Privacy Policy

Effective Date: 5/27/26 Last Updated: 5/27/26

Bryt Designs (“Bryt Designs,” “we,” “our,” or “us“) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit brytdesigns.com and any subdomains (collectively, the “Site“), submit forms, interact with our content, or otherwise engage with us. It also describes your privacy rights and how to exercise them.

By using the Site, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Site.

1. Who We Are

Bryt Designs is a web design and digital marketing agency headquartered at:

31915 Rancho California Rd, Ste 200 #208 Temecula, CA 92591 Phone: +1 (323) 325‑5180 Email: info@brytdesigns.com

For the purposes of the EU/UK GDPR, Bryt Designs is the “controller” of personal information collected through the Site. For the purposes of the California Consumer Privacy Act / California Privacy Rights Act (“CCPA/CPRA”), we are the “business.”

2. Information We Collect

We collect information in three ways: (a) information you provide to us, (b) information collected automatically as you use the Site, and (c) information from third parties.

2.1 Information You Provide

We collect personal information when you voluntarily submit it, including when you:

• Complete a contact, proposal, or “Get in Touch” form
• Subscribe to email updates or content downloads
• Communicate with us by email, phone, or chat
• Engage with us as a client, vendor, or partner

This information may include: name, business name, job title, email address, phone number, project details, budget range, message content, and any other information you choose to provide.

2.2 Information Collected Automatically

When you visit the Site, we and our third‑party service providers automatically collect:

• Device & browser data: IP address, browser type and version, operating system, device identifiers, and screen resolution
• Usage data: pages viewed, referring/exit pages, links clicked, time on page, scroll depth, mouse movements, and session duration
• Location data: approximate location derived from IP address
• Cookies and similar technologies: see Section 5 below

2.3 Information from Third Parties

We may receive information about you from:

• Marketing and analytics providers (e.g., HubSpot, Google, LinkedIn) who help us measure ad performance and identify potential clients
• Public sources such as LinkedIn, company websites, and business directories used for B2B outreach
• Referral sources including current clients, partners, and review platforms (Clutch, Yelp, Google, DesignRush)

3. How We Use Your Information

We use personal information to:

1. Respond to inquiries and provide proposals, quotes, and other requested information
2. Provide and improve our services for clients and prospects
3. Send marketing communications about our services, case studies, and industry insights (you can opt out at any time)
4. Operate and improve the Site, including diagnosing technical issues and analyzing user behavior
5. Run and measure advertising campaigns on Google, LinkedIn, and other platforms
6. Retarget visitors who have shown interest in our services
7. Comply with legal obligations and enforce our Terms of Service
8. Protect against fraud, unauthorized access, and other security risks

We rely on the following legal bases (where GDPR/UK GDPR applies): your consent, the performance of a contract, our legitimate interests in operating and promoting our business, and compliance with legal obligations.

4. How We Share Your Information

We do not sell your personal information for monetary consideration. However, certain advertising practices described below may be considered a “sale” or “share” of personal information under California law — see Section 8.

We share personal information with:

• Service providers and processors that perform functions on our behalf (hosting, CRM, email, analytics, advertising, customer support, payment processing)
• Advertising and analytics partners as described in Section 5
• Professional advisors such as lawyers, accountants, and auditors
• Government authorities or other third parties when required by law, court order, or to protect legal rights
• Successors in interest in the event of a merger, acquisition, financing, reorganization, bankruptcy, or sale of business assets

5. Cookies and Tracking Technologies

The Site uses cookies, pixels, web beacons, local storage, session replay scripts, and similar technologies (“Cookies“) to operate the Site, remember your preferences, analyze traffic, and deliver relevant advertising. Some Cookies are set by us; others are set by third parties acting on our behalf.

5.1 Categories of Cookies We Use

Category	Purpose	Examples
Strictly Necessary	Required to load the Site, route requests, and remember consent choices. Cannot be disabled.	Session cookies, load‑balancer cookies, cookie‑consent state
Functional	Remember preferences such as form inputs and language.	Form auto‑fill, region selection
Analytics / Performance	Measure how visitors use the Site so we can improve it.	Google Analytics 4, HubSpot Analytics, Hotjar
Advertising / Targeting	Build profiles of your interests, measure ad performance, and serve relevant ads on other sites.	Google Ads, Google Tag Manager (when used for advertising), LinkedIn Insight Tag, Facebook/Meta Pixel (if active), HubSpot Ads

5.2 Third‑Party Tools and Trackers on the Site

The following third parties may set Cookies or otherwise process personal information when you use the Site. Each link below leads to that provider’s own privacy policy.

HubSpot

We use HubSpot as our customer relationship management (CRM), marketing automation, and forms platform. HubSpot sets cookies (__hstc, __hssc, __hssrc, hubspotutk, messagesUtk and others) to:

• Identify unique visitors and track sessions across the Site
• Power our contact and proposal forms
• Attribute lead activity to marketing campaigns
• Personalize content and email outreach
• Enable HubSpot chat (if used)

Data collected: IP address, browser/device data, pages viewed, form inputs, email engagement, and identifiers linking activity to a contact record. HubSpot Privacy Policy: https://legal.hubspot.com/privacy-policy

Google Analytics 4 (GA4)

We use Google Analytics to understand how visitors find and use the Site. GA4 sets cookies including _ga and _ga_<container-id> and collects pseudonymous identifiers, page interaction events, device data, and approximate geolocation. We have enabled IP anonymization where applicable.

Google Analytics Privacy: https://policies.google.com/privacy Opt out: https://tools.google.com/dlpage/gaoptout

Google Ads / Google Tag Manager

We use Google Tag Manager to deploy tags and Google Ads to run pay‑per‑click advertising and remarketing. These services may set cookies including _gcl_au, _gcl_aw, IDE, and NID on Google domains, and use conversion tracking and remarketing pixels to:

• Measure which ads led to inquiries
• Show our ads to past visitors on Google Search, YouTube, and the Google Display Network
• Build similar audiences for prospecting

Google Ads Personalization: https://adssettings.google.com

LinkedIn Insight Tag / LinkedIn Ads

We use the LinkedIn Insight Tag to track conversions from LinkedIn ads, retarget visitors on LinkedIn, and analyze the professional makeup of our audience. The Insight Tag sets cookies including li_sugr, bcookie, bscookie, lidc, and UserMatchHistory, and may share data with LinkedIn (a subsidiary of Microsoft).

LinkedIn Cookie Policy: https://www.linkedin.com/legal/cookie-policy Opt out of LinkedIn ad personalization: https://www.linkedin.com/psettings/advertising

Hotjar

We use Hotjar to record anonymized session recordings, heatmaps, and on‑site surveys to improve the Site’s design and UX. Hotjar sets cookies including _hjSessionUser_*, _hjSession_*, _hjIncludedInSessionSample, and _hjAbsoluteSessionInProgress, and collects:

• Mouse movement, clicks, scrolls, and keystrokes (with sensitive fields suppressed)
• Pages visited and time on page
• Device, browser, OS, and approximate location
• Survey/poll responses

Hotjar masks input into password fields and other fields we configure as sensitive. We do not knowingly capture credit card or other sensitive personal data.

Hotjar Privacy: https://www.hotjar.com/legal/policies/privacy/ Opt out: https://www.hotjar.com/legal/compliance/opt-out

Meta (Facebook) Pixel — if enabled

If we run advertising on Facebook or Instagram, the Meta Pixel may set the _fbp cookie and report conversion events to Meta to measure ad performance and serve retargeting ads.

Meta Privacy: https://www.facebook.com/privacy/policy/

Embedded Media (YouTube / Vimeo)

Our case‑study pages embed video content from YouTube and/or Vimeo. These providers may set cookies and collect viewing data when their players load. We use privacy‑enhanced embeds where available.

YouTube/Google Privacy: https://policies.google.com/privacy Vimeo Privacy: https://vimeo.com/privacy

Hosting, CDN, and Performance

The Site is delivered through hosting and content‑delivery infrastructure (such as Cloudflare, Vercel, AWS, or similar providers as applicable) which may process IP addresses and basic request metadata to deliver the Site, mitigate attacks, and improve performance.

5.3 Managing Cookies

You can control Cookies in several ways:

• Cookie banner / preference center on the Site — adjust your choices at any time via the “Cookie Settings” link in the footer
• Browser settings — most browsers allow you to refuse or delete cookies (note this may break parts of the Site)
• Industry opt‑out tools:
  • U.S.: https://optout.aboutads.info and https://optout.networkadvertising.org
  • EU: https://www.youronlinechoices.eu
• Global Privacy Control (GPC): the Site honors GPC signals as a valid opt‑out of “sale” and “sharing” under the CCPA/CPRA for the browser/device transmitting the signal

6. Email Marketing

If you submit your email to us through a form or by direct outreach, you may receive marketing emails about our services and content. Every marketing email contains an unsubscribe link, and you can also reach out directly to be removed. Transactional and service emails (e.g., responses to your inquiry, project communications) are not subject to opt‑out.

7. Data Retention

We keep personal information only as long as needed for the purposes described in this Policy, to comply with legal obligations, resolve disputes, and enforce agreements. Typical retention periods:

• Contact form submissions and lead records: up to 7 years after last interaction, then archived or deleted
• Client project records: for the duration of the engagement plus 7 years for tax and contractual purposes
• Analytics data: as configured in each tool (e.g., 14 months in GA4 by default)
• Marketing email subscribers: until you unsubscribe, plus a short suppression‑list period to honor your opt‑out

8. Your Privacy Rights

8.1 California Residents (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and “sell” or “share”
• Access a copy of the personal information we hold about you
• Delete your personal information, subject to certain exceptions
• Correct inaccurate personal information
• Opt out of “sale” and “sharing” of your personal information for cross‑context behavioral advertising
• Limit the use of sensitive personal information (we do not currently use sensitive personal information for purposes that trigger this right)
• Non‑discrimination for exercising your rights

“Sale” / “Share” Notice. Some of the advertising technologies on the Site — including the Google Ads, LinkedIn Insight Tag, and Meta Pixel (if active) — may involve the disclosure of identifiers, internet activity, and device data to third parties for cross‑context behavioral advertising. Under California law, this may be considered a “sale” or “sharing” of personal information even though no money changes hands.

To opt out, use the “Do Not Sell or Share My Personal Information” / “Cookie Settings” link in our footer, or send a Global Privacy Control signal from your browser.

Categories of personal information we have collected in the last 12 months: identifiers (name, email, IP), commercial information (services inquired about), internet activity (browsing on the Site), geolocation (approximate), professional information (job title, employer), and inferences drawn from the above.

Categories we have “shared” for cross‑context behavioral advertising: identifiers, internet activity, and inferences with Google, LinkedIn, and Meta (if active).

We do not sell or share the personal information of consumers we actually know to be under 16 years of age.

8.2 EU / UK / EEA Residents (GDPR / UK GDPR)

You have the rights to access, rectify, erase, restrict, and port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time without affecting prior processing. You also have the right to lodge a complaint with your local supervisory authority.

8.3 Other U.S. State Residents

Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others as they take effect) have similar rights to access, delete, correct, and opt out of targeted advertising and profiling.

8.4 How to Exercise Your Rights

Submit a request to info@brytdesigns.com with the subject line “Privacy Request,” or call +1 (323) 325‑5180. We will verify your identity before fulfilling certain requests and will respond within the timeframe required by law (typically 45 days). You may also designate an authorized agent to act on your behalf.

9. Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. No method of transmission over the internet is 100% secure, however, and we cannot guarantee absolute security.

10. International Data Transfers

We are based in the United States and use service providers in the U.S. and other countries. If you access the Site from outside the U.S., your information may be transferred to, stored in, and processed in the U.S. or another country where data protection laws may differ from those in your jurisdiction. Where required, we rely on appropriate transfer mechanisms such as the EU Standard Contractual Clauses and the EU‑U.S. Data Privacy Framework (where applicable to our processors).

11. Children’s Privacy

The Site is intended for business audiences and is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Third‑Party Links

The Site links to third‑party websites (clients’ sites, social profiles, review platforms, etc.). We are not responsible for the privacy practices of those sites. Please review their privacy policies before submitting any information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the “Last Updated” date above and, where appropriate, by additional notice (such as a banner on the Site or an email). Your continued use of the Site after the updated Policy takes effect constitutes acceptance of the changes.

14. Contact Us

For questions, concerns, or to exercise your privacy rights:

Bryt Designs — Privacy 31915 Rancho California Rd, Ste 200 #208 Temecula, CA 92591 Email: info@brytdesigns.com Phone: +1 (323) 325‑5180