Privacy Policy

1. Introduction

Welcome to ACORN GRAPHICS LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website located at https://www.acorngraphics.lol or engage with our computer systems design and integration services. The developer behind this website is AcornGraphics, who has built and maintains the digital platform for ACORN GRAPHICS LLC. We are committed to respecting your privacy and handling your data with transparency and care.

Throughout this document, references to the Company, we, us, or our refer to ACORN GRAPHICS LLC, a business operating within the Professional, Scientific, and Technical Services sector, specializing in Computer Systems Design and Related Services. By accessing or using our website and services, you acknowledge that you have read and understood this Privacy Policy and agree to the data practices described herein.

This policy forms part of the overall agreement between you and the Company. If you do not agree with any provision of this Privacy Policy, you should discontinue use of our website and refrain from submitting personal information through any of our digital channels. We encourage you to review this policy periodically, as it may be updated from time to time to reflect changes in our practices or applicable legal requirements.

2. Scope of This Policy

This Privacy Policy applies to all information collected through our website, during client consultations, through email communications, by telephone, via service agreements and contracts, and in the course of providing our professional technical services. It covers visitors to our website, prospective clients who inquire about our offerings, active clients engaged in ongoing projects, former clients whose data we may retain for archival purposes, and any other individuals who interact with our brand through any digital or physical channel operated by the Company.

This policy does not apply to third-party websites, applications, or services that may be linked from our website or that we may reference in our communications. We are not responsible for the privacy practices of those third parties. When you navigate away from our website to an external destination, we encourage you to review the privacy policy of that third party before sharing any personal information.

Similarly, this policy does not apply to information that has been anonymized, aggregated, or otherwise de-identified in a manner that prevents it from being reasonably associated with an individual. We may use and share such anonymized data freely for research, analytics, and service improvement purposes without restriction.

3. Information We Collect

We collect several categories of information to provide, maintain, and improve our technology services. The specific types of data we gather depend on the nature of your interaction with the Company and the services you request. Below is a detailed breakdown of the categories of information we may collect.

Personal Identification Information includes your full name, email address, telephone number, company name or organizational affiliation, job title or professional role, mailing address including street, city, state, and postal code, and any other identifiers you voluntarily provide through contact forms, consultation requests, or direct correspondence. This information is collected when you fill out a form on our website, send us an email, speak with us by phone, or enter into a service agreement.

Technical and Usage Data includes your Internet Protocol (IP) address, browser type and version, operating system platform, device type and screen resolution, referring and exit URLs, date and time stamps of page visits, pages viewed and navigation patterns, time spent on individual pages, clickstream data, and other diagnostic information. This data is collected automatically through standard web server logs, analytics services, and session recording tools.

Business and Project Data includes information about your technology infrastructure, system specifications, business requirements, project scope documents, architectural diagrams, and configuration details that you share with us during the course of a professional engagement. This information is essential for us to deliver accurate assessments and effective technology solutions.

Communication Records include the content of emails, contact form submissions, support tickets, project management messages, and notes from phone consultations. We retain these records to maintain continuity in our client relationships and to document the scope and progress of professional engagements.

4. How We Collect Information

We gather information through several distinct methods, each described in detail below. Understanding these collection methods helps you make informed decisions about the data you choose to share with us.

Direct Collection. Information is collected directly when you voluntarily provide data through our website contact forms, email correspondence, telephone conversations, consultation scheduling tools, service agreement paperwork, and any other channel where you intentionally transmit information to us. You have full control over the information you provide through direct collection methods, though certain fields may be required to process your specific request.

Automated Collection. As you navigate our website, certain technical data is collected automatically through cookies, web beacons, server logs, and analytics scripts. These technologies record information about your device, browser, and browsing behavior without requiring any active input from you. The purpose of automated collection is to understand how visitors interact with our website, to diagnose technical issues, and to improve the overall user experience.

Third-Party Sources. In some cases, we may receive information about you from third-party platforms such as analytics providers, advertising networks, or business intelligence databases. This information is used to supplement our understanding of our audience and to refine our marketing and service delivery strategies. We only engage with reputable third-party sources that comply with applicable data protection laws.

Service Engagement Collection. During the course of a professional engagement, we collect technical and project-related data that is necessary to perform our services. This may include system configuration details, network topology information, security assessment data, and performance metrics that we gather as part of our diagnostic and implementation work.

5. Use of Collected Information

The information we collect serves specific business and operational purposes. We use your data in ways that are directly related to the services we provide and the relationship we maintain with you. Below is a comprehensive description of how each category of information is used.

We use personal identification information to respond to your inquiries and service requests, to deliver the computer systems design and integration services you have engaged us for, to communicate project updates and technical recommendations, to process billing and maintain account records, to send service-related announcements and informational content, and to verify your identity when you contact us regarding your account or data.

We use technical and usage data to monitor and improve website performance, to diagnose and resolve technical issues, to analyze traffic patterns and user behavior, to optimize page layouts and navigation structures, to detect and prevent fraudulent or unauthorized activity, and to generate aggregate statistics about website usage that inform our business decisions.

We use business and project data exclusively within the context of delivering the professional services outlined in your service agreement. This includes using system specifications to design appropriate architectures, using project requirements to develop accurate proposals, and using configuration details to implement and validate solutions. Project data is never used for purposes unrelated to the engagement for which it was collected.

We use communication records to maintain an accurate history of our interactions, to ensure continuity of service across team members, to document decisions and approvals made during projects, and to resolve any disputes or misunderstandings that may arise. Communication records are treated as confidential and are accessible only to personnel with a legitimate business need.

6. Legal Basis for Processing

For individuals located in jurisdictions that require a legal basis for data processing, including the European Economic Area (EEA), the United Kingdom, and certain states within the United States, we rely on the following lawful grounds for processing personal information.

Performance of a Contract. We process personal data when it is necessary to fulfill our contractual obligations to you, such as delivering technology services you have requested, managing billing and payments, and communicating about project milestones and deliverables.

Legitimate Business Interests. We process data based on our legitimate interests in operating, improving, and marketing our technology services, provided that those interests are not overridden by your data protection rights. Legitimate interests include analyzing website traffic to improve user experience, responding to inquiries from prospective clients, maintaining records of business communications, and protecting our website and systems from security threats.

Consent. Where you have provided explicit consent for specific processing activities, such as subscribing to informational emails or agreeing to the use of non-essential cookies, we rely on that consent as the legal basis. You may withdraw your consent at any time by contacting us using the information provided in the Contact Information section below.

Compliance with Legal Obligations. We may process data as required to comply with applicable laws, regulations, court orders, or government requests. This includes retaining records for tax and accounting purposes, responding to lawful requests from public authorities, and complying with data protection legislation.

7. Sharing and Disclosure of Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. Our commitment to protecting your data extends to carefully limiting the circumstances under which your information is shared. The following describes the specific scenarios in which your data may be disclosed.

Service Providers. We may share data with trusted third-party service providers who perform functions on our behalf, including cloud hosting providers that store website data, analytics services that process usage metrics, email delivery platforms that facilitate communications, payment processors that handle billing transactions, and customer relationship management software providers. Each service provider is contractually bound to protect your data, use it only for the purposes we specify, and delete or return it upon termination of the service relationship.

Legal Compliance. We may disclose information when required to do so by law, such as in response to a valid court order, subpoena, civil investigative demand, or government audit. We will make reasonable efforts to notify you of such disclosure unless prohibited by law or where the request relates to an emergency involving danger of death or serious physical injury.

Business Transfers. In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website before your data becomes subject to a different privacy policy.

With Your Consent. We may share your information for purposes not described in this policy when we have obtained your explicit consent to do so. You retain the right to withdraw such consent at any time.

8. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by applicable laws and regulations. The specific retention period depends on the nature of the data, the purpose for which it was collected, and any legal obligations that mandate a minimum retention period.

Client project data is retained for the duration of the professional engagement plus a reasonable archival period of up to seven years following project completion. This archival period allows us to reference past work for quality assurance, to address any post-project inquiries or warranty claims, and to comply with professional standards and legal requirements for business records.

Contact form submissions and general inquiry data are retained for a period of up to three years from the date of last interaction. If an inquiry does not result in a client relationship, the associated data is purged after this retention window. Communication records related to active or former client relationships are retained alongside the corresponding project data.

Technical logs, analytics data, and automated usage records are retained for a period of twenty-four months, after which they are deleted or irreversibly anonymized. Anonymized data that cannot be linked to any individual may be retained indefinitely for analytical and research purposes.

When a retention period expires, we securely delete or destroy the relevant data using industry-standard methods. You may request earlier deletion of your data by contacting us, subject to any legal requirements that mandate continued retention.

9. Data Security

We implement administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security framework is continuously evaluated and updated to address evolving threats and to incorporate current best practices in data protection.

Our technical safeguards include the use of Transport Layer Security (TLS) encryption for all data transmitted between your browser and our servers, firewalls and intrusion detection systems that monitor network traffic for suspicious activity, role-based access controls that limit data access to personnel with a legitimate business need, multi-factor authentication on administrative systems, and regular automated vulnerability scanning and penetration testing.

Our administrative safeguards include documented data handling policies that all employees and contractors must follow, regular training on privacy and security practices, confidentiality agreements signed by all personnel with access to client data, and a designated security team responsible for monitoring compliance and investigating potential incidents.

Despite these measures, no method of electronic storage or transmission over the Internet is completely secure. We cannot guarantee the absolute security of your data against all potential threats. We encourage you to take precautions on your end, such as using strong passwords, keeping your software updated, and being vigilant about phishing attempts and other social engineering attacks.

10. Your Rights and Choices

Depending on your jurisdiction of residence, you may have certain rights regarding the personal information we hold about you. We are committed to honoring these rights and will respond to valid requests within the timeframes prescribed by applicable law. The following is a summary of the rights that may be available to you.

Right to Access. You may request a copy of the personal data we hold about you, along with information about how that data is being processed, the categories of data involved, and the parties with whom it has been shared.

Right to Rectification. If you believe that the personal information we hold about you is inaccurate or incomplete, you may request that we correct or supplement it. We will make reasonable efforts to verify the accuracy of the updated information before applying changes to our records.

Right to Deletion. You may request that we delete your personal information from our systems, subject to certain exceptions such as legal obligations that require us to retain the data or legitimate business purposes that override the deletion request under applicable law.

Right to Restrict Processing. You may request that we limit the processing of your personal data in certain circumstances, such as while we verify the accuracy of data you have contested or while we evaluate whether our legitimate interests override your objection to processing.

Right to Data Portability. Where processing is based on consent or contract and is carried out by automated means, you may request that we provide your data in a structured, commonly used, and machine-readable format, and you may request that we transmit that data directly to another controller where technically feasible.

Right to Object. You may object to the processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests and rights.

Right to Withdraw Consent. Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us using the information provided in the Contact Information section of this policy. We may require verification of your identity before processing your request. We will respond to verified requests within the time period required by applicable law, typically within thirty days.

11. Privacy for Children

Our website and services are directed at businesses and professionals. They are not intended for or directed to individuals under the age of eighteen. We do not knowingly collect, use, or disclose personal information from anyone under the age of eighteen. If you are under eighteen years of age, you are not permitted to use our website or services, and you should not submit any personal information through our digital channels.

If we become aware that we have inadvertently collected personal information from a minor under the age of eighteen without verified parental consent, we will take immediate steps to delete that information from our records. If you are a parent or legal guardian and you believe that your child has provided us with personal data, please contact us promptly using the contact details provided in the Contact Information section of this policy.

We encourage parents and guardians to actively monitor the online activities of their children and to educate them about the importance of protecting their personal information. Parents should instruct their children never to provide personal data through websites without obtaining permission first. We support efforts by parents, educators, and advocacy organizations to promote safe online practices for young people.

12. International Data Transfers

ACORN GRAPHICS LLC is headquartered in the United States, and our primary servers and data storage infrastructure are located within the United States. If you access our website or services from outside the United States, including from the European Economic Area, the United Kingdom, Canada, Asia, or any other international location, please be aware that your personal information will be transferred to, stored, and processed in the United States.

The data protection laws of the United States may differ from the privacy laws in your country of residence. In some cases, the level of protection afforded to personal data in the United States may not be equivalent to the protections provided under your local regulations. By using our website, providing your personal information, or engaging our services, you expressly consent to the transfer of your data to the United States and to the processing of that data in accordance with this Privacy Policy.

When we transfer personal data from jurisdictions with stricter data protection requirements to the United States, we implement appropriate safeguards designed to ensure that your data receives an adequate level of protection. These safeguards may include standard contractual clauses, data processing agreements, and technical measures such as encryption and access controls.

13. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and understand how visitors interact with our content. Cookies are small text files that are placed on your device by your web browser when you visit a website. They serve a variety of functions, from remembering your preferences to enabling certain website features.

We use the following categories of cookies on our website. Essential Cookies are necessary for the basic operation of the website, including security features, load balancing, and session management. These cookies do not require your consent and cannot be disabled through our cookie controls. Analytics Cookies help us understand how visitors engage with our website by collecting information about page visits, time on site, navigation paths, and referral sources. This data is aggregated and anonymized where possible. Functional Cookies enable enhanced features such as remembering form field entries and maintaining user interface preferences across sessions.

You can manage your cookie preferences through your browser settings. Most web browsers allow you to block all cookies, delete existing cookies, or receive a notification before a cookie is placed on your device. Please note that blocking essential cookies may prevent certain features of our website from functioning correctly. For detailed instructions on managing cookies in your specific browser, please refer to the help documentation provided by your browser vendor.

14. Third-Party Services and Links

Our website may contain links to third-party websites, applications, plugins, and services that are not owned, operated, or controlled by ACORN GRAPHICS LLC. These links are provided for your convenience and informational purposes only. The inclusion of a link to a third-party destination does not constitute an endorsement by the Company of that third party, its products, its services, or its privacy practices.

This Privacy Policy applies solely to information collected by ACORN GRAPHICS LLC through our own website and services. It does not apply to third-party websites, even if you access them through a link on our site. We have no control over and assume no responsibility for the content, privacy policies, or data collection practices of any third-party websites or services.

We strongly encourage you to review the privacy policy of every website you visit before submitting any personal information. If you choose to interact with a third-party service through our website, you do so at your own risk, and the terms and conditions and privacy policy of that third party will govern your interaction. We recommend that you exercise caution and read the privacy statements of all external destinations that collect personal data.

15. Do Not Track Signals

Some web browsers offer a Do Not Track (DNT) feature that sends a signal to websites indicating that the user does not wish to have their online activity tracked over time and across different websites. At this time, there is no universally accepted standard for how websites should respond to DNT signals, and no consistent industry or legal framework has been established to govern the handling of these signals.

As a result, our website does not currently respond to Do Not Track signals sent by browsers in a standardized manner. We continue to monitor developments in this area, including the work of standards bodies, regulatory agencies, and industry groups that are working toward a consensus on DNT implementation. If a widely adopted standard emerges, we will evaluate our practices and update this policy accordingly.

In the interim, you can exercise control over online tracking through the cookie management options described in the Cookies and Tracking Technologies section of this policy. You may also explore privacy-enhancing browser extensions, virtual private networks, and other tools that provide additional layers of control over your digital footprint.

16. Changes to This Privacy Policy

We reserve the right to update, amend, or modify this Privacy Policy at any time to reflect changes in our data practices, technological capabilities, legal obligations, or business operations. When we make changes to this policy, we will revise the Last Updated date displayed at the top of the page and post the updated version on our website.

For material changes that significantly affect the way we collect, use, or share your personal information, we will provide additional notice. This notice may take the form of a prominent announcement on our website, a direct email to clients and subscribers for whom we have contact information, or a notification within our client portal if one is in use. We encourage you to review this Privacy Policy periodically so that you remain informed about our current data handling practices.

Your continued use of our website or services after the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes and your agreement to be bound by the updated terms. If you do not agree with the revised policy, you should discontinue your use of our website and contact us to request deletion of your data, subject to any legal retention requirements.

17. Contact Information

If you have questions, concerns, comments, or requests regarding this Privacy Policy or our data protection practices, please contact us using the information provided below. We take all privacy-related inquiries seriously and will respond in a timely manner, typically within five business days for general inquiries and within thirty days for formal data subject requests.

You may reach us through any of the following channels:

• Email: direct@acorngraphics.lol
• Phone: +1 559 987 4999
• Mail: ACORN GRAPHICS LLC, 371 W Industrial Dr, Pleasant Grove - 84062-2646, United States (US)
• Website: https://www.acorngraphics.lol

When contacting us about a privacy matter, please provide sufficient detail to help us understand your concern and verify your identity. We may request additional information to confirm your identity before processing certain requests, particularly those involving access to or deletion of personal data. This verification step is a security measure designed to prevent unauthorized disclosures.

18. Additional Disclosures

This section contains supplementary disclosures that may be applicable based on your jurisdiction of residence. These disclosures are provided in good faith to assist you in understanding your rights under specific state and federal privacy laws within the United States.

California Privacy Rights. Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), residents of California have specific rights regarding their personal information. These include the right to know what personal information is collected, used, shared, or sold; the right to request deletion of personal information; the right to opt out of the sale or sharing of personal information; and the right to non-discrimination for exercising these rights. ACORN GRAPHICS LLC does not sell personal information as defined under the CCPA. California residents may submit verified requests to exercise their rights by contacting us through the channels listed in the Contact Information section.

Virginia, Colorado, Connecticut, and Utah Privacy Rights. Residents of states that have enacted comprehensive privacy legislation may also have rights similar to those described above. We honor all valid requests from residents of these states in accordance with the applicable statutory frameworks. To submit a request, please contact us directly and specify your state of residence so that we may process your request under the appropriate set of rights and timeframes.

Nevada Privacy Rights. Nevada residents have the right to opt out of the sale of covered information. As stated throughout this policy, ACORN GRAPHICS LLC does not sell personal information. Nevada residents may nonetheless submit an opt-out request by contacting us, and we will confirm that no sale has occurred and that no such activity is planned.

Data Breach Notification. In the event of a data breach involving personal information that poses a risk of harm to affected individuals, we will notify the relevant supervisory authorities and affected data subjects in accordance with the timeframes and requirements prescribed by applicable data breach notification laws. Notifications will include a description of the breach, the categories of data involved, the steps we have taken in response, and recommendations for affected individuals to protect themselves.