Privacy policy

C40 Digital (“we,” “us,” or “our”) operates c40digital.com (the “Site”). This policy explains what information we collect when you visit the Site or contact us, how we use it, who we share it with, and the rights you have over your information.

We follow privacy practices aligned with applicable US state laws (including the California Consumer Privacy Act) and the European Union’s General Data Protection Regulation, even where they are not strictly required.

C40 Digital is a marketing agency based in Atlanta, Georgia, United States. Our primary contact for privacy questions is growth@c40digital.com.

• To respond to your inquiry and discuss potential work
• To send you occasional updates about our services, if you have opted in
• To understand how the Site is used and improve its content and performance
• To comply with legal obligations
• To detect, prevent, and address technical or security issues

We use third-party services to operate the Site and respond to you. Each receives only the information needed to do its job and is contractually required to protect it.

• Vercel: hosting, analytics, and performance measurement. See Vercel’s privacy policy.
• Resend: delivery of transactional email (form submissions to our inbox). See Resend’s privacy policy.
• Kit (formerly ConvertKit): subscriber management and marketing email. See Kit’s privacy policy.
• Sanity: content management system for our Site content. See Sanity’s privacy policy.

We do not sell your personal information. We do not share it for cross-context behavioral advertising.

We retain contact form submissions and related correspondence for as long as we have an active or potential business relationship with you, plus a reasonable period afterward for record-keeping and legal purposes (typically up to seven years).

If you join our email list and later unsubscribe, we remove your contact information from our active marketing systems within thirty days. Aggregate analytics data may be retained indefinitely in non-identifying form.

Depending on where you live, you may have rights to access, correct, delete, or restrict the processing of your personal information; to receive a portable copy of it; or to object to certain processing. EU and UK residents also have the right to lodge a complaint with their local data protection authority.

California residents have rights under the CCPA, including the right to know what personal information we collect and to request its deletion.

To exercise any of these rights, email growth@c40digital.com. We will respond within thirty days.

You can unsubscribe from any marketing email by clicking the unsubscribe link at the bottom of the message.

The Site is not directed to children under sixteen, and we do not knowingly collect personal information from anyone under sixteen. If you believe a child has provided us with personal information, contact us and we will delete it.

C40 Digital is based in the United States, and our service providers may process your information in the United States or other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses to protect international transfers.

We use commercially reasonable security measures to protect your information, including encryption in transit, restricted access to systems, and vendor agreements requiring similar protections. No method of transmission or storage is one hundred percent secure; we cannot guarantee absolute security.

We may update this policy from time to time. We will post the revised version here and update the “Last updated” date at the top. Material changes will be communicated more prominently, such as via the email address you provided if we have one.

For any privacy-related questions or to exercise your rights, contact us at growth@c40digital.com.