Privacy Policy

Information We Collect

• Analytics data: IP address, device type, browser, approximate location, pages viewed, referral source, and on-site behavior, collected via Google Analytics (GA4).
• Security/anti-spam data: behavioral and device signals collected by Google reCAPTCHA when you submit a form.
• Contact/form data: name, email address, and message content submitted through our contact form. 
• Comments: name, email address, comment text, and an optional “remember me” cookie if you comment on a post.
• Newsletter subscription: your email address, if you subscribe to updates.
• Technical/infrastructure data: your IP address is processed by Cloudflare for content delivery, security, and bot mitigation.

We do not intentionally collect sensitive personal data (health, biometric, precise geolocation, racial/ethnic origin, sexual orientation, immigration status, or similar categories) and do not knowingly collect data from children under 13.

How We Use Your Information

We use the data above to: operate and secure the Site; understand traffic and content performance; respond to messages submitted through our contact form; prevent spam and abuse; and, where applicable.

Cookies

Security cookies. Google reCAPTCHA sets cookies and transmits device/behavioral signals to Google to distinguish human visitors from bots.

How We Share Your Information

We share or make personal data available to service providers and website technologies that help us operate, maintain, secure, and provide functionality on the Site. The data processed depends on how each service or feature is configured.

Do We Sell Your Personal Data?

We do not sell personal data in exchange for money. However, certain disclosures or uses of personal data may be treated as a “sale,” “sharing,” or targeted advertising under some U.S. state privacy laws even when no money is exchanged.

Whether any technology, analytics service, or other data disclosure used on the Site falls within these definitions depends on how the relevant services are configured and used.

We do not knowingly sell personal data to data brokers or disclose personal data to third parties for their own unrelated direct marketing purposes.

Data Retention

We retain analytics data, contact form submissions, and comment data, if applicable, for as long as reasonably necessary for the purposes described above, or as required by law, after which it is deleted or anonymized.

Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal data, including CDN-level security and bot mitigation through Cloudflare. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children’s Privacy

This Site is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If we learn we have collected such data, we will delete it.

Your U.S. Privacy Rights

Roughly twenty U.S. states now have their own comprehensive privacy laws, each with its own applicability threshold based on revenue, traffic volume, or data-sale activity.

We extend the rights below to all U.S. residents as a matter of company policy, regardless of which state’s law technically reaches us. Where a specific state imposes a stricter or additional requirement, we’ve called it out separately below so the baseline doesn’t quietly fall short of the strictest applicable standard.

Rights we provide to all U.S. residents:

• Access — Confirm whether we process your personal data, and access it.
• Correction — Request correction of inaccurate personal data.
• Deletion — Request deletion of personal data we’ve collected.
• Portability — Request a copy of your personal data in a portable format.
• Opt-out — Opt out of the sale or share of your personal data, targeted advertising, and profiling used for decisions with legal or similarly significant effects.
• Non-discrimination — We will not deny service, charge different prices, or provide a different quality of service because you exercised any of these rights.

Sensitive data. We will not process sensitive personal data without your opt-in consent, and matching Maryland’s stricter standard, we do not sell sensitive personal data under any circumstances, opt-in or not.

How to Exercise Your Rights Submit a request via our contact us page. We will verify your identity before fulfilling a request. We will respond within 45 days of receipt, with one 45-day extension where reasonably necessary. If we decline your request, you may appeal, and we will respond to your appeal within 60 days.

Additional Rights for California Residents

The California Consumer Privacy Act, as amended by the CPRA (the “CCPA”), gives California residents rights beyond the nationwide baseline above. 

Note on applicability: This section is provided regardless of whether we’ve independently confirmed that the CCPA’s statutory thresholds apply to us.

Multi-State Privacy Rights

Residents of certain U.S. states may have additional rights regarding their personal data under applicable state consumer privacy laws. 

This section applies, where and when the relevant law applies to us, to residents of Alabama, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Louisiana, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah, Vermont, and Virginia (collectively, the “Covered States”).

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last Updated” date at the top of this page.

Contact Us

Questions about this Policy or requests to exercise the rights described above can be sent to our:

Email: taylor@cuindependent.com or use our contact page cuindependent.com/contact-us/