Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

When you use our website or contact us, we may collect:

• Contact Information: Name, email address, phone number, and business address
• Project Information: Service requirements, budget range, project details, and any other information you provide in contact forms
• Communication Records: Correspondence with our team, including emails, notes, and call records
• Account Information: If you create an account, we collect username, password (encrypted), and login history
• Payment Information: Billing address and payment details for processing transactions (processed securely through third-party payment processors)

1.2 Automatically Collected Information

When you visit our website, we automatically collect certain information:

• Device Information: IP address, browser type, operating system, device type
• Usage Data: Pages visited, time spent on pages, click patterns, referring website
• Cookies and Tracking: We use cookies and similar technologies (see Cookie Policy below)
• Location Data: General geographic location based on IP address to provide location-appropriate services

2. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To respond to inquiries, provide quotes, and deliver web development services
• Communication: To contact you about your project, send updates, and provide customer support
• Business Operations: To manage our CRM system, track leads, process payments, and improve our services
• Marketing: To send promotional materials about our services (you can opt-out at any time)
• Analytics: To understand how visitors use our website and improve user experience
• Legal Compliance: To comply with legal obligations and enforce our Terms of Service
• Security: To protect against fraud, unauthorized access, and other security risks

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We may share information with trusted third-party service providers who assist us in:

• Web hosting and infrastructure services
• Database management and cloud storage
• Email communication and marketing platforms
• Analytics and website performance monitoring
• Payment processing (all payment data is handled through PCI-compliant processors)
• Customer relationship management (CRM) systems

These providers are contractually obligated to keep your information secure and confidential and may only use it for the purposes we specify.

3.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Legal process (court orders, subpoenas, warrants)
• Government or regulatory requests
• Protection of our rights, property, or safety
• Investigation of fraud or security issues
• Enforcement of our Terms of Service

3.3 Business Transfers

If Diamondback Coding is involved in a merger, acquisition, or sale of assets, your information may be transferred to the new entity. You will be notified via email and/or a prominent notice on our website of any change in ownership or uses of your personal information.

4. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All passwords are hashed using bcrypt; sensitive data is encrypted in transit using HTTPS/TLS 1.2 or higher
• Access Controls: Limited employee access to personal data on a need-to-know basis with multi-factor authentication
• Secure Infrastructure: Our databases and servers use security best practices including firewalls, intrusion detection, and regular security audits
• Regular Updates: We keep our systems updated with the latest security patches
• Data Backups: Regular encrypted backups to prevent data loss

5. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this policy:

• Active Projects: Information is retained for the duration of your project plus 7 years for legal, accounting, and tax purposes
• Lead Information: Contact form submissions are retained for up to 3 years unless you request deletion
• Account Data: User accounts and associated data are retained until account deletion is requested or after 2 years of inactivity
• Legal Obligations: Some data may be retained longer to comply with legal or regulatory requirements
• Marketing Data: Marketing communications data is retained until you opt-out or for up to 2 years of inactivity

6. Your Privacy Rights

Depending on your location, you may have the following rights:

6.1 All Users

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Opt-Out: Unsubscribe from marketing communications at any time
• Data Portability: Request a copy of your data in a structured, commonly used format

6.2 California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to know what personal information is collected, used, shared, or sold and with whom
• Right to delete personal information (with exceptions for legal compliance)
• Right to opt-out of the sale or sharing of personal information (we do not sell personal information)
• Right to correct inaccurate personal information
• Right to limit the use and disclosure of sensitive personal information
• Right to non-discrimination for exercising your CCPA/CPRA rights

6.3 EU/UK Residents (GDPR)

If you are located in the European Union or United Kingdom, you have rights under GDPR:

• Right to access, rectify, erase, or restrict processing of your data
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority
• Right to not be subject to automated decision-making

6.4 Other State Privacy Rights

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with comprehensive privacy laws have similar rights. These may include rights to access, correct, delete, and obtain a copy of personal information, as well as to opt-out of certain processing activities.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30-45 days depending on your jurisdiction.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

7.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality (e.g., authentication, session management, security)
• Analytics Cookies: Help us understand how visitors use our website (e.g., page views, traffic sources, user behavior)
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Track visitors across websites to display relevant advertisements (we obtain consent where required)

7.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Note that disabling cookies may affect website functionality and your user experience. You can learn more about managing cookies at www.aboutcookies.org.

7.3 Do Not Track

Some browsers have "Do Not Track" features. Currently, no uniform technology standard for recognizing and implementing Do Not Track signals has been finalized. We do not currently respond to Do Not Track signals.

8. Third-Party Links

Our website may contain links to third-party websites, including client portfolio sites, partner services, and social media platforms. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal information.

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe we have collected information from a child, please contact us immediately at [email protected], and we will delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws. For EU/UK residents, we use Standard Contractual Clauses approved by the European Commission for international data transfers.

11. Payment Processing

We use third-party payment processors to handle all payment transactions. We do not store complete credit card information on our servers. Payment information is encrypted and processed in accordance with Payment Card Industry Data Security Standard (PCI-DSS) requirements. Our payment processors include:

• Stripe (for credit card processing)
• PayPal (for alternative payment methods)

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Changes will be posted on this page with an updated "Last Updated" date. Significant changes will be communicated via:

• Email notification to registered users
• Prominent notice on our website
• In-app notification (if applicable)

Your continued use of our services after changes constitute acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

---