Last Updated: November 14, 2025
Effective Date: June 5, 2026
1. Introduction
Welcome to Griffin’s Web Services. We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.
2. Information We Collect
When you interact with Griffin’s Web Services, we may collect:
- Contact Information: Name, email address, and phone number when you submit forms or contact us.
- Technical Data: IP address, browser type, device information, and pages visited (via cookies when you consent).
- Usage Data: How you interact with our site, pages viewed, time spent, and referral sources (via cookies when you consent).
3. How We Use Your Information
- To provide and maintain our services
- To respond to your inquiries and requests
- To improve our website and user experience
- To analyze site performance and usage (with consent)
- To send marketing communications (with consent)
4. Third-Party Services
We rely on the following third-party data processors to operate our site. Where required, they process data under agreements that limit use to providing services to us:
- Formspree: Securely routes and processes submissions from our contact and quote forms (name, email, phone, and any message content you provide). Submissions are handled subject to Formspree’s Privacy Policy.
- Vercel: Website hosting and performance analytics (see below).
- Supabase: Stores chat assistant conversations (see the AI-Powered Features section below).
- OpenAI: Processes chat assistant prompts (see the AI-Powered Features section below).
- Calendly: Appointment scheduling (see below).
With your consent, we may additionally share information with:
- Google Translate: For website translation (functional cookies)
- Google Analytics: For site analytics (performance cookies, if enabled)
- Advertising Networks: Facebook, Google Ads (targeting cookies, if enabled)
We use Vercel for hosting. Vercel Analytics and Speed Insights are enabled on this site and automatically collect the following on every page load — without cookies and without your name or email address:
- Web performance metrics (page load time, Core Web Vitals)
- Browser type and device category
- Country-level approximate location (derived from IP; IP address is not stored)
- Referring URL and page path
This data is used solely to monitor and improve site performance. It cannot be used to identify you individually. There is no opt-out for Vercel Analytics as it operates at the infrastructure level with no personal data collected. For details, see Vercel’s Privacy Policy.
AI-Powered Features (OpenAI)
Our website offers a Website Chat Assistant powered by the OpenAI API:
- What is sent to OpenAI: When you interact with the chat assistant, the messages you type are sent to OpenAI’s servers to generate responses. This data is processed by OpenAI subject to their Privacy Policy and Terms of Use. We do not use your inputs to train AI models.
- What we store: Your conversation (the messages you send and the assistant’s replies) is stored on our infrastructure (Supabase) under a random, per-visit session identifier so we can maintain conversation context and improve support. It is not linked to your name, email, or IP address unless you choose to type such details into the chat. Please avoid sharing sensitive personal information in the chat.
We use OpenAI’s gpt-4o-mini model (and text-embedding-3-small for retrieving relevant site content) and apply rate limiting and input validation to minimize unnecessary data transmission. By using this feature, you acknowledge that your inputs are processed by OpenAI and stored as described above.
Appointment Scheduling (Calendly)
We use Calendly to facilitate call bookings. When you click “Book a Free Call” or schedule an appointment, you are directed to Calendly’s platform. Any information you provide during scheduling (name, email, availability) is collected and stored by Calendly subject to their Privacy Policy and Terms of Use. We receive your booking details via Calendly’s notification system.
5. Cookies & Tracking
We use cookies and similar technologies to enhance your experience. You can manage your cookie preferences at any time. For full details, see our Cookie Policy.
6. California Privacy Rights (CCPA)
Do Not Sell or Share My Personal Information
What Does "Sale" or "Sharing" Mean?
Under California law (CCPA/CPRA), "sale" or "sharing" means making your personal information available to third parties in exchange for anything of value, including for advertising or analytics purposes.
What We Share
When you enable certain features, we may share data with:
- Google Translate — Translation services (functional cookies)
- Google Analytics — Site analytics (performance cookies)
- Advertising Networks — Facebook, Google Ads (targeting cookies)
Opt Out Now
Click below to instantly disable all non-essential cookies and stop data sharing:
Other Ways to Opt Out
Manage Individual Cookie Categories
Choose which types of cookies to enable or disable individually.
Use "Do Not Track" in Your Browser
Enable "Do Not Track" in your browser settings. We automatically honor this signal.
How to enable Do Not Track →
- Chrome: Settings → Privacy and security → "Do Not Track"
- Firefox: Settings → Privacy & Security → "Do Not Track"
- Safari: Preferences → Privacy → "Ask websites not to track me"
- Edge: Settings → Privacy → "Do Not Track"
Your California Privacy Rights
If you're a California resident, you have these rights:
- Right to Know: Request disclosure of what personal information we've collected about you in the past 12 months.
- Right to Delete: Request deletion of your personal information, subject to certain exceptions.
- Right to Opt-Out: Stop the sale or sharing of your personal information (use the button above).
- Right to Correct: Request correction of inaccurate personal information.
- Right to Non-Discrimination: We won't discriminate against you for exercising your rights. Same service, same pricing.
Categories of Personal Information We Collect
- Identifiers: Name, email address, IP address
- Internet Activity: Pages visited, clicks, browsing behavior
- Geolocation: Approximate location derived from IP address
- Sensitive Information: We do NOT collect SSN, financial data, or health information
How to Exercise Your Rights
To request access to your data, request deletion, or ask questions about your privacy:
Contact Us
- Method: Use our contact form
- Request Type: Start your message with "CCPA Request - [Right to Know/Delete/Correct]"
- Include: Your name, email, and description of your request
- Response Time: We'll respond within 45 days
⚠️ Verification Required
To protect your privacy, we must verify your identity before processing requests. We may ask you to confirm recent interactions with our site or provide additional identifying information. Authorized agents must provide proof of authorization.
7. European Privacy Rights (GDPR/UK GDPR)
Griffin’s Web Services LLC is based in New Jersey, United States, and offers its services to visitors worldwide, including the European Economic Area (EEA), the United Kingdom, and Switzerland. If you are located in one of these regions, the following applies to you.
Legal Bases for Processing
We process your personal data under one or more of the following lawful bases:
- Consent — for analytics, marketing, and non-essential cookies (which you may withdraw at any time via our cookie settings).
- Legitimate interests — to operate, secure, and improve our website and to respond to inquiries, balanced against your rights.
- Performance of a contract / pre-contractual steps — when you contact us or request a quote for our services.
Your Rights
Subject to applicable law, you have the right to access, correct, delete, restrict, or object to the processing of your personal data; the right to data portability; and the right to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, use our secure contact form (see the Contact section below). We will respond within one month, as required by the GDPR.
International Data Transfers
Because we operate from the United States, personal data you provide is transferred to and processed on servers located in the United States and by US-based processors, including Formspree, Vercel, Supabase, and OpenAI. These countries may not offer the same level of data protection as your home country. Where required, such transfers are carried out under appropriate safeguards, such as the European Commission’s Standard Contractual Clauses. By using our site or submitting information to us, you acknowledge that your data will be transferred to and processed in the United States.
Data Retention
We keep personal data only as long as necessary for the purposes described in this policy or as required by law, after which it is deleted or anonymized. You may request deletion of your data at any time through our contact form.
8. Children’s Privacy
Our website and services are intended for businesses and adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us through our secure contact form and we will delete it.
9. Data Security
We implement reasonable technical and organizational measures to protect your data against unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the Internet is 100% secure.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised “Effective date.” We encourage you to review this policy periodically. Your continued use of our services after any changes indicates your acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact us:
- Location: Freehold, New Jersey, United States
- Contact: Use our contact form