PRIVACY POLICY

Information We Collect

What you provide directly

When you fill out our contact form, we collect your first name, last name, email address, company name, the services you indicate interest in, and the message you write.

When you book a consultation, we collect your name, email address, the time you select, and any notes you provide.

When you create a member account, we collect your email address, your password (stored only in encrypted form by our authentication provider), and any profile information you choose to add.

What we collect automatically

When you visit the Site, your browser automatically sends us technical information including your IP address, browser type, device type, operating system, the website you came from, the pages you view, and the time of your visit.

We use Google Analytics 4 to understand how visitors use the Site. Google Analytics sets cookies and collects information about your interactions, including pages viewed, time spent on each page, links clicked, and engagement events. We do not enable Google Analytics advertising features, demographic data, or cross-site tracking.

IP addresses for security

We log IP addresses of contact form submissions solely to prevent spam and abuse through rate limiting. We do not link these records to your identity and we do not use them for any other purpose.

How We Use Your Information

We use the information we collect to:

• Respond to your inquiries
• Schedule and conduct consultations
• Provide services under any engagement we form with you
• Operate and maintain your member account, if you have one
• Understand how the Site is used and improve its performance
• Detect, prevent, and respond to fraud, abuse, and security incidents
• Comply with our legal obligations

How We Share Your Information

We do not sell your personal information. We do not share it with advertisers or marketing partners.

We do use trusted third-party service providers to operate the Site and our business. These providers process information on our behalf under their own privacy and security obligations:

• Supabase — database hosting and storage
• Clerk — user authentication and account management
• Resend — transactional email delivery
• Cal.com — appointment scheduling
• Microsoft 365 — business email hosting
• Google Analytics — site usage analytics
• Google Search Console — search performance monitoring

We may also disclose information if required by law, in response to valid legal process, or to protect the rights, property, or safety of Iconic Ideation, our customers, or others.

Cookies and Similar Technologies

We use a small number of cookies and similar technologies:

• Essential cookies set by our authentication provider keep you signed in when you have a member account.
• Analytics cookies set by Google Analytics help us understand site usage. They do not personally identify you.

We do not use cookies for advertising or cross-site tracking. You can disable cookies in your browser settings, though doing so may affect features that depend on them, such as staying signed in.

Data Retention

We retain the information we collect indefinitely, until you request deletion. To request deletion, email us at the address listed below. We will fulfill verified deletion requests within a reasonable time.

Data Security

We protect your information with industry-standard safeguards, including encryption in transit, access controls, and reputable service providers. No system is perfectly secure, and we cannot guarantee absolute security of information transmitted to or stored by us.

Your Rights

You may request that we:

• Provide a copy of the information we hold about you
• Correct any inaccurate information
• Delete your information entirely

To make a request, email us at privacy@iconicideation.com. We may need to verify your identity before fulfilling certain requests, and we will respond within a reasonable time.

International Users

We currently offer our services to clients located in the United States. The Site is hosted in the United States, and we process information in the United States. If you access the Site from outside the United States, your information will be transferred to and processed in the United States.

Children's Privacy

The Site is not intended for children under 13, and we do not knowingly collect information from children under 13. If you believe a child has provided us with information, contact us and we will remove it.

Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, our services, or applicable law. We will update the "Last updated" date at the top of this page when we do. We will communicate material changes more prominently.

Contact Us

For questions about this Privacy Policy or to exercise any of your rights, contact us: