This Privacy Policy explains how I, David Keyes, collect, use, share, and protect your personal information when you visit davidkeyes.com or get in touch with me. It is written in plain language.

01. Who I am

I am David Keyes, a creative director based in Los Angeles, California. This website is my portfolio and journal, and I operate it personally. In this policy, "I," "me," and "my" refer to David Keyes.

This Privacy Policy applies to the website at www.davidkeyes.com and to the communications I send in response to your inquiries.

Questions about this policy? Email me at privacy@davidkeyes.com.

02. Information I collect

I collect information in two ways: directly from you, and automatically through your use of the site, but only where you allow it.

Information you give me directly

• Contact and inquiry information: your name, email address, company name, phone number if you choose to include it, and the message you send through the contact form or the privacy request form.
• Project information: details you share about a potential engagement, such as your goals, timing, and budget range.
• Communications: emails and other correspondence you send me directly.

Information collected automatically

When you visit the site, some information is collected automatically:

• Server and security data: your IP address, browser type, and the pages requested, recorded by my hosting provider to deliver the site and keep it secure.
• Your cookie choice: a first-party cookie that remembers whether you accepted or declined analytics and marketing cookies.
• Analytics and marketing data, only with your consent: if you allow them, Google Analytics and HubSpot record how you use the site, such as pages visited, time on page, referring URLs, device type, and approximate location. See Section 05 and the Cookie Policy.

03. How I use your information

• To reply to your inquiry and discuss a potential project.
• To send you the confirmation and follow-up emails you would expect after contacting me.
• To understand how visitors use the site and improve it, where you have consented to analytics.
• To connect a form submission to the visit it came from, where you have consented to marketing cookies.
• To keep the site secure and working, and to prevent abuse of its forms.
• To keep records and meet my legal obligations.

I do not send newsletters, and I will not add you to a mailing list because you contacted me.

04. How I share your information

I do not sell your personal information. I share it only with the service providers that help me run the site, and only so far as each needs it to do its job:

• Vercel: hosts the website and processes server logs.
• WordPress (hosted on my own server): stores the site's content and the messages you send through the site's forms.
• Resend: delivers the emails sent from the contact and privacy request forms.
• Google Analytics: site analytics, only with your consent.
• HubSpot: visit and form attribution, only with your consent.

Each provider operates under its own privacy policy. I may also disclose information if the law requires it, or where it is necessary to protect my rights, the safety of others, or the security of the site. I will share your information for any other purpose only with your consent.

05. Cookies and tracking technologies

Cookies are small text files a website stores on your device. This site uses three categories, and you choose two of them in the cookie banner.

Strictly necessary

Required for the site to work and to remember your cookie choice. These cannot be switched off and are not used for marketing.

Analytics

Google Analytics helps me see, in aggregate, how visitors move through the site. It loads only if you allow analytics cookies.

Marketing

HubSpot connects a contact form submission to the visit it came from, so I can see which work brought you here. It loads only if you allow marketing cookies.

Your choices

To change your choice at any time, use the Manage cookie preferences button on the Cookie Policy page. When you withdraw consent, the site stops loading those tools and clears the cookies they set. You can also block cookies entirely in your browser settings.

06. Data retention

• Inquiries and contact form submissions: kept for up to 24 months after our last exchange, longer if we work together.
• Privacy requests: kept for 24 months, as California law requires.
• Analytics data: kept for 14 months in Google Analytics.
• Server and security logs: kept for 30 days by my hosting provider.

When information is no longer needed, I delete it or make it anonymous.

07. Data security

The site is served only over encrypted connections (HTTPS), and access to the systems that hold your information is limited to me and protected by strong authentication. No method of transmission or storage is completely secure, so I cannot guarantee absolute security. If a breach affects your information, I will notify you as the law requires.

08. California privacy rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you these rights:

• Right to know what personal information I collect, use, and disclose about you.
• Right to delete personal information I have collected from you, subject to legal exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of your personal information.
• Right to limit the use of sensitive personal information. I do not collect sensitive personal information.
• Right to non-discrimination for exercising any of these rights.

Sale and sharing

I do not sell personal information. Analytics and marketing cookies, when you allow them, may count as "sharing" under California law. You can opt out by declining those cookies in the cookie banner, or as described on the Do Not Sell or Share My Personal Information page at davidkeyes.com/do-not-sell.

How to submit a request

• Use the request form on the Privacy Policy or Do Not Sell page.
• Email privacy@davidkeyes.com with the subject line "California Privacy Request."

I will verify your identity before acting on a request and respond within 45 days, notifying you if I need more time.

Categories collected in the last 12 months

• Identifiers: name, email address, phone number (if provided), IP address.
• Professional information: company name and project details you choose to share.
• Internet or network activity: how you use the site, with your consent.

09. Email

When you contact me, the site sends you a confirmation email, and I reply from my own address. If you would rather I did not follow up, reply and say so, or email privacy@davidkeyes.com. I comply with the CAN-SPAM Act and do not send unsolicited commercial email.

10. Children's privacy

This site is not directed to children under 16, and I do not knowingly collect their personal information. If you believe a child has sent me information, email privacy@davidkeyes.com and I will delete it.

11. International visitors

Your information is processed in the United States. If you are in the European Economic Area or the United Kingdom, I process it on the basis of your consent (for analytics and marketing cookies), my legitimate interest in replying to inquiries you send, and compliance with legal obligations. You may ask to access, correct, delete, or move your information, or object to its use, by emailing privacy@davidkeyes.com.

12. Third-party links

The site links to other websites, including client sites and social platforms. This policy does not cover them, and I am not responsible for their privacy practices.

13. Changes to this policy

I may update this policy from time to time. When I do, I will revise the "Last Updated" date above, and for material changes I will post a notice on the site.

14. Contact

Questions, requests, or concerns about how I handle your information:

David Keyes

Los Angeles, California

privacy@davidkeyes.com

www.davidkeyes.com