Privacy Policy

1. Introduction

E6WeB ("Company", "we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website e6web.com, use our services, or interact with us.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

2. Information We Collect

2.1 Personal Information You Provide

• Contact & Identity: Name, email, phone, company, job title when you fill forms, request quotes, or contact us
• Project Details: Requirements, budget, timeline, existing assets, access credentials shared for project work
• Communications: Emails, chat logs, call recordings (with consent), meeting notes
• Billing: Payment details processed by Stripe/PayPal (we don't store full card numbers)
• Account: Login credentials for client portal

2.2 Automatically Collected Data

• Usage Data: IP address, browser type, device, OS, referring URL, pages visited, time spent, clicks
• Cookies & Tracking: See our Cookie Policy for details
• Analytics: Aggregated data via Google Analytics, Hotjar (with consent)

2.3 Third-Party Sources

We may receive information from: referral partners, public sources (LinkedIn, company websites), data enrichment services (Clearbit) for lead qualification.

3. How We Use Your Information

• Service Delivery: Execute projects, provide support, manage accounts
• Communication: Respond to inquiries, send updates, newsletters (with consent)
• Improvement: Analyze usage, improve website, develop new services
• Marketing: Personalize ads, send promotions (opt-out anytime)
• Legal: Comply with laws, enforce contracts, protect rights
• Security: Detect fraud, prevent abuse, ensure system integrity

Legal Bases (GDPR): Contract performance, legitimate interest, consent, legal obligation.

4. Information Sharing

We do not sell your personal information. We share only as follows:

4.1 Service Providers (Processors)

We only share information you provide that you allow us to share. As our standard policy, we do this to help protect your identity.

4.2 Business Transfers

In a merger, acquisition, or asset sale, your data may transfer. We'll notify you of any change in control.

4.3 Legal Requirements

We may disclose data if required by law, court order, or to protect rights/safety.

4.4 With Consent

We share for specific purposes you authorize (e.g., testimonials, case studies).

5. Data Retention

• Active Clients: Retained for duration of relationship + 3 years
• Leads/Prospects: 2 years from last interaction
• Billing Records: 7 years (tax/legal compliance)
• Analytics/Logs: 26 months (Google Analytics default)
• Marketing: Until you unsubscribe

Anonymized/aggregated data may be retained indefinitely for analytics.

6. Your Rights

Depending on your location, you may have:

• Access: Request copy of your data
• Rectification: Correct inaccurate data
• Erasure: Request deletion (subject to legal obligations)
• Restriction: Limit processing
• Portability: Receive data in portable format
• Objection: Object to processing (including direct marketing)
• Withdraw Consent: Where processing is consent-based
• Complaint: Lodge with supervisory authority

To exercise rights, contact us via our Contact Form. We respond within 30 days (GDPR) or 45 days (CCPA).

7. Cookies & Tracking

We use cookies and similar technologies. See our Cookie Policy for details on types, purposes, and how to manage preferences.

You can accept/reject non-essential cookies via our cookie banner. Essential cookies cannot be disabled.

8. International Transfers

Our servers and processors are primarily in the USA. If you're in the EU/UK, transfers rely on:

• Standard Contractual Clauses (SCCs)
• UK International Data Transfer Agreement
• Processor certifications (Privacy Shield successors)

9. Security

We implement appropriate technical and organizational measures:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Access controls: least privilege, MFA, regular reviews
• Vulnerability scanning, penetration testing annually
• Incident response plan with 72-hour breach notification
• Employee training, background checks, confidentiality agreements

No method is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

Our services are not directed to children under 16. We don't knowingly collect children's data. If you believe we have, contact us for immediate deletion.

11. California Privacy Rights (CCPA/CPRA)

California residents have additional rights:

• Right to Know: Categories of personal info collected, sources, purposes, third parties shared with
• Right to Delete: Request deletion (with exceptions)
• Right to Opt-Out: Of "sale" or "sharing" (we don't sell; sharing for cross-context behavioral advertising)
• Right to Non-Discrimination: For exercising rights
• Right to Limit: Use of sensitive personal information

We don't sell personal information. We "share" for analytics/ads per CCPA definition. To opt-out, use the "Do Not Sell/Share" link in footer or email us.

12. EU/UK Specific Information

Data Controller: E6WeB, Huntsville, AL 35805, USA

EU Representative: [To be appointed if required]

DPO: Contact Form

Lead Supervisory Authority: [To be determined based on establishment]

13. Changes to This Policy

We may update this policy. Material changes will be notified via email or prominent website notice 30 days before effectiveness. Continued use constitutes acceptance.

14. Contact Us

Questions, concerns, or rights requests: