Privacy Policy
Last Updated: August 25, 2026
Cinch Web Design, Inc. ("Cinch Web Design," "Cinch," "we," "us," or "our") respects your privacy and is committed to handling personal information responsibly and in accordance with applicable privacy and data protection laws.
This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you visit our website, communicate with us, request information, become a customer, or otherwise interact with Cinch Web Design.
It also explains certain rights that may be available to you under applicable privacy laws.
This Privacy Policy applies to Cinch Web Design's own websites, communications and business operations. When Cinch Web Design processes personal information on behalf of a client through a website or service operated for that client, additional terms described under "Information We Process on Behalf of Clients" below may apply.
1. Personal Information We Collect
The information we collect depends on how you interact with us and the services you use.
Identifiers and Contact Information
We may collect information such as your name, business name, mailing address, email address, telephone number, account information and other identifiers you provide to us.
Customer and Commercial Information
We may collect information concerning the services you request or purchase, customer account history, transactions, invoices, communications, service preferences and other information relating to our business relationship with you.
Internet, Device and Website Activity
When you use our website, we and service providers acting on our behalf may automatically collect information such as your Internet Protocol address, browser type, device type, operating system, referring website, pages viewed, links clicked, dates and times of visits, approximate location derived from IP address, cookie identifiers and similar technical information.
Communications and Submitted Content
We may collect information contained in emails, telephone communications, support requests, website forms, project materials and other communications you submit to us.
Professional and Business Information
When you interact with Cinch in a business capacity, we may collect your job title, employer, business contact information and information concerning your organization or professional relationship with us.
Payment Information
If you purchase services, payment and billing information may be processed by Cinch or by payment processors and financial institutions that assist us with transactions. Where a third-party payment provider processes payment card information directly, Cinch may not receive or retain the complete payment card number.
Sensitive Information
Cinch does not seek to collect sensitive personal information through its general public website unless the information is reasonably necessary for a particular service or is otherwise voluntarily provided.
You should not submit Social Security numbers, government identification numbers, financial account credentials, medical information, Protected Health Information, passwords or other highly sensitive information through a general contact form unless Cinch has specifically instructed you to use an approved method for transmitting that information.
2. Sources of Personal Information
We may obtain personal information directly from you, automatically through your interaction with our website and services, from our customers and business partners, from service providers, from publicly available sources, from advertising or analytics providers, and from other sources permitted by applicable law.
3. How We Use Personal Information
We may use personal information to provide, operate and maintain our services, respond to inquiries, communicate with customers and prospective customers, create and administer accounts, perform contracts, provide customer support, process transactions, maintain business records and improve our services.
We may also use information to analyze website performance and usage, maintain website security, detect fraud or misuse, troubleshoot technical issues, protect our rights and property, comply with legal obligations, establish or defend legal claims, and enforce our agreements.
Where permitted by law, we may use contact information to communicate with you regarding Cinch services, updates or other business information that may be relevant to you. You may unsubscribe from promotional email communications using the unsubscribe mechanism included in the message or by contacting us.
We will obtain consent before using personal information when consent is required by applicable law.
4. Information We Process on Behalf of Clients
Cinch Web Design provides website design, development, hosting, support, maintenance, marketing and related services to businesses and organizations.
In providing these services, Cinch may process information collected through a client's website or other systems at the direction of that client.
Where applicable, the client determines the purposes and means of processing and acts as the "business," "controller," "organization," "covered entity," or other responsible party under applicable privacy law. Cinch may act as a "service provider," "contractor," "processor," "business associate," or similar service provider, depending upon the circumstances and applicable law.
When Cinch processes personal information solely on behalf of a client, we process that information according to the client's documented instructions, our agreement with the client and applicable law.
Individuals with questions about information submitted through a Cinch client's website should ordinarily review that client's privacy policy and contact the client directly. Where required by law or contract, Cinch will assist clients in responding to valid privacy requests involving information that Cinch processes on their behalf.
Nothing in this Privacy Policy changes the allocation of privacy responsibilities established in a written agreement, Data Processing Addendum, Business Associate Agreement or similar agreement between Cinch and a client.
5. Cookies and Similar Technologies
Our website may use cookies, pixels, tags, local storage, scripts and similar technologies to operate the website, remember preferences, understand website usage, measure performance, prevent fraud, provide functionality and, where applicable, support advertising or marketing activities.
Strictly necessary technologies are used to provide functionality required for the website to operate and generally cannot be disabled through a cookie consent tool.
Functional technologies may remember choices or provide enhanced website functionality.
Analytics technologies may help us understand how visitors interact with our website, measure traffic and improve website performance.
Advertising technologies, if used, may help measure advertising campaigns, limit repeated advertising, understand interactions with advertisements or provide advertising based upon website activity.
Where applicable law requires prior consent, Cinch will seek consent before activating nonessential cookies or similar technologies. Where applicable, users may accept, reject or modify nonessential cookie preferences through the cookie consent mechanism made available on the website.
Withdrawing consent does not affect processing that occurred lawfully before consent was withdrawn.
Disabling cookies through a browser or consent tool may affect certain website functionality.
6. Advertising, Sale, Sharing and Targeted Advertising
Cinch Web Design does not sell personal information in exchange for money.
Certain privacy laws, however, define the terms "sale," "share," "sharing" or "targeted advertising" broadly. Under those definitions, providing online identifiers or website activity to certain advertising, analytics or technology providers may potentially constitute a sale, sharing of personal information or processing for targeted advertising.
To the extent Cinch engages in activities that are considered a sale, sharing or targeted advertising under an applicable privacy law, eligible individuals may exercise the applicable opt-out rights described in this Privacy Policy.
Cinch does not knowingly sell or share personal information of individuals under 16 years of age in circumstances requiring affirmative authorization under California law.
7. Global Privacy Control and Opt-Out Preference Signals
Where required by applicable law, Cinch recognizes qualifying universal opt-out mechanisms or browser-based privacy preference signals, such as Global Privacy Control, as a request to opt out of applicable sales, sharing or targeted advertising for the browser or device transmitting the signal.
Because these signals generally operate at the browser or device level, you may need to enable the preference separately on each browser and device you use.
If you are logged into an account and applicable law requires the signal to be associated with your account, Cinch will take reasonable steps to apply the preference as required by law.
8. How We Disclose Personal Information
We may disclose personal information to service providers and contractors that perform services on our behalf, including providers of website hosting, cloud storage, communications, customer relationship management, analytics, cybersecurity, payment processing, accounting, technical support and related business services.
We may also disclose information to advertising or analytics partners when those technologies are enabled and permitted by applicable law.
Information may be disclosed to professional advisers, including attorneys, accountants, auditors, insurers and consultants, where reasonably necessary.
We may disclose information to government authorities, courts, regulators, law enforcement or other parties when we reasonably believe disclosure is required by law, necessary to respond to lawful process, necessary to protect rights or safety, or appropriate in connection with an investigation of fraud, security incidents or unlawful activity.
If Cinch is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets or similar corporate transaction, information may be disclosed or transferred in connection with that transaction, subject to applicable legal requirements.
We may also disclose information at your direction or with your consent.
9. Deidentified and Aggregated Information
Where permitted by law, we may create or use information that has been aggregated, anonymized or deidentified so that it cannot reasonably be associated with an identified or identifiable individual.
When applicable law requires it, we will maintain deidentified information in deidentified form and will not attempt to reidentify the information except as permitted for purposes such as evaluating whether our deidentification processes are effective.
10. Data Retention
Cinch retains personal information only for as long as reasonably necessary for the purposes for which it was collected, to provide services, maintain appropriate business and transactional records, comply with legal and contractual requirements, resolve disputes, enforce agreements and protect legitimate business interests.
Retention periods may vary depending upon the type of information, the nature of the relationship, legal requirements, contractual obligations, applicable limitation periods, security considerations and whether the information is contained in backup or archival systems.
When personal information is no longer reasonably required, Cinch may delete, destroy, anonymize or deidentify it in accordance with applicable law and our retention practices.
11. Data Security
Cinch maintains reasonable administrative, technical and organizational safeguards designed to protect personal information against unauthorized access, acquisition, disclosure, alteration, loss, misuse or destruction.
Safeguards may include access controls, authentication procedures, secure system configurations, encryption or encrypted transmission where appropriate, vendor controls, employee access restrictions, monitoring and incident response procedures.
No internet transmission, information system or storage method can be guaranteed to be completely secure. Accordingly, Cinch cannot guarantee absolute security.
If Cinch becomes aware of a data security incident involving personal information, we will investigate and provide notices to affected individuals, clients, regulators or other parties when required by applicable law or contract.
12. HIPAA and Protected Health Information
Cinch provides services to organizations that may be subject to the Health Insurance Portability and Accountability Act of 1996, as amended, and its implementing regulations, collectively referred to as "HIPAA."
Cinch's standard website and communication services are not intended to receive or process Protected Health Information unless Cinch and the applicable client have specifically agreed to a HIPAA-appropriate service configuration and, when required, entered into a Business Associate Agreement.
Clients should not configure general website contact forms, ordinary email systems, analytics tools or other services to collect or transmit Protected Health Information unless those systems have been reviewed and approved for the intended use.
When Cinch qualifies as a Business Associate and has entered into an applicable Business Associate Agreement, Cinch will handle Protected Health Information in accordance with the Business Associate Agreement and applicable provisions of the HIPAA Privacy, Security and Breach Notification Rules.
The applicable Business Associate Agreement governs in the event of any conflict between this Privacy Policy and obligations relating specifically to Protected Health Information.
Cinch will use and disclose Protected Health Information only as permitted by the applicable agreement and law, implement safeguards required for the services provided, restrict access as appropriate, and report qualifying security incidents or breaches as required by the applicable Business Associate Agreement and law.
Where Cinch uses a subcontractor to perform services involving Protected Health Information and HIPAA requires a downstream Business Associate Agreement, Cinch will require the subcontractor to accept appropriate contractual obligations.
Clients remain responsible for determining whether their organization is subject to HIPAA, determining what information their websites and systems collect, selecting appropriate services and configurations, obtaining legally required authorizations and consents, providing legally required notices, and complying with obligations applicable to them as Covered Entities or Business Associates.
13. Consumer Health Information
Certain U.S. state laws regulate consumer health information that may not qualify as Protected Health Information under HIPAA.
Cinch's general public website is not intended for the collection of consumer health information.
Where Cinch processes consumer health information solely on behalf of a client, the client's privacy notice and applicable contractual terms may govern that processing. Cinch will process such information consistent with applicable law and its contractual role.
Cinch does not use consumer health information for targeted advertising or sell consumer health information except where expressly permitted by applicable law and the required authorization or consent has been obtained.
14. U.S. State Privacy Rights
Depending upon your state of residence and the applicability of state privacy legislation to Cinch, you may have one or more rights concerning your personal information.
These rights may include the right to confirm whether personal information is being processed, obtain access to personal information, receive a copy of certain personal information, correct inaccuracies, request deletion, obtain information in a portable format, opt out of the sale of personal information, opt out of sharing or targeted advertising, opt out of certain profiling, withdraw consent to processing of sensitive personal information, or limit certain uses and disclosures of sensitive personal information.
Applicable law may also prohibit us from discriminating against you because you exercised a privacy right.
Some requests are subject to exceptions. For example, Cinch may be permitted or required to retain information to complete transactions, comply with law, maintain security, prevent fraud, exercise legal rights or satisfy contractual obligations.
Where applicable law provides a right to appeal a decision concerning a privacy request, you may submit an appeal by replying to our decision or contacting us using the information below and identifying your request as a "Privacy Appeal."
15. California Privacy Notice
This section supplements the remainder of this Privacy Policy for California residents where the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies.
Depending upon the manner in which you interact with Cinch, we may collect identifiers, customer records information, commercial information, internet or other electronic network activity, approximate geolocation information, professional or employment-related information, communications, and other information described in this Privacy Policy.
We collect these categories from the sources described in this Privacy Policy and use them for the business and commercial purposes described above.
We may disclose these categories to service providers, contractors, analytics providers, advertising partners, professional advisers, government authorities, transaction participants and other recipients described in this Privacy Policy, as appropriate to the particular information and purpose.
California residents may have the right to know the categories and specific pieces of personal information collected about them, request correction, request deletion, obtain information concerning categories of sources and recipients, opt out of a sale or sharing of personal information, limit certain uses or disclosures of sensitive personal information where applicable, and exercise these rights without unlawful discrimination.
Cinch does not offer a financial incentive program involving personal information unless separate terms describing that program and any legally required notice are provided.
A California resident may also use an authorized agent to submit certain requests as permitted by law. Cinch may require verification of the consumer's identity and the agent's authority.
16. Exercising U.S. Privacy Rights
To submit a privacy request, contact:
Email: info@cinchwebdesign.com
Please include sufficient information for us to understand the request and identify the records involved.
We may take reasonable steps to verify your identity before fulfilling a request. The information required for verification will depend on the nature and sensitivity of the request.
If we cannot verify a request, or if an exception permitted by law applies, we may deny the request in whole or in part and will provide an explanation when required by law.
We will respond within the period required by applicable law.
17. Canadian Privacy Rights
If you are located in Canada, Cinch handles personal information in accordance with applicable Canadian federal and provincial privacy legislation to the extent those laws apply to our activities.
Applicable legislation may include the Personal Information Protection and Electronic Documents Act and substantially similar provincial privacy legislation, including privacy legislation in Alberta, British Columbia and Quebec.
Cinch seeks to collect, use and disclose personal information for purposes that a reasonable person would consider appropriate in the circumstances and to obtain meaningful consent where consent is legally required.
Subject to applicable law, Canadian individuals may request access to personal information held about them, request correction of inaccurate information, withdraw consent to certain processing and raise concerns regarding our handling of personal information.
Withdrawal of consent may be subject to legal or contractual restrictions and may affect our ability to provide particular services.
Where applicable Quebec privacy legislation applies, individuals may also have additional rights, including rights relating to portability, cessation of dissemination, de-indexation, automated decision-making and other rights provided by applicable law.
Personal information concerning Canadian individuals may be processed or stored outside the province or outside Canada, including in the United States. When information is processed in another jurisdiction, it may be subject to the laws of that jurisdiction and may be accessible to courts, law enforcement or government authorities as permitted by applicable law.
Questions or complaints concerning Canadian privacy practices may be directed to our Privacy Officer using the contact information below. You may also have the right to complain to the Office of the Privacy Commissioner of Canada or an applicable provincial privacy regulator.
18. European Economic Area, European Union, Switzerland and United Kingdom
Where the General Data Protection Regulation, UK General Data Protection Regulation or other applicable European data protection law applies, Cinch processes personal data under one or more lawful bases.
We may process personal data because processing is necessary to perform a contract or take requested steps before entering into a contract, because processing is necessary to comply with a legal obligation, because processing is necessary for our legitimate interests or those of another party and those interests are not overridden by applicable data protection rights, or because you have provided consent.
Our legitimate interests may include operating and improving our business, providing customer support, maintaining network and information security, preventing fraud, administering customer relationships and understanding the use of our services.
Where processing is based upon consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Subject to applicable law, individuals may have the right to access personal data, correct inaccurate information, request erasure, restrict processing, object to processing, obtain data portability and withdraw consent.
Where personal data is processed for direct marketing, you may object to that processing at any time.
Cinch does not use personal information to make solely automated decisions that produce legal or similarly significant effects concerning an individual unless the processing is permitted by applicable law and the required disclosures and safeguards are provided.
If you believe that Cinch has violated applicable European data protection law, you may have the right to lodge a complaint with the supervisory authority in your country of residence, place of work or location of the alleged infringement. Individuals in the United Kingdom may contact the Information Commissioner's Office.
19. International Transfers
Cinch Web Design is based in the United States. Accordingly, personal information collected from individuals in other countries may be transferred to, processed in or stored in the United States or another country where Cinch or its service providers operate.
Privacy and data protection laws in those jurisdictions may differ from the laws in your country.
Where European or other applicable law requires safeguards for an international transfer, Cinch will use an approved transfer mechanism where required, which may include adequacy decisions, Standard Contractual Clauses, the United Kingdom International Data Transfer Agreement or Addendum, or another legally recognized mechanism.
20. Children and Minors
Cinch's website and services are intended primarily for businesses and adults and are not directed to children under 13 years of age.
Cinch does not knowingly collect personal information online from children under 13 in circumstances governed by the Children's Online Privacy Protection Act without legally required parental consent.
We also do not knowingly process personal information of minors for targeted advertising, sale or sharing when prohibited by applicable law.
If you believe a child or minor has submitted personal information to Cinch in violation of applicable law, please contact us so that we can investigate and take appropriate action.
21. Marketing Communications
Where permitted by law, Cinch may send business or marketing communications concerning our services.
You may unsubscribe from promotional email communications using the unsubscribe link contained in the communication or by contacting us.
Transactional, administrative, account, billing, security and service-related communications may continue when necessary even if you opt out of marketing communications.
For Canadian recipients, Cinch will send commercial electronic messages in accordance with applicable requirements, including Canada's Anti-Spam Legislation, where applicable.
22. Third-Party Websites and Services
Our website may contain links to websites, platforms or services operated by third parties.
Cinch does not control the privacy, security or data practices of independent third parties, and this Privacy Policy does not apply to information those parties collect independently.
We encourage you to review the privacy notices and terms provided by third-party services before providing personal information to them.
23. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our services, technologies, business practices or legal requirements.
When we make changes, we will update the "Last Updated" date at the beginning of this Privacy Policy.
If required by applicable law, we will provide additional notice or obtain consent before a material change becomes effective.
Your rights concerning information collected before a change will continue to be governed by applicable law.
24. Privacy Officer and Contact Information
Questions, concerns, complaints and privacy rights requests may be directed to:
Privacy Officer
Cinch Web Design, Inc.
Email:
info@cinchwebdesign.com
Mailing Address:
Cinch Web Design, Inc
6424 East Greenway Parkway
Ste 100-563
Scottsdale, AZ 85254
When contacting us about a privacy request, please include enough information for us to understand your request but do not send Social Security numbers, passwords, complete payment card information, medical records or other highly sensitive information through ordinary email.