Privacy Policy

Effective Date: July 9, 2026

1. Introduction

This Privacy Policy describes how we collect, use, process, and disclose your information, including personal data, in conjunction with your access to and use of our website. We are committed to safeguarding your privacy and ensuring that your personal data is handled in a secure and responsible manner, in compliance with applicable data protection regulations.

Please note that this website is strictly informational. We do not operate e-commerce functionalities, user account systems, or payment processing services.

2. Information We Collect

We adhere strictly to the principle of data minimization, collecting only the information necessary to fulfill specific, articulated purposes.

A. Information You Voluntarily Provide

Contact Information: When you submit an inquiry through our website's contact form, we collect your First Name, Last Name, Email Address, Subject Line, and the contents of your message.

B. Information Collected Automatically

• Analytics Data: Subject to your explicit, prior consent, we use Google Analytics 4 (GA4) to collect data regarding your interaction with our website. This includes your IP address (which is anonymized), browser type, device information, pages visited, and approximate geographic location.
• Server Logs and Technical Data: Our hosting provider (Vercel) automatically records standard server logs necessary for security, performance monitoring, and incident resolution. This includes IP addresses, timestamps, and request headers.
• Web Fonts: We utilize Google Fonts served via Google's external Content Delivery Network (CDN) to ensure consistent typography. When your browser requests these font files, your IP address is transmitted to Google's servers. This is a technical necessity and functions independently of our analytics tracking.

3. Purposes of Processing

We process the collected data solely for the following explicit purposes:

• To receive, review, and respond to your inquiries submitted via the contact form.
• To analyze website traffic and user behavior to improve our content and user experience (only if consent for GA4 is granted).
• To ensure the technical stability, security, and proper functioning of the website infrastructure.

4. Third-Party Service Providers & Data Transfers

We do not sell, rent, or monetize your personal information. We engage the following third-party processors strictly to facilitate website operations. For more detailed information on how these providers handle your data, please review their respective privacy policies:

• Web3Forms: Our contact forms are processed by Web3Forms. Upon submission, your data is securely transmitted by Web3Forms and delivered directly to our designated email address. Read Web3Forms Privacy Policy
• Google LLC (Google Analytics 4 & Google Fonts): We use Google Analytics to analyze website traffic (subject to your consent) and Google Fonts for website typography. Analytics data is transmitted to and stored on Google servers. Read Google Privacy Policy. To understand specifically how Google uses data when you use our website, please visit: How Google uses information from sites or apps that use our services.
• Vercel Inc.: Our website hosting provider, which processes standard server logs to maintain platform integrity, security, and performance. Read Vercel Privacy Policy

5. Cookies and Local Storage Policy

Our website operates on a strict "opt-in" basis for non-essential tracking.

• Analytics Cookies: GA4 tracking scripts and associated cookies are deployed only if you actively click "Accept" on our cookie consent banner. If you click "Decline" or ignore the banner, no tracking cookies will be set, and no data will be transmitted to Google Analytics.
• Local Storage: We utilize your browser's localStorage solely to record your consent preference regarding the cookie banner. This ensures you are not repeatedly prompted upon subsequent visits. No personal identification data is stored within this localStorage key.
• First-Party Cookies: We do not deploy any proprietary tracking, advertising, or marketing cookies.

6. Data Retention

We retain your personal information only for as long as is strictly necessary to fulfill the purposes outlined in this Privacy Policy.

• Contact form submissions are retained in our secure email inbox only as long as necessary to address your inquiry or maintain appropriate business records.
• Analytics data retained by Google is subject to Google's data retention policies, configured to the shortest available duration.

7. Your Privacy Rights & California Disclosures

Depending on your state of residence, including if you are a California resident protected under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), you are granted specific rights regarding your personal information:

• Right to Know and Access: You have the right to request what categories and specific pieces of personal information we have collected about you, the sources from which it was collected, and the business purposes for collecting it.
• Right to Delete: You have the right to request the deletion of personal information we have collected from you, subject to certain legal exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you.
• Right to Opt-Out of Sale or Sharing: California law provides the right to opt-out of the "sale" or "sharing" of personal data. We do not sell, rent, or "share" your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Information: We do not collect sensitive personal information as defined by California law.
• Right to Non-Discrimination: We will not discriminate against you (e.g., by denying services or altering quality) for exercising any of your privacy rights.

California "Do Not Track" (DNT) Notice (CalOPPA): Some web browsers incorporate a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked. Because we operate on a strict opt-in consent basis for non-essential tracking (Google Analytics), we do not track you unless you explicitly click "Accept" on our cookie banner. Therefore, whether your browser sends a DNT signal or not, your privacy is protected by default until you grant consent.

How to Exercise Your Rights: To submit a verifiable consumer request regarding your privacy rights, please contact us at contact@criemhild.com. We may need to verify your identity before processing your request.

8. Third-Party Links and Social Media

Our website contains links to our official brand accounts on third-party social media platforms, including Instagram, X (formerly Twitter), YouTube, and TikTok.

Please note that when you click on these icons or links, you are navigating away from our website to external platforms. We do not control these third-party platforms and are not responsible for their data collection, privacy practices, tracking technologies, or content. Your interactions with these platforms are governed by the respective privacy policies of the companies providing them. We strongly encourage you to review the privacy policies of these external platforms before interacting with them or providing any personal information.

9. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at our discretion to reflect changes in our practices or operational requirements. The updated version will be indicated by an updated "Effective Date" at the top of this document.

10. Contact Us

If you have any questions, formal requests, or concerns regarding this Privacy Policy or our data practices, please contact us at:

Email: contact@criemhild.com