Privacy Policy

Overview

This Privacy Policy explains how Pinn.Media (“Pinn.Media”, “we”, “us”, “our”) collects, uses, discloses, and protects personal information when you visit pinn.media (the “Site”), contact us, or engage our services. It also describes the rights you may have and how to exercise them.

By using the Site you acknowledge that you have read and understood this Policy. If you do not agree with it, please do not use the Site. Your use of the Site is also governed by our Terms of Service.

For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, Pinn.Media is the “controller” of the personal information described here.

Who we are and how to reach us

Pinn.Media maintains a registered address at 30 N Gould St, Ste 43324, Sheridan, WY 82801, USA, and operates studios in Allen, Texas; London, United Kingdom; and Lahore, Pakistan.

For any privacy question, or to exercise a right described in this Policy, contact privacy@pinn.media. For general enquiries, contact info@pinn.media.

Information we collect

Information you provide to us. Your name, email address, phone number, company, role, and anything you choose to include in a message, contact form, booking request, project brief, review, or job application. If you create and send an image through Pinn.Paint, we receive that image and any note attached to it.

Information collected automatically. When you visit the Site, we and our analytics providers may collect device and usage data, including your IP address, browser and device type, operating system, language, referring and exit pages, pages and content viewed, links and buttons clicked, dates and times of access, and approximate location derived from your IP address. We and Microsoft Clarity may also record anonymized session replays and heatmaps of interactions (such as mouse movement, scrolling, and clicks) to understand and improve usability.

Information from third parties. We may receive information from the analytics, advertising, scheduling, and CRM providers listed below, and from public sources or referrals, to the extent permitted by law.

We do not intentionally collect special-category or sensitive personal information (such as government identifiers, health, or financial-account data) through the Site, and we ask that you not send it to us through the Site's forms, chat, or Pinn.Paint.

Cookies and similar technologies

We use cookies and similar technologies (including pixels, local storage, and session-replay scripts) for three purposes: to make the Site work (strictly necessary), to understand how it is used (analytics), and to operate our booking, form, and chat tools.

Google Analytics (provided by Google) measures traffic and how visitors use the Site. Google may process this data in the United States. You can opt out using Google's browser add-on at tools.google.com/dlpage/gaoptout.

Microsoft Clarity (provided by Microsoft) captures anonymized analytics, heatmaps, and session recordings. Clarity does not capture the contents of password fields.

GoHighLevel / LeadConnector powers our booking calendar, contact form, and live chat, and sets cookies needed for those tools to function and to process the details you submit through them.

You can accept or decline non-essential cookies through the banner shown on the Site, and you can control cookies through your browser settings. Declining non-essential cookies does not prevent you from booking, emailing, or chatting with us. Where required, we honor the Global Privacy Control (GPC) browser signal.

How we use information

We use personal information to: respond to you and provide the information or service you request; schedule, deliver, and administer projects and communicate about them; operate, maintain, secure, debug, and improve the Site and our services; personalize your experience; send service and administrative messages; carry out analytics and measure performance; prevent, detect, and investigate fraud, abuse, and security incidents; establish, exercise, or defend legal claims; and comply with applicable law.

We do not use your information to make solely automated decisions that produce legal or similarly significant effects on you.

Legal bases for processing (GDPR / UK GDPR)

Where the GDPR or UK GDPR applies, we rely on one or more of the following legal bases: your consent (for non-essential cookies and analytics, and where you volunteer information by contacting us); performance of a contract, or steps taken at your request before entering into one; our legitimate interests in operating, securing, analyzing, and improving our business and the Site, balanced against your rights and freedoms; and compliance with a legal obligation. Where we rely on consent, you may withdraw it at any time without affecting processing already carried out.

How we disclose information

Service providers (processors). We share personal information with vendors that help us run our business — including analytics (Google, Microsoft), CRM, scheduling, communications, email, and hosting providers — only as needed for them to perform services for us and under contracts that require them to protect it.

Legal and safety. We may disclose information where we believe in good faith it is necessary to comply with law, regulation, legal process, or a governmental request; to enforce our Terms of Service or other agreements; or to protect the rights, property, safety, or security of Pinn.Media, our users, or others.

Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy.

Aggregated or de-identified data. We may create and use aggregated or de-identified information, which is not personal information, for any lawful purpose.

We do not sell your personal information for money.

International transfers

We operate from the United States and work with studios and providers in the United States, the United Kingdom, and Pakistan, so your information may be transferred to, stored in, and processed in countries other than your own, whose data-protection laws may differ from those where you live. Where required for transfers from the EEA or UK, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses and the UK Addendum. You may request a copy of the relevant safeguards by emailing privacy@pinn.media.

Data retention

We keep personal information only for as long as necessary for the purposes described in this Policy — to deliver and administer your project, maintain business, accounting, and tax records, resolve disputes, and enforce our agreements — after which we delete, anonymize, or securely archive it. Analytics data is retained according to our providers' default retention periods. Retention periods vary with the type of information and the reason we hold it.

Data security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, and alteration. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot and do not guarantee the absolute security of your information. You provide information to us at your own risk, and you are responsible for keeping any credentials you use confidential.

Your rights (EEA / UK)

If you are in the EEA or UK, you may have the right to: access the personal information we hold about you; have it corrected or erased; restrict or object to our processing; receive it in a portable format; and, where processing is based on consent, withdraw that consent. To exercise any of these rights, email privacy@pinn.media; we may need to verify your identity before responding. You also have the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office).

Your rights (California — CCPA / CPRA)

If you are a California resident, you have the right to know the categories and specific pieces of personal information we collect, use, and disclose; to access and delete your personal information; to correct inaccurate personal information; and to opt out of the “sale” or “sharing” of personal information and to limit the use of sensitive personal information.

In the past 12 months we may have collected the following categories of personal information: identifiers (such as name, email, phone, IP address); commercial information (such as services enquired about); internet or other electronic network activity (such as browsing and interaction data); approximate geolocation (from IP); professional or employment information (such as company and role); and inferences drawn from the above. We collect this to operate and improve the Site and to provide our services, as described above.

We do not sell personal information for money. Some analytics or advertising cookies may constitute “sharing” under the CPRA; you may opt out through our cookie banner, and we honor the Global Privacy Control (GPC) signal. We will not discriminate against you for exercising your rights. You may use an authorized agent to submit a request. To make a request, email privacy@pinn.media.

Your rights (other U.S. states)

Residents of certain other U.S. states (including Virginia, Colorado, Connecticut, Utah, Texas, and others) may have rights to access, correct, delete, or obtain a copy of their personal information, and to opt out of targeted advertising or certain profiling. To exercise these rights, or to appeal a decision on a request, email privacy@pinn.media.

Children's privacy

The Site is not directed to children, and we do not knowingly collect personal information from anyone under 16 (or under 13 in the United States). If you believe a child has provided us personal information, contact privacy@pinn.media and we will delete it.

Third-party sites

The Site may link to, embed, or display third-party websites, tools, and client work. We do not control and are not responsible for the content or privacy practices of those third parties. Their own privacy policies govern your interactions with them.

Changes to this Policy

We may update this Policy from time to time. The “last updated” date shown with this Policy reflects the current version, and material changes take effect when posted. Your continued use of the Site after an update constitutes acceptance of the revised Policy.

Contact

For any privacy question or request, contact privacy@pinn.media. For general enquiries, contact info@pinn.media.