Privacy Policy
This Privacy Policy explains how Undiluted ("we", "us") collects, uses, shares, and protects personal information in connection with our website and services. We comply with applicable U.S. and EU laws, including the EU/UK GDPR and U.S. state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA), to the extent they apply.
Data Controller
The data controller for website data is GetUndiluted. You can contact us at hello@getundiluted.com.
Information We Collect
- Contact details you submit (name, email, preferred contact method, message).
- Technical data (IP address, device/browser information) when analytics is enabled with your consent.
- Cookies and similar technologies used for strictly necessary functions and, with consent, analytics.
Purposes and Legal Bases (GDPR)
- Responding to inquiries and providing information about our software services (legitimate interests; performance of a contract, where applicable).
- Security, fraud prevention, and site reliability (legitimate interests).
- Analytics to improve the site and understand usage (consent). Analytics only loads after opt‑in via our consent banner.
Retention
We keep personal data only as long as necessary for the purposes above, or as required by law. Contact inquiries are typically retained for up to 24 months unless a longer period is needed for recordkeeping or legal obligations.
Sharing and Processors
We may share personal data with service providers (e.g., email delivery, hosting, analytics) under contracts that require appropriate security and limit processing to our instructions. We do not sell personal information.
International Transfers
If data is transferred outside your jurisdiction, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) where required by law.
Your Rights (EU/UK GDPR)
- Access, rectification, erasure, restriction, objection, and portability.
- Withdraw consent at any time (for consent‑based processing such as analytics) without affecting prior lawful processing.
- Complain to your local supervisory authority if you believe your rights have been violated.
U.S. State Privacy Rights
Residents of certain U.S. states (e.g., California, Colorado, Connecticut, Utah, Virginia) may have rights to access, delete, correct, and opt‑out of certain processing. To exercise rights, contact us at hello@getundiluted.com.
Cookies & Analytics
We use a consent banner. Analytics (e.g., via Google Tag Manager) only loads after you click Accept. You can revoke consent by clearing the consent setting in your browser’s local storage and reloading the page.
Security
We use reasonable technical and organizational measures to protect personal data. No method of transmission or storage is 100% secure.
Children
Our site and services are not directed to children under 16, and we do not knowingly collect their data.
Contact
For questions or to exercise your rights, contact hello@getundiluted.com.
Effective date: 2025-11-13