Rivetmark Digital, LLC, referred to in this Privacy Notice as “Rivetmark,” “we,” “us,” or “our,” respects your privacy. This Privacy Notice explains how we collect, use, disclose, and protect personal information when you:

• Visit rivetmarkdigital.com or another website that links to this notice
• Submit an inquiry or otherwise communicate with us
• Become a client or prospective client
• Provide access to information in connection with a Rivetmark consulting engagement

This notice does not apply to websites, applications, or services operated by third parties, including websites owned or controlled by Rivetmark clients.

1. Information We Collect

Information You Provide Directly

We may collect information you provide when you submit a form, email us, speak with us, or engage our services. This information may include:

• Your name
• Email address
• Telephone number
• Company or organization
• Website address
• Information about your business, website, marketing needs, or project
• Communications between you and Rivetmark
• Project, contractual, and business records related to an engagement

Please do not submit passwords, financial-account information, Social Security numbers, medical information, or other sensitive personal information through the website contact form.

Information Collected Automatically

When you visit the website, we and our technology providers may automatically collect information such as:

• Internet Protocol address
• Browser and device type
• Operating system
• Approximate geographic location derived from an IP address
• Pages viewed and links selected
• Referring website or campaign
• Date, time, and duration of a visit
• Website interactions and conversion events
• Cookie, device, advertising, and similar online identifiers

This information is used to operate the website, understand how it is used, maintain security, measure marketing performance, and improve Rivetmark’s services and communications.

Information Received in Connection With Client Services

When performing an audit or other consulting engagement, Rivetmark may receive access to information held in a client’s systems or accounts, including:

• Google Analytics or other website analytics data
• Google Search Console data
• Advertising-platform reports
• Website performance and conversion information
• Search queries, landing-page information, and traffic-source data
• Reports, spreadsheets, documents, or exports supplied by the client
• Account identifiers and access permissions
• Other information reasonably necessary to perform the agreed services

Depending on a client’s systems and configuration, this information may contain online identifiers or other information that applicable law considers personal information.

Rivetmark uses client-provided information only for the purposes described in the applicable engagement, such as analyzing website performance, identifying opportunities, creating an audit, developing recommendations, and discussing findings with the client.

2. How We Use Information

We may use personal information to:

• Review and respond to inquiries
• Determine whether Rivetmark’s services are appropriate for a prospective client
• Prepare proposals and communicate about potential engagements
• Perform website audits, analysis, research, and consulting services
• Produce reports, recommendations, roadmaps, and data visualizations
• Communicate with clients and manage client relationships
• Operate, maintain, troubleshoot, and secure the website
• Understand website use and improve the visitor experience
• Measure the effectiveness of advertising and marketing
• Attribute inquiries or conversions to marketing campaigns
• Maintain appropriate business, contractual, and financial records
• Detect or prevent fraud, misuse, security incidents, or unlawful activity
• Comply with legal obligations and enforce our agreements
• Establish, exercise, or defend legal claims

We may also use information for another purpose that is disclosed when the information is collected or with your authorization.

3. Analytics, Advertising, Cookies, and Similar Technologies

The website uses or may use cookies, pixels, tags, local storage, and similar technologies.

Depending on the website’s current configuration and active marketing campaigns, these services may include:

• Google Analytics 4
• Google Ads conversion tracking
• Meta Pixel
• LinkedIn Insight Tag

These technologies may collect information about your browser, device, visits, referring sources, advertisements viewed or selected, pages visited, and actions taken on the website.

We use this information for purposes such as:

• Measuring website traffic and engagement
• Understanding which pages and services attract interest
• Diagnosing website performance
• Measuring advertising effectiveness
• Attributing inquiries and conversions to campaigns
• Developing aggregate audience and campaign reports
• Creating or evaluating advertising audiences, where enabled
• Delivering or evaluating remarketing or targeted advertising, where enabled

We do not intentionally configure these technologies to collect the contents of contact-form fields, passwords, or other sensitive information. A form submission may be reported to an analytics or advertising platform as a generic conversion event.

Google, Meta, LinkedIn, and other providers process information according to their own terms and privacy practices. Their treatment of information may differ from Rivetmark’s practices.

Your Cookie Choices

You can configure your browser to refuse or delete cookies. Blocking cookies may affect some website functionality and may make analytics or conversion reporting less accurate.

If the website provides a cookie-preference or privacy-settings tool, you may also use that tool to manage nonessential cookies and tracking technologies.

Where required by applicable law, Rivetmark will request consent before activating nonessential analytics or advertising technologies.

Do Not Track

Some browsers offer a “Do Not Track” setting. Because there is not a universally accepted technical or legal standard governing these signals, the website does not currently respond to browser Do Not Track signals.

Third-party analytics and advertising providers may collect information about your online activities over time and across different websites when their technologies are enabled on this website.

4. How We Disclose Information

Rivetmark may disclose personal information to the following categories of recipients.

Service Providers

We may use service providers to support functions such as:

• Website hosting
• Email and business communications
• Contact-form processing
• Cloud storage and document management
• Spreadsheet analysis and data visualization
• Website analytics
• Advertising measurement and campaign management
• Information security, maintenance, and troubleshooting
• Accounting, invoicing, and business administration

These providers receive information only as reasonably necessary to perform services for Rivetmark, subject to their contracts, terms, and applicable law.

Analytics and Advertising Providers

We may disclose online identifiers, device information, website activity, referral information, and conversion events to analytics and advertising providers for the purposes described in this notice.

Professional Advisers

We may disclose information to attorneys, accountants, insurers, consultants, or other professional advisers when reasonably necessary to obtain advice, manage the business, or protect Rivetmark’s interests.

Legal and Safety Disclosures

We may disclose information when we reasonably believe disclosure is necessary to:

• Comply with a law, regulation, subpoena, court order, or lawful government request
• Cooperate with law enforcement or regulatory authorities
• Protect the rights, property, security, or safety of Rivetmark, our clients, website visitors, or others
• Investigate fraud, misuse, security incidents, or suspected unlawful activity
• Enforce an agreement or protect against legal liability

Business Transactions

Information may be transferred as part of a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar business transaction. Any recipient would be expected to handle the information consistently with this notice unless legally permitted to provide a different notice.

At Your Direction

We may disclose information when you direct or authorize us to do so.

5. Sale, Sharing, and Targeted Advertising

Rivetmark does not sell personal information in exchange for money.

We may, however, disclose online identifiers, device information, website activity, and conversion information to analytics and advertising providers for campaign measurement, attribution, audience development, or advertising purposes.

Some privacy laws may define these disclosures as a “sale,” “sharing,” or processing for “targeted advertising,” even when Rivetmark receives no money for the information.

Where such laws apply to Rivetmark, we will provide the notices, choices, and opt-out methods required by applicable law.

6. Client Analytics and Marketing Data

When Rivetmark receives access to analytics, Search Console, advertising, or other client-controlled information, Rivetmark generally processes that information on the client’s behalf and according to the agreed scope of work.

Rivetmark will:

• Use the information only to perform the agreed services
• Limit access to individuals and providers reasonably necessary for the engagement
• Use account invitations or delegated access instead of requesting passwords whenever practical
• Avoid using client data for Rivetmark’s independent advertising or audience-building purposes
• Take reasonable steps to protect the information
• Remove account access when it is no longer reasonably necessary
• Return, delete, or retain project information according to the engagement terms, legal obligations, and legitimate recordkeeping needs

Rivetmark may use cloud-based productivity and analysis services, including Google Workspace and Google Sheets, to organize information, perform calculations, and create reports or visualizations.

Rivetmark does not upload raw client analytics exports, raw Search Console data, client account credentials, or similar client-controlled data to generative artificial intelligence services.

Where Rivetmark processes personal information solely on behalf of a client, the client determines the purposes for which the information was originally collected. Questions or requests from individuals concerning that information should generally be directed to the relevant client. Rivetmark will assist the client with appropriate requests when required by contract or applicable law.

7. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this notice, including:

• Responding to and documenting inquiries
• Evaluating and managing potential engagements
• Providing contracted services
• Maintaining business and project records
• Complying with legal, tax, accounting, and contractual obligations
• Resolving disputes and enforcing agreements
• Preventing fraud or security incidents

Retention periods may depend on the type of information, the nature of the relationship, the duration of an engagement, client instructions, contractual requirements, applicable limitation periods, and legal obligations.

Analytics and advertising information may also be retained according to the settings and retention practices of the applicable technology provider.

When information is no longer reasonably necessary, Rivetmark may delete, anonymize, aggregate, or securely dispose of it. Residual copies may remain temporarily in backups or archives until those systems are overwritten or deleted through their normal operation.

8. Information Security

Rivetmark uses reasonable administrative, technical, and organizational safeguards intended to protect personal information against accidental loss, unauthorized access, misuse, alteration, or disclosure.

These safeguards may include access controls, account authentication, encrypted transmission, secure cloud services, software updates, and limiting access to information based on business need.

No method of transmission over the internet or method of electronic storage is completely secure. Rivetmark therefore cannot guarantee absolute security.

9. Your Privacy Rights

Depending on where you live and the laws applicable to Rivetmark, you may have the right to request that we:

• Confirm whether we process your personal information
• Provide access to certain personal information
• Correct inaccurate personal information
• Delete certain personal information
• Provide a portable copy of certain information
• Restrict or object to certain processing
• Allow you to withdraw consent where processing is based on consent
• Allow you to opt out of certain sales, sharing, or targeted advertising
• Review an appeal concerning a denied privacy request

To submit a privacy request, contact us using the information in the “Contact Us” section below.

We may need to verify your identity before completing a request. Applicable law may permit or require us to retain certain information or decline all or part of a request.

Rivetmark will not unlawfully discriminate against you for exercising an applicable privacy right.

For information that Rivetmark processes solely on behalf of a client, you should generally direct your request to that client.

10. Children’s Privacy

The website and Rivetmark’s services are intended for businesses and adults. They are not directed to children under 13, and Rivetmark does not knowingly collect personal information from children under 13.

If you believe a child has provided personal information to Rivetmark, please contact us so that we can review and, where appropriate, delete the information.

11. Third-Party Websites and Services

The website may contain links to third-party websites, social networks, or services. Rivetmark does not control and is not responsible for their privacy, security, or content practices.

Review the privacy notice of any third-party service before providing it with personal information.

12. Processing in the United States

Rivetmark is based in the United States. Information may be stored or processed in the United States and in other locations where Rivetmark’s service providers operate.

Privacy and data-protection laws in those locations may differ from the laws where you live.

13. Changes to This Privacy Notice

We may update this Privacy Notice to reflect changes in our services, technology, vendors, business practices, or legal obligations.

When we make changes, we will post the revised notice on the website and update the Effective Date shown above. If a change is material, we may provide additional notice when appropriate.

Your continued use of the website after a revised notice is posted is subject to the revised notice.

14. Contact Us

Questions, concerns, and privacy requests may be directed to:

Rivetmark Digital, LLC
Wescosville, PA 18106
Email: inquiries [at] rivetmarkdigital [dot] com
Website: rivetmarkdigital.com