Privacy Policy

1. Who we are

Muffin Media LLC is a brand and performance marketing studio based in Stamford, Connecticut, USA, working with clients across the United States and India. We run this website, muffinmedia.co. In this policy, "we" and "us" mean Muffin Media LLC, and "you" means the person visiting the site or contacting us.

Questions about anything below go to business@muffinmedia.co.

2. What this policy covers

It covers this website and the enquiries you send us by form, email, phone, or a booking link.

It does not cover the data we handle for a client under a signed services agreement. When we run advertising, analytics, or reporting inside a client's own accounts, the client decides what is collected and why, and the client's own privacy policy governs it. We act on their instructions.

It does not cover sites and tools we link to. Those have their own policies.

3. Information you give us

You only give us information when you choose to. Depending on what you use, that is:

• Audit request form. Your name, your email address, and the monthly budget range you select.
• Free benchmark tool. Your first name, your city, your business type, and your email address.
• Email or phone. Whatever you include in your message, including anything you attach.
• Booking a call. Your name, email address, time zone, and the answers you enter in the booking form. That form is operated by TidyCal.
• Job applications. Whatever you send to our inbox, including your CV and the links in it.

We ask for the minimum we need to reply. Please do not send us sensitive personal information, patient or health records, or payment card details through this website.

4. Information collected automatically

• Usage data. Pages viewed, time on page, the link or search that brought you, approximate location derived from your IP address, device type, browser, and operating system.
• Server logs. Our hosting provider records requests, including IP address, for security, abuse prevention, and reliability.
• Advertising measurement. If you arrive from one of our ads, the platform passes a click identifier so we can tell which campaign and which creative brought you.

5. Cookies and similar technologies

This site uses Google Tag Manager (container GTM-KPXTXHMT), Google Analytics 4 (measurement ID G-N9Z04WM624), and Google advertising tags. They set cookies and read device identifiers.

• Strictly necessary. Needed to serve the site securely. These cannot be switched off from here.
• Analytics. How the site is used, in aggregate, so we can improve pages that are not working.
• Advertising. Measuring which ads produce enquiries, and showing our ads to people who have visited the site.

Your controls

• Block or delete cookies in your browser settings. The site still works without analytics cookies.
• Install the Google Analytics opt-out add-on at tools.google.com/dlpage/gaoptout.
• Change what Google uses for ads at myadcenter.google.com.
• Email us and we will apply an opt out to the data we hold about you.

There is no single agreed standard for Do Not Track browser signals, and this site does not currently respond to them automatically. Send us a request by email and we will act on it.

6. How we use information

• To answer your enquiry, prepare the audit or benchmark you asked for, and follow up about it.
• To provide our services and to run, secure, and improve this website.
• To measure which pages and which ads bring qualified enquiries, and to improve both.
• To send business email where you asked for it, or where the law allows contact with a business address. Every such email has an unsubscribe link.
• To prevent fraud and abuse, and to debug problems.
• To meet our legal, tax, and accounting obligations.

We do not use your information to make decisions about you by automated means that produce legal or similarly significant effects.

7. Our legal bases, where they apply

If you contact us from the United Kingdom, the European Economic Area, or another place with a comparable law, we rely on these bases:

• Contract, or steps before a contract. Replying to your enquiry and preparing work you asked for.
• Legitimate interests. Running and securing the site, measuring our marketing, and reaching business contacts, weighed against your rights.
• Consent. Analytics and advertising cookies where consent is required, and marketing email where consent is required. You can withdraw consent at any time.
• Legal obligation. Records we are required to keep.

8. Who we share it with

We do not sell your personal information, and we do not exchange it for money or for cross-context behavioural advertising. We use a short list of providers who process data on our instructions:

• Vercel. Website hosting and server logs.
• Web3Forms. Delivery of website form submissions to our inbox, and the record of those submissions.
• Google. Analytics, Tag Manager, and advertising measurement.
• TidyCal. Call bookings.
• Google Workspace. Our email and document storage.

We also disclose information to our professional advisers, to a buyer or successor if the business is sold or reorganised, and where the law or a valid legal request requires it.

9. International transfers

We operate from the United States and India, and most of our providers are in the United States. If you contact us from elsewhere, your information is transferred to and processed in those countries. Where the law requires a transfer safeguard, we rely on standard contractual clauses or an equivalent mechanism offered by the provider.

10. How long we keep it

• Enquiries and the email around them. Up to three years from your last contact with us, unless you ask us to delete them sooner.
• Analytics data. For the retention window set in Google Analytics, which is at most 14 months for user and event level data.
• Job applications. Up to twelve months, unless you ask us to delete them sooner.
• Records we must keep for tax or legal reasons. For the period the law sets.

11. Your rights and choices

Depending on where you live, you may have the right to:

• know what personal information we hold and get a copy of it
• correct information that is wrong
• delete information
• opt out of targeted advertising, and of the sale or sharing of personal information
• limit the use of sensitive personal information, which we do not ask for
• withdraw consent you gave us
• complain to your data protection regulator, and, under laws such as the Connecticut Data Privacy Act and the California Consumer Privacy Act, appeal a decision we make on your request

To use any of these, email business@muffinmedia.co and tell us what you want. We verify a request by replying to the email address we already hold for you. We answer within the time the law allows, which is usually 45 days for United States state requests and 30 days under the GDPR. We will not treat you differently or charge you for asking. An authorised agent may act for you with written proof.

12. Children

This site is for a business audience. We do not knowingly collect information from anyone under 16. If you believe a child has given us information, email us and we will delete it.

13. Security

Access to enquiry data is limited to the people at Muffin Media who need it, our accounts use two step verification, and data moves over encrypted connections. No system is perfect, which is why we ask you not to send confidential material through a web form.

14. Changes to this policy

We update this policy when the site changes or the law changes. The effective date at the top tells you which version you are reading. If a change is material, we will say so on this page.

15. Contact us

Muffin Media LLC, Stamford, Connecticut, USA.

Email business@muffinmedia.co. Phone +1 213 466 0589.