Privacy Policy

Welcome to SiteFyd ("Company," "we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website sitefyd.com (the "Site") and use our services.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services. We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy.

We collect information that you provide directly to us, information we obtain automatically when you use our Site, and information from third-party sources.

Personal Information You Provide: • Contact information (name, email address, phone number, mailing address) • Account credentials (username, password) • Payment information (credit card numbers, billing address) - processed securely through our payment processors • Business information (company name, website URL, industry) • Project requirements and specifications you share with us • Communications you send to us (emails, support tickets, feedback)

Information Collected Automatically: • Device information (browser type, operating system, device identifiers) • Log data (IP address, access times, pages viewed, referring URL) • Location data (country, city based on IP address) • Usage data (features used, interactions with our Site) • Cookies and similar tracking technologies

Information from Third Parties: • Social media information if you connect your social accounts • Payment verification information from payment processors • Analytics data from partners like Google Analytics

We use the information we collect for various purposes, including:

Service Delivery: • To provide, maintain, and improve our website design and development services • To process transactions and send related information • To manage your account and provide customer support • To deliver products and services you request

Communication: • To send you technical notices, updates, security alerts, and support messages • To respond to your comments, questions, and requests • To send promotional communications (with your consent) • To provide newsletters and marketing materials

Business Operations: • To analyze usage and trends to improve our Site and services • To detect, prevent, and address technical issues and fraud • To comply with legal obligations and enforce our terms • To protect the rights, property, or safety of our users and others

Personalization: • To personalize your experience on our Site • To recommend services that may interest you • To remember your preferences and settings

We do not sell your personal information. We may share your information in the following situations:

Service Providers: We share information with third-party vendors who provide services on our behalf, including: • Payment processing (Stripe, PayPal) • Email delivery (SendGrid, Mailchimp) • Analytics (Google Analytics, Hotjar) • Cloud hosting (Amazon Web Services, Vercel) • Customer support tools

Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, investigate fraud, or ensure user safety.

Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or control of your personal information.

With Your Consent: We may share your information with third parties when you give us explicit consent to do so.

Aggregated or De-identified Data: We may share aggregated or de-identified information that cannot reasonably be used to identify you.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Security Measures Include: • SSL/TLS encryption for all data transmissions • Encrypted storage of sensitive data • Regular security assessments and penetration testing • Access controls and authentication requirements • Employee training on data protection practices • Secure data centers with physical security measures • Regular backups and disaster recovery procedures

Payment Security: All payment information is processed through PCI-DSS compliant payment processors. We do not store complete credit card numbers on our servers.

Breach Notification: In the event of a data breach that affects your personal information, we will notify you and the appropriate authorities as required by applicable law within 72 hours of becoming aware of the breach.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

We use cookies and similar tracking technologies to collect and use personal information about you.

Types of Cookies We Use:

*Essential Cookies:* Required for the Site to function properly. These cannot be disabled.

*Performance Cookies:* Help us understand how visitors interact with our Site by collecting anonymous statistics.

*Functionality Cookies:* Remember your preferences and settings to enhance your experience.

*Marketing Cookies:* Used to track visitors across websites to display relevant advertisements.

Cookie Management: You can control cookies through your browser settings. Most browsers allow you to: • View what cookies are stored and delete them individually • Block third-party cookies • Block all cookies from being set • Clear all cookies when you close your browser

Note that blocking some cookies may impact your experience on our Site.

Third-Party Analytics: We use Google Analytics to analyze Site usage. Google Analytics uses cookies to collect information about your use of the Site. You can opt out by installing the Google Analytics Opt-out Browser Add-on.

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

Retention Periods: • Account information: Retained while your account is active and for 5 years after account closure • Transaction records: Retained for 7 years as required for tax and accounting purposes • Communication records: Retained for 3 years after the last interaction • Analytics data: Retained for 26 months (in aggregated form) • Cookies: Vary by type, from session-based to 2 years

Deletion Requests: When you request deletion of your data, we will: • Delete or anonymize your personal data within 30 days • Retain only what is legally required • Provide confirmation of deletion upon request

Project Files: For custom design projects, we retain project files for 2 years after project completion to provide support. After this period, files are securely deleted unless you request extended retention.

Depending on your location, you may have certain rights regarding your personal information:

For All Users: • Access: Request a copy of your personal information • Correction: Request correction of inaccurate data • Deletion: Request deletion of your personal information • Portability: Request transfer of your data to another service • Objection: Object to certain processing of your data • Withdrawal of Consent: Withdraw consent at any time

For EU/EEA Residents (GDPR): You have all rights listed above, plus: • Right to restrict processing • Right to lodge a complaint with a supervisory authority • Right not to be subject to automated decision-making

For California Residents (CCPA/CPRA): • Right to know what personal information is collected • Right to know if personal information is sold or disclosed • Right to opt-out of the sale of personal information • Right to non-discrimination for exercising your rights

For UK Residents: You have rights under the UK GDPR similar to EU residents.

Exercising Your Rights: To exercise any of these rights, please contact us at privacy@sitefyd.com. We will respond within 30 days (or sooner if required by applicable law).

We operate globally and may transfer your personal information to countries other than your country of residence.

Transfer Safeguards: When we transfer personal information outside of the European Economic Area (EEA), UK, or other regions with data protection laws, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs): We use EU-approved SCCs for transfers outside the EEA • Adequacy Decisions: We may transfer to countries deemed adequate by the European Commission • Binding Corporate Rules: For transfers within our corporate group • Your Consent: In some cases, we may transfer data based on your explicit consent

Data Localization: Where possible and legally required, we store your data in regional data centers: • EU/EEA customer data is primarily stored in European data centers • UK customer data is stored in UK or EU data centers • US customer data is stored in US data centers

Privacy Shield: While the EU-US Privacy Shield was invalidated, we continue to comply with Privacy Shield principles as a matter of best practice.

Our Site and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18.

Our Policy: • We do not target our services to children under 18 • We do not knowingly collect data from children under 18 • If we become aware that we have collected data from a child under 18, we will promptly delete it

Parental Rights: If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@sitefyd.com. We will take steps to remove such information from our systems.

Age Verification: For services that require a minimum age, we implement reasonable measures to verify user age and obtain parental consent where required by law.

Our Site may contain links to third-party websites, services, or applications that are not operated by us.

Third-Party Websites: We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

Third-Party Services: Our services may integrate with third-party services such as: • Social media platforms (Facebook, Twitter, LinkedIn, Instagram) • Analytics services (Google Analytics) • Payment processors (Stripe, PayPal) • Marketing tools (Mailchimp, HubSpot)

Each of these services has its own privacy policy governing the use of your information.

Embedded Content: Our Site may include embedded content (such as videos, images, articles) from third parties. Embedded content behaves as if you visited the third-party website directly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.

Notification of Changes: • We will update the "Last Updated" date at the top of this policy • For material changes, we will notify you via email or a prominent notice on our Site • Your continued use of our Site after changes indicates your acceptance of the updated policy

Review History: • Previous versions of this policy are available upon request • We maintain a log of all material changes to this policy

Effective Date: Any changes to this Privacy Policy will be effective immediately upon posting, except where a later effective date is specified or required by law.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Data Protection Officer: SiteFyd Email: privacy@sitefyd.com Phone: +1-800-SITEFYD

Mailing Address: SiteFyd LLC 123 Web Design Avenue New York, NY 10001 United States

EU Representative: For EU residents, our EU representative can be contacted at: eu-privacy@sitefyd.com

UK Representative: For UK residents, our UK representative can be contacted at: uk-privacy@sitefyd.com

Regulatory Authority: If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

Response Time: We aim to respond to all privacy-related inquiries within 30 days. For urgent matters, please indicate this in your communication.