this Privacy Policy, please do not use our website or provide us with personal information.

---