Privacy Policy

Last updated 2026-08-11

Thank you for your interest in green mane studio. This Privacy Policy sets out how we handle personal information about you and about other third parties. It describes the types of personal information we collect, the purposes we use it for, who we share it with, and the rights and responsibilities you may have.

This Privacy Policy applies to personal information you provide when you visit this website (the "Site"), engage our design, development, or photography services, apply for a job with us, or otherwise contact or engage with us. The Site and all services we provide are referred to together as the "Services".

Please read this Privacy Policy carefully, as it describes your rights, responsibilities, and liabilities. By accessing or using the Site or the Services, or by otherwise providing us with personal information, you consent to the terms of this Privacy Policy and to our Terms of Service.

1. Scope

This Privacy Policy applies to personal information that green mane studio receives during its business operations as a data controller, which means we determine the purpose and means of processing that personal information.

For purposes of this Privacy Policy, "personal information" means any information that, alone or together with other information, identifies or is linked to a particular individual or household and that is subject to, or otherwise protected under, a data protection law or regulation. The term does not include anonymized or de-identified data that is not attributable to a particular individual or household. We may anonymize or de-identify personal information; that data is not subject to this Privacy Policy and may be used for any purpose.

2. The types and categories of personal information we collect

We collect personal information in order to provide our Services, meet our legal obligations, and operate our business. If you choose not to provide certain personal information, we may not be able to provide the Services or complete a request you have made. Generally, we collect the following categories:

Personal identifiers. Name, business or company name, mailing address, email address, telephone number, and account name.
Registration data. Information provided when you register for an account on the Site, including username and password. Passwords are stored in hashed form and are not readable by us.
Online identifiers. Persistent identifiers that can be used to recognize you or your device over time, including IP address, cookie identifiers, and similar technology. See "Technical data" below.
Project and inquiry data. Information you provide when you contact us or submit a project inquiry, including your current website address, the type of work you are interested in, and the description of what you are trying to accomplish.
Business contact data. Information relating to owners, officers, employees, or contractors of an organization with whom we conduct, or may conduct, business. See "Business contact information and outreach" below.
Marketing and communications data. Your marketing preferences and any subscriptions to our mailing list.
Internet and network activity data. Data about your access to and use of the Site, including pages viewed and your interaction with the Site.
Your feedback. Information you provide about our Services.
Approximate location data. The general city, state, or region a Site visitor is in, derived from IP address. We do not collect precise geolocation.
Professional or employment data. If you apply for a job with us, the information in your resume, cover note, and application. See "Employment applications" below.

We do not collect payment card information through this Site. The Site does not process payments. Invoicing and payment for client work happen separately, outside the Site.

3. Technical data

When you access the Site, some data is collected automatically by technical means.

Usage and device data. Our web server logs record standard entries for each page served, including your IP address, the page URL requested, the device and browser used, the referring page, and a timestamp. These logs help us diagnose server problems, administer the Site, protect against abuse, and provide the Services.

Cookies and similar technologies. A cookie is a small file placed on your device. The Site uses the following:

Session cookie - required to operate the Site and keep a browsing session together. It expires when you close your browser.
Sign-in cookie - set only if you hold an account and choose "remember me", so you are not asked to sign in on every visit.
Campaign cookie - set when you arrive through one of our tracked campaign or social media links, so we can tell how many people a particular campaign reached. It stores a random identifier, not your name.

We also store your light or dark theme preference in your browser's local storage. That preference stays on your device and is never transmitted to us.

You can refuse or delete cookies through your browser settings. If you do, parts of the Site may not function properly, and you will not be able to stay signed in.

Analytics. We may use third-party analytics services to understand how the Site is used. Where such a service is in use, it may set its own cookies and receive your IP address and browsing activity on the Site, subject to that provider's own privacy policy.

Site monitoring. We use the technologies described above to monitor and record activity on the Site in order to safeguard, improve, and analyze the use of the Site, and for the other purposes described in this Privacy Policy.

4. Sources of information

We collect personal information directly from you, through automated means when you use the Site, and from third parties.

Directly from you. When you complete the contact form or a project inquiry, register an account, subscribe to our mailing list, apply for a job, or otherwise engage with us by email, phone, or in person.

Automated collection. Through server logs, cookies, and similar technologies when you use the Site, as described under "Technical data".

Third-party sources. We collect business information from publicly available sources and business-listing services, from social media profiles, from publicly accessible business websites, and from service providers. This is how we identify and research organizations that may benefit from our services. See "Business contact information and outreach" below for a fuller description, because that information is often collected without the individual having contacted us first.

From our clients. When we perform work for a client, that client may provide us with information about their own customers, staff, or contacts. See "Client project information" below.

5. How we use your information

We use the personal information we collect to deliver our Services, meet our legal obligations, and operate our business, including to:

provide, operate, maintain, improve, and promote the Site and our Services;
respond to your inquiries, prepare estimates and proposals, and communicate with you about a project;
enable you to access and use an account, and to authenticate sign-ins;
send administrative messages such as technical notices, security alerts, and support messages;
send marketing communications where you have asked to receive them, and manage your preferences;
evaluate job applications and communicate with applicants;
research and contact organizations that may benefit from our services;
understand how the Site is used, so we can improve it;
investigate and prevent fraud, unauthorized access, abuse of the Site, and other unlawful activity;
comply with applicable law, respond to lawful requests from authorities, establish or defend legal claims, and protect our rights and the rights of others; and
any other purpose for which you give consent.

6. Sharing information and third-party disclosures

We do not sell your personal information, and we do not share it with third parties for their own direct marketing purposes. We share personal information only as described below.

Service providers. With vendors who perform functions on our behalf, such as website hosting, email delivery, file storage and backup, and the third-party interfaces we use to research prospective clients and to measure website performance. These providers may only use the information to perform services for us.
Clients and their vendors. Where a project requires it, and with your knowledge, such as passing press-ready files to a printer or coordinating with a client's existing developer.
Business restructuring. If we sell, merge, or reorganize the business, personal information may be disclosed to the extent reasonably necessary to negotiate or complete that transaction.
Legal and compliance. Where required by law, subpoena, or government order; to protect and defend our rights or property; or, in urgent circumstances, to protect the health or personal safety of any individual.
With your consent. For any other purpose disclosed to you at the time you provide the information.

7. Business contact information and outreach

Part of our business is identifying organizations that may benefit from design, development, or photography work, and contacting them. This section explains that practice plainly, because it involves information about people who have not necessarily contacted us first.

What we collect. Business name, business address, phone number, website address, publicly listed business email addresses, business social media profiles, publicly posted business reviews and photographs, publicly available technical information about a business website, and the name, job title, business email address, business phone number, and professional profile link of owners, officers, or staff where that information is published in a business capacity.

Where it comes from. Publicly available business listing and mapping services, publicly accessible pages of the organization's own website, publicly available website performance tools, and public business social media profiles. We do not purchase consumer data, and we do not attempt to collect personal information that an individual has not published in a business capacity.

How we use it. To evaluate whether our services are a plausible fit, to prepare a relevant introduction, and to contact the organization about working together. Where we send an outreach message or link, we may record whether it was opened or clicked, along with the IP address, browser, and referring page of that interaction, so we can tell which outreach is worth continuing and which is not.

Your choices. If you have received outreach from us and would prefer not to, tell us and we will stop and remove your details. You may also ask us what we hold about you and ask us to correct or delete it. Contact details are in "Contact us" below. We will honor these requests regardless of whether a particular privacy law formally applies to us.

8. Client project information

To carry out a project, clients often give us material that contains personal information, such as copy, photographs, customer lists for a mailing, staff biographies and portraits, or access credentials to a website, content management system, or hosting account.

When we hold that material, we act on the client's instructions. We use it only to perform the agreed work, we do not use it for our own marketing, and we do not disclose it except as needed to deliver the project or as required by law. Access credentials are used only for the agreed work and we ask clients to revoke them when a project ends. We return or delete project material on request, subject to any records we must keep for legal or accounting purposes.

If you are an individual whose information was given to us by one of our clients, that client is responsible for how the information was collected and for the instructions given to us. We will pass any request you make to the relevant client, and help them respond.

9. Social media

We maintain a presence on social media platforms. If you contact us through one of those platforms, we may reply using that platform's messaging tools. A platform may also provide us with information about you automatically; what we receive depends on that platform's terms and on your own privacy settings.

Where the Site includes social media links or embedded features, your interaction with those features is governed by the privacy policy of the platform providing them, not by this Privacy Policy.

10. Links to other websites

The Site may link to third-party websites, and portfolio pages may link to work we produced for clients that is now hosted elsewhere. This Privacy Policy does not apply to those websites or organizations. You assume the privacy and security risks associated with providing information to third parties, and we encourage you to read the privacy policy of any site you visit.

11. Data retention and storage

How long we keep personal information depends on why we hold it. We keep inquiry and project correspondence for as long as needed to deliver the work and to support the finished result afterward, and then for as long as reasonably necessary to defend our legal or business interests. Server logs are kept for a limited period for security and diagnostic purposes. Mailing list data is kept until you unsubscribe. Job application material is kept for a reasonable period after a decision, unless you ask us to delete it sooner. Records we must retain for tax or accounting purposes are kept for the period the law requires.

We are based in the United States, and the personal information we collect is stored in the United States by us and by service providers acting on our behalf. If you are located outside the United States, please be aware that the United States may not provide the same level of data protection as your own jurisdiction, and that information stored here may be accessible to local authorities under applicable law. By providing us with your information, you acknowledge that transfer and storage.

12. Security

We use a range of security measures to help protect personal information from unauthorized access, use, or disclosure. These include encrypted connections to the Site, hashed password storage, restricted administrative access, and optional two-factor authentication on accounts.

However, no information system can be made completely secure, and we cannot guarantee the absolute security of your personal information. We are not responsible for the security of information you transmit to us over networks we do not control, including the internet, and you provide information at your own risk. To the extent permitted by law, we are not liable for any incident that compromises the confidentiality, integrity, or security of your personal information and that is caused by a third party.

The security of your information also depends on you. If you hold an account, you are responsible for keeping your username and password confidential. Please contact us promptly if you have reason to believe your credentials have been compromised. You agree that we may contact you by email or other electronic means if we are required to notify you of a data security incident.

13. No data collected from children

The Site is not directed at, nor intended for use by, children. If you are under the age of sixteen, please do not use the Site or the Services and do not provide us with personal information. If we learn that we have collected personal information from a child under sixteen, we will delete it.

14. Publicly posted information and feedback

You may have the opportunity to provide feedback about our business or our Services. Anything you post publicly, or ask us to publish, may be visible to others, may be indexed by search engines, and may be copied or shared by third parties. We recommend that you do not include information in public material that you want to keep confidential. Publicly posting information is entirely voluntary.

If you provide us with feedback, a testimonial, or a comment about our work, you grant green mane studio a non-exclusive, perpetual, irrevocable, worldwide, royalty-free license to use, publish, and disclose that feedback in any manner and in any medium, without further permission or payment. We will not attach your name or your organization to a public testimonial without your agreement.

15. Your responsibilities

Please provide us with personal information only where it is accurate and relevant to our relationship, and only where doing so does not breach any data protection law or infringe another person's privacy rights.

If you provide us with personal information about a third party - for example, contact details for a colleague, staff photographs, or a customer list for a mailing - you confirm that you have the authority to do so and that our use of that information as described in this Privacy Policy will not infringe anyone's rights. You agree to indemnify green mane studio against claims, harm, or damages arising from personal information you provide to us about a third party.

16. Updating your information

It matters that the information we hold about you is accurate. If you hold an account on the Site, you can review and update your details from your account page. Otherwise, contact us using the details in "Contact us" below and we will update our records.

17. Email marketing and your rights

We only add you to our mailing list if you ask us to, such as by ticking the option on our contact form. You may opt out of marketing email at any time using the unsubscribe link in any marketing message we send, or by contacting us directly. Opting out of marketing does not stop administrative messages about a project you have engaged us for.

Please let us know if you stop using an email address you subscribed with, so we do not keep sending mail to an address that is no longer yours.

18. California privacy rights

green mane studio does not sell personal information, and does not share personal information with third parties for their own direct marketing purposes.

green mane studio does not meet the revenue and data-volume thresholds that make a business subject to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020. Regardless of that, if you are a California resident we will honor the following requests:

to know what categories of personal information we have collected about you, where it came from, why we collected it, and who we have disclosed it to;
to receive a copy of the specific personal information we hold about you;
to correct inaccurate personal information we hold about you;
to delete personal information we hold about you, subject to records we are required to keep; and
to direct us not to sell or share personal information about you, which we do not do in any event.

We will not discriminate against you for exercising any of these rights. To make a request, contact us using the details in "Contact us" below. We will need to verify your identity, or the authority of an agent acting for you, before we act on a request.

19. Nevada privacy rights

green mane studio does not conduct "sales" of personal information for purposes of Nevada law. Nevada residents may nonetheless submit a request directing us not to sell personal information we maintain about them. To do so, contact us using the details in "Contact us" below.

20. Virginia privacy rights

green mane studio does not meet the thresholds that make a business subject to the Virginia Consumer Data Protection Act. If you are a Virginia resident and would like to exercise a privacy right, contact us using the details in "Contact us" below, and we will handle your request on the same basis as the requests described in the California section above.

21. European Union, Switzerland, and United Kingdom

If you are located in the EU, Switzerland, or the UK, you have the following data protection rights:

Right to know. To know what personal information we collect and process about you, the sources, our retention criteria, who we share it with, and how to raise a complaint. That information is set out in this Privacy Policy.
Access. To ask whether we process your personal information and, if so, to receive a copy of it.
Rectification. To have inaccurate or incomplete personal information corrected or completed.
Erasure. To have your personal information deleted, subject to statutory limits and to records we must retain.
Restriction of processing. To have us suspend processing of your personal information in certain circumstances, such as while we verify contested information.
Data portability. To receive your personal information in a structured, commonly used, machine-readable format, and to have it sent to another controller where technically feasible.
Right to object. To object to processing based on our legitimate interests. You may object to processing for direct marketing purposes at any time, free of charge.
Withdrawing consent. To withdraw consent at any time where consent is the sole basis for processing, without affecting processing carried out before the withdrawal.

Automated decision making. We do not make decisions about you based solely on automated processing that produce legal effects or similarly significant results.

Legal bases for processing. We rely on your consent (for example, subscribing to our mailing list); our legitimate interests (for example, operating and securing the Site, and identifying organizations that may want our services); the performance of a contract (for example, delivering a project you have engaged us for); and compliance with legal obligations (for example, tax records).

Complaints. You have the right to complain to your data protection authority. In the EU, see the European Data Protection Board member list at edpb.europa.eu. In Switzerland, contact the Federal Data Protection and Information Commissioner. In the UK, contact the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to address your concerns first, so please consider contacting us before raising a complaint.

22. Do-not-track signals

Some browsers transmit "do-not-track" signals. Because browsers implement this feature inconsistently, it is not always clear whether a user intends the signal to be sent or is even aware of it. Unless required by law, we do not currently take action in response to these signals.

23. Persons with disabilities

We want everyone to be able to read information about our Services, including this Privacy Policy. If you would like this policy provided in an alternative format, please contact us and we will do our best to meet your needs.

24. Employment applications

If you apply for a position with us, we collect the information you submit through the application, which may include your name, email address, phone number, city and state, links to a portfolio or professional profile, an uploaded resume, and a cover note. We also record the IP address and browser used to submit the application, as a safeguard against automated abuse.

We use this information to evaluate your application, to verify the details you have given, to communicate with you about the process, to meet our legal obligations, and to improve how we recruit. We keep application material for a reasonable period after a decision in case another suitable role opens, unless you ask us to delete it sooner.

Please do not include sensitive personal information in an application - such as health information, government identification numbers, or financial details - as none of it is needed to evaluate your application.

25. Meetings and video calls

We use third-party platforms to hold calls and video meetings with clients and applicants. Those platforms are operated by their providers and are subject to their own privacy policies. If we intend to record a call, we will say so beforehand and ask for your agreement. Recordings and any notes are kept only as long as needed for the project they relate to.

26. Changes to this policy

We may amend this Privacy Policy at any time. When we do, we will update the "Last updated" date at the top of this page. Please review this page periodically to see whether it has changed. Your continued use of the Site and the Services after an amendment signifies your acceptance of the amended policy. We may, at our discretion, also notify you of significant changes by email.

27. Contact us

If you have questions about this Privacy Policy or about how we handle your personal information, would like more information, or would like to exercise a privacy right, please contact us:

green mane studio
Attn: Privacy
4140 Spencer Road
Rocky River, Ohio 44116
United States

Email: dan@greenmanestudio.com
Phone: (440) 305-3367

You can also reach us through our contact form.