01Who we are
Its On Media LLC (“Its On Media”, “we”, “us”) is a software and web development company based in Fresno, California. This policy explains how we handle personal information collected through itsonmedia.com, including our blog at itsonmedia.com/blog, and when you contact us by email, phone or WhatsApp.
If you become a client, the agreement we sign with you may include additional terms about data, including any data we handle on your behalf while building your product. Where it does, that agreement takes precedence over this policy.
02Information you give us
You choose what to share with us. Depending on how you get in touch, that can include:
- Contact form: your name, email address, phone number, company, the type of project and its stage, and your message.
- “Get started” form: your name, email address and phone number, then, if you choose, the kind of help you need, your timeline and any notes.
- Cost estimate calculators: your name, email address and phone number, the project details you select (such as product type, features, technology preferences and design approach) and the estimate range shown to you.
- Booking a call: if you schedule a call through the Calendly calendar on our site, Calendly collects your name, email address and booking details and shares them with us.
- Email, phone and WhatsApp: whatever you include in your message.
Please don’t send sensitive information, such as health records, financial account numbers or government ID details, through our forms. If your project involves sensitive data, we’ll agree a secure way to handle it, under a signed NDA if you’d like.
03Information collected automatically
- With each form submission we record your IP address and your browser’s user agent (a short text that identifies your browser and type of device). We use these to block spam and abuse.
- Usage information such as the pages you view, how you arrived and how you interact with them, collected by the analytics and session recording tools described in section 5.
- Security information. Our website is delivered and protected by Cloudflare, which processes technical details of each visit, such as your IP address and browser, to serve pages and stop attacks. Our forms also use Cloudflare Turnstile, which checks signals from your browser to tell people apart from automated bots.
04How we use information
- To reply to your enquiry and talk with you about your project.
- To prepare estimates and proposals and, if you become a client, to deliver our services, invoice you and receive payment.
- To send you a confirmation that we received your message, and to notify our team about it.
- To understand how visitors use our site, so we can improve it.
- To keep our site and forms secure, and to prevent spam, fraud and abuse.
- To meet our legal obligations and protect our rights.
We don’t use your information to make automated decisions that have legal or similarly significant effects on you.
05Analytics and session recording
We use three tools to understand how people use our site:
- Google Analytics, loaded through Google Tag Manager, measures visits, pages viewed, how you found us, your device and browser, and your approximate location (city or country, worked out from your IP address). See Google’s Privacy Policy. You can opt out with the Google Analytics opt-out browser add-on.
- Hotjar records how visitors interact with our pages, including clicks, taps, mouse movements and scrolling, as session recordings and heatmaps. See Hotjar’s Privacy Policy.
- Microsoft Clarity provides session recordings and heatmaps in the same way. See the Microsoft Privacy Statement.
Hotjar and Microsoft Clarity mask the text you type into form fields, so recordings don’t capture what you enter in our forms. These tools use cookies and similar technologies (see section 6). You can block them with your browser’s privacy settings or a content blocker, and you can still use our site and contact us if you do.
06Cookies and browser storage
Our own website code doesn’t set cookies. It stores one small value in your browser’s session storage so the opening animation only plays once per visit; your browser deletes it when you close the tab.
Cookies on our site come from the third-party services described in this policy: Google Analytics, Hotjar and Microsoft Clarity; Cloudflare, for security; Calendly, when its booking calendar loads; and Google Maps, on our contact page. Our blog runs on WordPress, which may set its own functional cookies, for example if you leave a comment.
You can view, block or delete cookies in your browser settings. Blocking some of them may stop features such as the map or the booking calendar from loading.
07Service providers
We use trusted providers to run our website and business. They handle information only to provide their services to us, under their own privacy terms:
- Cloudflare: website delivery, security and the bot check on our forms.
- Google: analytics, the map on our contact page, and the email system we use to send and receive messages.
- Hotjar and Microsoft (Clarity): session recordings and heatmaps.
- Calendly: scheduling calls.
- Stripe and PayPal: processing payments from clients.
- Our hosting provider: hosting our website, the system that receives form submissions, and its database.
08How we share information
We don’t sell or rent your personal information. We share it only:
- with the members of our team who need it to respond to you or work on your project;
- with the service providers listed in section 7;
- with professional advisers, such as lawyers and accountants, who are bound by confidentiality;
- when the law requires it, for example to respond to a court order, or when needed to protect the rights, property or safety of us, our clients or others;
- as part of a merger, acquisition or sale of our business, in which case the information would remain protected in line with this policy.
09How long we keep it
We keep enquiry and project information for as long as we need it to respond to you and manage any working relationship, and afterwards for as long as reasonably needed for record keeping, legal and accounting purposes. Analytics and session recording data is kept according to each tool’s retention settings. You can ask us to delete your information sooner (see section 11).
10How we protect it
- Our site is served over an encrypted HTTPS connection.
- Form submissions are stored in a database that only authorized team members can reach, through a password-protected admin system.
- Our forms are protected against spam and abuse with bot checks and limits on how often they can be submitted.
No method of storing or transmitting data is completely secure, but we work to protect your information. If you think it may have been compromised, please contact us.
11Your choices and rights
Depending on where you live, you may have the right to:
- know what personal information we hold about you and get a copy of it;
- correct information that’s inaccurate;
- have your information deleted;
- receive your information in a portable format;
- object to, or ask us to restrict, certain uses of your information;
- withdraw your consent, where we rely on it.
To make a request, email [email protected] with “Privacy request” in the subject line. We’ll need to confirm it’s you, usually by asking you to reply from the email address you used with us. We’ll respond within the time the law requires, and we won’t treat you differently for exercising your rights. To opt out of analytics and session recording, see sections 5 and 6.
12California residents
If you live in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the rights described in section 11, including the right to know, delete and correct your personal information, and the right not to be discriminated against for using them. In the past 12 months we have collected these categories of personal information:
- Identifiers: name, email address, phone number and IP address.
- Commercial information: the project or services you’re interested in.
- Internet or other network activity: pages viewed and how you interact with our site.
- Approximate geolocation: worked out from your IP address.
We collect this information from you directly, automatically from your device, and from Calendly if you book a call, for the purposes in section 4. We disclose it to the service providers in section 7 for those business purposes. We do not sell or share your personal information, as those terms are defined in California law, and we don’t knowingly sell or share the information of anyone under 16. You can make a request yourself or through an authorized agent, using the contact details in section 17.
13Visitors outside the US
We’re based in the United States, and our service providers may process information in the US and other countries, where data protection laws may differ from those where you live. If you’re in the European Economic Area, the United Kingdom or Switzerland, you have the rights described in section 11, and we process your information on these legal bases:
- To take steps at your request before entering into a contract, such as replying to an enquiry or preparing an estimate;
- To perform a contract when you’re a client;
- Our legitimate interests in understanding and improving our site and keeping it secure;
- To meet our legal obligations.
You also have the right to complain to your local data protection authority.
14Children’s privacy
Our site and services are for businesses and aren’t directed to children. We don’t knowingly collect personal information from children under 13, or under 16 where local law sets a higher age. If you believe a child has sent us information, please contact us and we’ll delete it.
15Links to other websites
Our site links to other websites, such as client projects in our case studies, our social media profiles and review sites. Their privacy practices are their own and aren’t covered by this policy, so please check their policies when you visit them.
16Changes to this policy
We may update this policy as our website, tools or the law change. When we do, we’ll change the “Last updated” date at the top of this page. If a change materially affects how we use information you’ve already given us, we’ll take reasonable steps to let you know.
17Contact us
Questions about this policy or your information? Get in touch:
