Privacy Policy

Effective Date: June 20th, 2025

1. Overview

Broken Duck Media ("we", "our", or "us") respects your privacy and is committed to protecting personal information you provide through our website, chatbot, forms, and services. This Privacy Policy outlines how we collect, use, store, and protect your data.

2. Information We Collect

We collect the following types of data, either directly or automatically:

• IP address & device information – collected automatically via web analytics and server logs.
• Contact form submissions – name, email, organization, message content.
• AI chatbot interactions – messages entered, response context, and timing metadata.
• Cookies & tracking data – browser preferences, usage analytics, referral headers.
• Third-party tools – integrated analytics, CRM, and cloud services (e.g., Google, Vercel).

3. How We Use Your Information

Your data may be used for the following purposes:

• To provide, improve, and personalize our website and services
• To respond to inquiries or support requests
• To deliver chatbot and AI functionality
• To analyze usage patterns and optimize content
• To detect, prevent, or address fraud, abuse, or technical issues
• To comply with legal obligations and enforce our policies
• For internal business intelligence and service planning

4. Cookies & Tracking Technologies

We use cookies and similar tracking tools to enhance your experience and measure engagement. You may manage cookie preferences through your browser settings. Some services may be limited if cookies are disabled. For full details, please refer to our Cookies Policy.

5. Legal Bases for Processing (GDPR)

For users in the European Economic Area, our processing of personal data is based on:

• Consent – e.g., when submitting forms or using the chatbot
• Contractual necessity – to provide requested services
• Legitimate interests – service security, performance, and improvement
• Legal obligation – when required to comply with applicable laws

6. Data Sharing & Disclosure

We do not sell your personal information. However, we may share data with trusted service providers who support our operations. These may include cloud platforms, analytics providers, email processors, and IT partners. Data may be accessed or processed outside your jurisdiction depending on our technical stack.

7. Data Retention

We retain personal data indefinitely unless deletion is requested or required by law. This allows us to analyze long-term patterns, preserve logs, and maintain service history. You may request deletion by contacting us.

8. Security Measures

We use a combination of technical and organizational safeguards to protect your data:

• Secure server infrastructure with HTTPS/SSL
• Role-based data access controls
• Routine system monitoring and audit logging
• Vendor compliance with data protection best practices

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Request access to your personal data
• Request correction or deletion of inaccurate or outdated data
• Object to processing or withdraw consent
• Request data portability
• File a complaint with a regulatory authority

To exercise your rights, contact admin@brokenduckmedia.com. We may require identity verification before fulfilling your request.

10. CCPA Disclosure (California Residents)

If you are a California resident, you are entitled to the following under the California Consumer Privacy Act (CCPA):

• The right to know what personal data we collect and why
• The right to request deletion of your data
• The right to opt out of any sale of your data (we do not sell data)
• The right to equal service and price regardless of privacy choices

To submit a CCPA request, contact us via email. We will respond within 45 days as required by law.

11. International Transfers

We may store or process your information on servers located outside of your country of residence. Where required, we implement safeguards such as Standard Contractual Clauses or service provider agreements to ensure adequate data protection.

12. Children's Privacy

We do not knowingly collect or solicit personal data from children under 13. If we learn that we have collected such data without verified parental consent, we will delete it promptly. Parents or guardians may contact us with any concerns.

13. Updates to This Policy

We may revise this Privacy Policy periodically to reflect changes in our practices, technologies, or legal obligations. The latest version will always be posted on this page with an updated effective date.

14. Contact Information

For questions about this Privacy Policy or your personal data, contact us at:

Email: admin@brokenduckmedia.com