Privacy Policy

Last updated: January 1, 2025 • Effective: January 1, 2025

1. Who We Are

Copywriting Keeper is a digital copywriting agency operating as a sole proprietorship under the laws of the State of Illinois. Our principal place of business is 12745 S May Street, Calumet Park, Illinois 60827, United States of America. We operate the website located at copywritingkeeper.com and deliver professional copywriting services entirely in digital format.

For the purposes of this Privacy Policy, "Copywriting Keeper," "we," "us," and "our" refer to the business entity described above. "You," "your," and "Client" refer to any individual or organization that visits our website, contacts us, or purchases our services.

We can be reached regarding privacy matters at: hello@copywritingkeeper.com, by telephone at (708) 897-4613, or by postal mail at the address above.

2. Scope of This Policy

This Privacy Policy applies to all personal information we collect through:

• Our website at copywritingkeeper.com and all subpages
• Our contact forms, inquiry forms, and checkout flows
• Email correspondence and telephone communications you initiate with us
• Project briefing documents, discovery sessions, and client onboarding processes
• The custom package builder and pricing tools on our website

This policy does not apply to third-party websites we link to. Those sites have their own privacy policies and we have no control over their data practices.

3. Information We Collect

3.1 Information You Provide Directly

We collect information you give us when you interact with our website or engage our services. This includes:

• Contact information: First name, last name, email address, phone number, and country, collected at checkout and via our contact form.
• Business information: Company name, website URL, industry, and target audience details shared during our project briefing process.
• Project materials: Documents, brand guidelines, competitor research, audience data, and other business content you share during a copywriting engagement.
• Communications: The content of emails, support messages, chat widget messages, and any other correspondence you send to us.
• Payment intent: Your choice of package, add-ons, and total order amount passed to Stripe for processing. We do not receive or store card numbers, CVV codes, or bank account details -- all payment card data is handled exclusively by Stripe, Inc.

3.2 Information Collected Automatically

When you visit copywritingkeeper.com, our web server automatically records certain information including:

• Your IP address and approximate geographic location derived from it
• Browser type and version (e.g., Chrome 120 on macOS)
• Operating system and device type
• Referring URL (the page that sent you to our site)
• Pages visited, in what order, and at what time
• Session duration and interaction patterns
• HTTP request and response data logged by our web server

This data is collected through standard web server log files and, if you consent to analytics cookies, through anonymized analytics tools. It helps us understand how visitors use our site and identify technical issues.

3.3 Cookies and Local Storage

We use cookies and browser localStorage to support basic website functionality and remember your consent preferences. See our Cookie Policy for a complete description of every cookie and localStorage item we set. In brief:

• We store your cookie consent choice in localStorage under the key ckw_consent.
• If you accept cookies, anonymized session data may be collected by our analytics provider.
• Stripe sets its own cookies during the payment checkout process for fraud prevention and session management. These are governed by Stripe's Privacy Policy.

3.4 Information from Third Parties

We do not purchase third-party data lists. The only external information we may receive about you comes from Stripe in the form of payment confirmation metadata (order ID, payment status, currency, and amount) which we use to confirm and fulfill your order.

4. How We Use Your Information

We use the information described above for the following purposes:

• Service fulfillment: To accept, process, and deliver copywriting orders you have paid for.
• Communication: To send order confirmations, project briefs, draft deliverables, revision files, and final deliverable emails.
• Discovery and briefing: To schedule and conduct your discovery session and produce a confirmed project brief before writing begins.
• Customer support: To respond to inquiries, revision requests, and any complaints or disputes related to your order.
• Invoicing and recordkeeping: To generate order records, receipts, and maintain financial records as required by applicable law.
• Website improvement: To understand how visitors navigate and use our site, which pages are most useful, and where drop-off occurs.
• Legal compliance: To comply with applicable federal, state, and local laws, including tax filing obligations, court orders, and regulatory requirements.
• Fraud prevention: To identify and prevent fraudulent orders, chargebacks, or unauthorized use of our services.
• Portfolio and case studies: To reference anonymized engagement results (such as conversion rate improvements or traffic growth) for our portfolio, unless a written NDA is in place that restricts this.

We do not use your information for automated profiling or for making decisions about you that produce legal effects without human involvement.

5. Legal Basis for Processing

We process personal data under the following legal bases where applicable:

• Performance of a contract: Processing your name, email, payment details, and project brief is necessary to deliver the copywriting services you have purchased.
• Legitimate interests: Web server logs, fraud prevention, and portfolio case studies are based on our legitimate business interests, balanced against your rights.
• Legal obligation: Retaining financial records and complying with tax law.
• Consent: Analytics cookies, where applicable, are set only upon your affirmative consent via our cookie banner.

6. Sharing Your Information

We do not sell, rent, or trade your personal information to third parties. We share personal data only to the extent necessary for operating our business:

• Stripe, Inc.: Processes all payment card transactions on our behalf. Stripe is PCI DSS Level 1 compliant. When you click "Pay via Stripe," you are redirected to Stripe's hosted checkout where Stripe's privacy policy applies. We receive back only a payment confirmation and order metadata -- not your card details.
• Web hosting and server providers: Our website is hosted on servers that process HTTP requests and store web server logs. Our hosting provider has access to technical log data as part of operating the server infrastructure.
• Email service providers: We use standard email services to communicate with you. Email content passes through our provider's servers in transit.
• Legal and regulatory authorities: If required by law, court order, subpoena, or regulatory demand, we may disclose personal data. We will notify you to the extent we are legally permitted to do so.
• Business transfer: In the event of a merger, acquisition, or sale of business assets, client data may be transferred to a successor entity. We would notify affected clients before data is transferred and before it becomes subject to a different privacy policy.

All service providers we engage are bound by confidentiality obligations and are prohibited from using your data for any purpose beyond the service they provide to us.

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

• Project files and deliverables: Retained for 3 years following project completion, then securely deleted unless you request earlier deletion or ongoing retention is required by law.
• Contact form submissions: Retained for 12 months from the date submitted, then purged unless an engagement was initiated.
• Financial records and payment confirmations: Retained for 7 years as required by US federal and Illinois state tax law.
• Web server logs: Standard server logs are retained for 90 days then automatically overwritten.
• Email correspondence: Email threads related to active or completed projects are retained for 3 years. General inquiries that did not result in an engagement are retained for 12 months.
• Cookie consent records: Your consent preference is stored in your browser's localStorage. It is not stored on our servers. You can clear it at any time through your browser settings.

8. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purposes for collection, and the categories of third parties with whom we share information.
• Right to Delete: You may request deletion of personal information we hold about you, subject to certain legal exceptions (such as our obligation to retain financial records).
• Right to Correct: You may request correction of inaccurate personal information we hold about you.
• Right to Opt Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising. No opt-out mechanism is required for this category.
• Right to Non-Discrimination: We will not deny you services, charge different prices, or provide a lower quality of service because you exercised any of these rights.

To exercise California privacy rights, submit a verifiable consumer request to hello@copywritingkeeper.com. We will respond within 45 days. We may need to verify your identity before fulfilling a deletion or access request.

9. Rights for Other Jurisdictions

Regardless of your location, we provide the following rights to all users:

• Access: Request a copy of personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of data, subject to legal retention requirements.
• Restriction: Request that we stop processing your data while a dispute is pending.
• Portability: Receive a copy of data you provided to us in a structured, commonly used format.
• Objection: Object to processing based on legitimate interests.

To exercise any of these rights, email hello@copywritingkeeper.com with "Privacy Request" in the subject line. We respond within 30 days for all users. For requests that require verification, we will take the minimum information necessary to confirm your identity before fulfilling the request.

10. Data Security

We take reasonable technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. Specifically:

• Our website is served over HTTPS (TLS) to encrypt data in transit between your browser and our server.
• Payment processing is handled exclusively by Stripe, which maintains PCI DSS Level 1 compliance -- the highest level of payment security certification.
• We do not store credit card numbers, CVV codes, bank account information, or any other raw payment card data on our servers at any point.
• Project files and client materials are stored in password-protected environments with limited access.
• We conduct periodic reviews of our data handling practices to identify and address potential vulnerabilities.

No method of transmission over the internet or method of electronic storage is completely secure. While we use commercially reasonable safeguards, we cannot guarantee absolute security. If we become aware of a security breach that affects your personal information, we will notify you as required by applicable law.

11. Children's Privacy

Our website and services are intended exclusively for individuals 18 years of age or older acting in a business capacity. We do not knowingly collect personal information from children under 13. If we discover that we have inadvertently collected information from a child under 13, we will delete it immediately. If you believe we may have collected information from a minor, please contact us at hello@copywritingkeeper.com.

12. Third-Party Links

Our website contains links to external websites including Stripe's hosted checkout, social media profiles, and resource links. Once you leave copywritingkeeper.com, this Privacy Policy no longer applies. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the content, privacy practices, or security of external sites.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes affecting how we use data you have already provided, we will provide additional notice via email where we have your email address on file. Continued use of our website after a policy update constitutes your acceptance of the revised terms.

14. How to Contact Us

For privacy inquiries, rights requests, or concerns about our data practices:

• Email: hello@copywritingkeeper.com (use subject line "Privacy Request")
• Phone: (708) 897-4613 (Monday to Friday, 9am to 5pm Central)
• Mail: Copywriting Keeper, 12745 S May Street, Calumet Park, IL 60827, USA

We aim to resolve all privacy inquiries within 30 days. For complaints that cannot be resolved directly, you may contact your state attorney general's office or, for California residents, the California Privacy Protection Agency (CPPA).