Skip to content

LegalPrivacy Policy

What we collect, why, who we share it with, and the choices you have.

Effective

On this page

What we collect

Who we are, what you give us, and what the site collects, cookies included.

1 to 5

What we collect

1.Who we are

Muffin Media LLC is a brand and performance marketing studio based in Stamford, Connecticut, USA, working with clients across the United States and India. We run this website, muffinmedia.co. In this policy, “we” and “us” mean Muffin Media LLC, and “you” means the person visiting the site or contacting us.

Questions about anything below go to business@muffinmedia.co.

2.What this policy covers

It covers this website and the enquiries you send us by form, email, phone, or a booking link.

It does not cover the data we handle for a client under a signed services agreement. When we run advertising, analytics, or reporting inside a client’s own accounts, the client decides what is collected and why, and the client’s own privacy policy governs it. We act on their instructions.

It does not cover sites and tools we link to. Those have their own policies.

3.Information you give us

You only give us information when you choose to. Depending on what you use, that is:

  • Call request form. Your name, email address, phone number and company website.
  • Market Report request form. Your name, email address, phone number and company website.
  • Booking a call. If you pick a time on our Calendly page: your name, email address, time zone, and the answers you enter there. That booking page is operated by Calendly.
  • Email or phone. Whatever you include in your message, including anything you attach.
  • Job applications. Whatever you send to our inbox, including your CV and the links in it.

We ask for the minimum we need to reply. Please do not send us sensitive personal information, patient or health records, or payment card details through this website.

4.Information collected automatically

  • Usage data. Pages viewed, time on page, the link or search that brought you, approximate location derived from your IP address, device type, browser, and operating system.
  • Server logs. Our hosting provider records requests, including IP address, for security, abuse prevention, and reliability.
  • Advertising measurement. If you arrive from one of our ads, the platform passes a click identifier so we can tell which campaign and which creative brought you.

5.Cookies and similar technologies

This site uses Google Tag Manager (container GTM-KPXTXHMT), Google Analytics 4 (measurement ID G-N9Z04WM624), Google advertising tags, and Microsoft Clarity (project m9wxl2906a, loaded through Tag Manager). They set cookies and read device identifiers. Clarity also records how visitors move through a page (clicks, scrolling and session replays), so we can see where a page is not working.

  • Strictly necessary. Needed to serve the site securely. These cannot be switched off from here.
  • Analytics. How the site is used, in aggregate, so we can improve pages that are not working.
  • Advertising. Measuring which ads produce enquiries, and showing our ads to people who have visited the site.

Your controls

There is no single agreed standard for Do Not Track browser signals, and this site does not currently respond to them automatically. Send us a request by email and we will act on it.

How we use it

Why we use it, who we share it with, and how long we keep it.

6 to 10

How we use it

6.How we use information

  • To answer your enquiry, prepare the Market Report you asked for, and follow up about it.
  • To provide our services and to run, secure, and improve this website.
  • To measure which pages and which ads bring qualified enquiries, and to improve both.
  • To send business email where you asked for it, or where the law allows contact with a business address. Every such email has an unsubscribe link.
  • To prevent fraud and abuse, and to debug problems.
  • To meet our legal, tax, and accounting obligations.

We do not use your information to make decisions about you by automated means that produce legal or similarly significant effects.

8.Who we share it with

We do not sell your personal information, and we do not exchange it for money or for cross-context behavioural advertising. We use a short list of providers who process data on our instructions:

  • Cloudflare. Website hosting and server logs.
  • Web3Forms. Delivery of website form submissions to our inbox, and the record of those submissions.
  • Google. Analytics, Tag Manager, and advertising measurement.
  • Microsoft. Clarity: how visitors use the site’s pages (clicks, scrolling, session replays).
  • Calendly. Call bookings, when you choose to book online.
  • Google Workspace. Our email and document storage.

We also disclose information to our professional advisers, to a buyer or successor if the business is sold or reorganised, and where the law or a valid legal request requires it.

9.International transfers

We operate from the United States and India, and most of our providers are in the United States. If you contact us from elsewhere, your information is transferred to and processed in those countries. Where the law requires a transfer safeguard, we rely on standard contractual clauses or an equivalent mechanism offered by the provider.

10.How long we keep it

  • Enquiries and the email around them. Up to three years from your last contact with us, unless you ask us to delete them sooner.
  • Analytics data. For the retention window set in Google Analytics, which is at most 14 months for user and event level data.
  • Clarity data. As Microsoft keeps it for Clarity: session replays for 30 days, heatmaps and dashboards for up to 13 months.
  • Job applications. Up to twelve months, unless you ask us to delete them sooner.
  • Records we must keep for tax or legal reasons. For the period the law sets.

Rights and contact

What you can ask for, how we protect it, and how to reach us.

11 to 15

Rights and contact

11.Your rights and choices

Depending on where you live, you may have the right to:

  • know what personal information we hold and get a copy of it
  • correct information that is wrong
  • delete information
  • opt out of targeted advertising, and of the sale or sharing of personal information
  • limit the use of sensitive personal information, which we do not ask for
  • withdraw consent you gave us
  • complain to your data protection regulator, and, under laws such as the Connecticut Data Privacy Act and the California Consumer Privacy Act, appeal a decision we make on your request

To use any of these, email business@muffinmedia.co and tell us what you want. We verify a request by replying to the email address we already hold for you. We answer within the time the law allows, which is usually 45 days for United States state requests and 30 days under the GDPR. We will not treat you differently or charge you for asking. An authorised agent may act for you with written proof.

12.Children

This site is for a business audience. We do not knowingly collect information from anyone under 16. If you believe a child has given us information, email us and we will delete it.

13.Security

Access to enquiry data is limited to the people at Muffin Media who need it, our accounts use two step verification, and data moves over encrypted connections. No system is perfect, which is why we ask you not to send confidential material through a web form.

14.Changes to this policy

We update this policy when the site changes or the law changes. The effective date at the top tells you which version you are reading. If a change is material, we will say so on this page.

15.Contact us

Muffin Media LLC, Stamford, Connecticut, USA.

Email business@muffinmedia.co. Phone +1 213 466 0589.

Read the Terms and Conditions