Privacy Policy

1.  Who This Policy Applies To

This Privacy Policy applies to anyone who visits or uses Burning Stick Creative’s websites, digital properties, or online services (collectively, “Services”). By using our Services, you agree to the practices described here.

We operate in the United States and comply with applicable U.S. state privacy laws. Where state laws grant you specific rights, those are described in Section 7.

2.  What We Collect

Information you give us directly

The only personal information we collect and retain is what you choose to provide to us. This happens when you:

• Fill out a contact, quote, or inquiry form — name, email address, phone number, and your message
• Create an account — name, email address, and login credentials
• Make a purchase — name, billing address, and order details (payment card data is processed by a third-party provider; we do not store card numbers)
• Apply for a job — resume, contact details, and any information you include in your application

Anonymized and aggregated analytics data

We also collect website usage data through tools like Google Analytics and similar platforms. This data is anonymized and aggregated — it tells us how many people visited a page, where traffic came from, and how the site is performing. It is not tied to you as an individual and cannot reasonably be used to identify you.

This type of data includes:

• Page view counts, session duration, and bounce rates
• Traffic sources such as search, direct, or referral
• General geographic region at the country or state level, not precise location
• Browser type, device category, and screen resolution
• Site performance metrics such as page load times and error rates

Advertising platform data

When we run advertising campaigns, platforms like Meta, Google Ads, LinkedIn, and TikTok may receive signals from our website through cookies or pixels to measure whether an ad led to a visit or conversion. These platforms operate under their own privacy policies and handle any personal identification on their end. What we receive back is aggregated campaign performance data — totals and trends, not individual records.

Information from third parties

We may receive information about you from advertising platforms when you interact with our ads, or from social media platforms if you use social login features. We do not purchase data from data brokers.

3.  How We Use Your Information

We use the information we collect to:

• Operate and maintain our Services
• Process transactions and fulfill orders
• Respond to your questions and provide customer support
• Send you transactional emails (order confirmations, receipts, shipping updates)
• Send marketing and promotional emails, if you have opted in or are an existing customer — you can unsubscribe at any time
• Analyze how our website is used so we can improve it
• Serve you relevant advertisements on our site and on third-party platforms
• Comply with legal obligations

4.  Who We Share Your Information With

We share personal information with the following categories of third parties:

Service providers

Companies that help us operate our business, including website hosting, email delivery, payment processing, customer support, and analytics. These providers may only use your data to perform services for us.

Advertising and analytics platforms

We share data with platforms we use for advertising and website analytics. This includes:

• Google Analytics and Google Ads — to understand site traffic and serve ads. Google’s privacy policy: policies.google.com/privacy
• Meta (Facebook and Instagram) — to measure ad performance and serve ads to relevant audiences. Meta’s privacy policy: facebook.com/privacy/policy
• LinkedIn — to measure ad campaign performance among LinkedIn members. LinkedIn’s privacy policy: linkedin.com/legal/privacy-policy
• TikTok — if we run TikTok ad campaigns, to measure conversions. TikTok’s privacy policy: tiktok.com/legal/privacy-policy
• X (Twitter) — if we run X ad campaigns, to measure conversions. X’s privacy policy: twitter.com/en/privacy
• Other platforms — we may add or remove platforms over time; this list reflects our current use

Each of these platforms sets its own cookies or receives data from our site. When you opt out of targeted advertising (see Section 7), we will take reasonable steps to suppress your data from these platforms, but we cannot guarantee platform-level behavior outside our control.

Legal and safety disclosures

We may disclose personal information if required by law, court order, or government request, or if we believe disclosure is necessary to protect safety or prevent fraud.

Business transfers

If our company is acquired, merged, or sold, your personal information may be transferred as part of that transaction. We will notify you of any material change in how your data is handled.

5.  Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our websites. Cookies are small text files stored on your device that help the site function, remember your preferences, and measure usage.

Category	Always Active?	What It Does	Can You Disable?
Necessary	Yes	Enables core site functions such as secure login and consent preference management. These cookies do not store any personally identifiable data.	No — required for the site to operate
Functional	No	Enables features like sharing content on social media platforms, collecting feedback, and other third-party integrations.	Yes, via Cookie Settings
Analytics	No	Helps us understand how visitors interact with the site — metrics such as number of visitors, bounce rate, and traffic source.	Yes, via Cookie Settings
Performance	No	Analyzes key performance indicators of the site to help us improve speed, stability, and overall user experience.	Yes, via Cookie Settings
Advertisement	No	Delivers customized advertisements based on pages you have previously visited and measures the effectiveness of ad campaigns. Covers the platforms listed in Section 4.	Yes, via Cookie Settings or platform opt-out tools
Uncategorized	No	Cookies that have been detected on our site but have not yet been classified into one of the categories above. We review and classify these on an ongoing basis.	Yes, via Cookie Settings

You can manage your cookie preferences through the Cookie Settings panel on our website, through your browser settings, or by using the Global Privacy Control (GPC) browser signal. We honor GPC as a valid opt-out of marketing and advertising cookies in states where this is required.

6.  Sensitive Data and Children

Sensitive personal data

We do not intentionally collect sensitive personal information such as health data, financial account numbers, precise geolocation, biometric data, or social security numbers through our standard Services. If a specific service requires sensitive data (for example, a job application), we will tell you at the point of collection and handle it with additional care. We do not sell sensitive personal data.

Children

Our Services are not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

We do not use personal data of users we know to be minors for targeted advertising.

7.  Your Privacy Rights

Depending on where you live, you may have the right to:

• Know what personal information we hold about you
• Request a copy of your personal information
• Ask us to correct inaccurate information
• Ask us to delete your personal information (subject to legal retention requirements)
• Opt out of the sale or sharing of your personal information for targeted advertising
• Opt out of marketing emails (via the unsubscribe link in any email we send)

What a data request will typically return

Because the majority of our data collection is anonymized and aggregated for analytics purposes, most users will find that the personal information we hold is limited to what they directly submitted to us — for example, a contact form inquiry, a purchase record, or an account registration.

If you submit a data access request, here is what we will search and provide:

• Any contact form submissions, inquiries, or messages sent to us under your email address
• Account information if you have registered on our site
• Purchase or transaction history if you are a customer
• Email marketing preferences and opt-in or opt-out history

To submit a privacy request, please contact us using the information in Section 9. We may need to verify your identity before processing your request — typically by confirming the email address associated with your submission. We will respond within 45 days; if we need more time, we will let you know.

If a deletion request is approved, we will remove your personal information from our active systems. We may need to retain certain records for legal or accounting purposes, and we will tell you if that applies to your request.

Opt out of targeted advertising

To opt out of the use of your data for advertising purposes, you can:

• Click “Cookie Settings” on our website and disable the Advertisement category
• Use a browser extension that sends a Global Privacy Control (GPC) signal — we honor this in all states where it is legally required
• Contact us directly and we will take reasonable steps to suppress your data from advertising platforms we use

California residents

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know — you may request the specific pieces of personal information we have collected about you, the categories of sources it came from, the business purpose for collecting it, and the categories of third parties it has been shared with
• Right to Delete — you may request deletion of personal information we hold about you, subject to certain exceptions
• Right to Correct — you may request that we correct inaccurate personal information
• Right to Opt Out — you may opt out of the sale or sharing of your personal information, including for cross-context behavioral advertising, by using the Cookie Settings panel, enabling the Global Privacy Control, or contacting us directly
• Right to Limit Use of Sensitive Personal Information — you may direct us to limit our use of sensitive personal information to what is necessary to provide the requested service
• Right to Non-Discrimination — we will not deny you services, charge you a different price, or provide a lesser quality of service because you exercised a privacy right

California residents may submit requests by contacting us using the information in Section 9. We will respond to verifiable requests within 45 days. For questions about our CCPA practices, you may also contact the California Privacy Protection Agency at cppa.ca.gov.

All other states

Residents of Colorado, Connecticut, Virginia, Delaware, Minnesota, Maryland, Nebraska, New Hampshire, New Jersey, Indiana, Kentucky, Rhode Island, Oregon, Texas, Utah, Tennessee, Montana, and Iowa have additional or specific rights under their state’s privacy law. The core rights listed at the top of this section apply to all of these states. If you have a state-specific question we have not addressed, please contact us.

8.  Data Retention and Security

How long we keep your data

We keep personal information for as long as necessary to provide our Services and fulfill the purposes described in this policy, or as required by law. For example, transaction records are kept for the period required for tax and accounting purposes. When information is no longer needed, we delete or anonymize it.

How we protect your data

We use reasonable technical and organizational measures to protect your personal information, including encrypted connections (HTTPS), access controls, and regular security reviews. No system is completely secure, and we cannot guarantee absolute protection. If a data breach occurs that affects your personal information, we will notify you in accordance with applicable law.

9.  Contact Us

If you have questions about this Privacy Policy, want to submit a privacy request, or have a concern about how we handle your data, please contact us:

We aim to respond to all privacy inquiries within 10 business days. For formal privacy rights requests, we will respond within 45 days as required by law.

10.  Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last Updated” date at the top. If we make a material change that affects how we use your data, we will notify you by email or by posting a notice on our website before the change takes effect.

Continued use of our Services after a policy update constitutes acceptance of the revised policy.