Privacy Policy

SiteCitrus LLC ("SiteCitrus," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your information when you visit sitecitrus.com or use any service offered by SiteCitrus (together, the "Services"). By using the Services, you agree to the practices described here. If you do not agree, please do not use the Services.

1. Who we are

SiteCitrus LLC is a New York limited liability company that designs, builds, and maintains websites for small businesses and organizations. For any question about this Privacy Policy or about your information, contact us at [email protected].

2. Information we collect

Information you give us. When you fill out our contact form, we collect the information you provide, which includes your name, email address, business name, industry, and (optionally) your phone number, current website URL, how you heard about us, and any message you choose to send. When you become a client, we collect additional information required to deliver your project, such as business address, logo files, brand assets, photos, copy, billing contact information, and any content you provide for inclusion on your website.

Payment information. Client payments are processed by Stripe, Inc. SiteCitrus does not collect or store full credit card numbers, bank account numbers, or other complete payment card data. Stripe handles all payment processing and storage under its own privacy and security practices at stripe.com/privacy.

Information collected automatically. When you visit sitecitrus.com, our hosting and content delivery providers automatically collect limited technical information such as your IP address, browser type, operating system, referring URL, pages visited, and the date and time of your visit. This information is used to deliver the website, maintain security, prevent abuse, and troubleshoot problems.

Cookies and similar technologies. sitecitrus.com uses a minimal set of strictly necessary cookies and local storage values (including a theme preference). We do not use advertising cookies, cross-site tracking pixels, or third-party analytics cookies on sitecitrus.com. Websites we build for clients may use additional cookies and tracking technologies at the client's direction; those uses are governed by the client's own privacy policy, not this one.

Information we do not collect. We do not knowingly collect Social Security numbers, driver's license numbers, passport numbers, biometric data, precise geolocation, or any category of sensitive personal information as defined under applicable law. We do not collect information from children under 13.

3. How we use your information

We use the information we collect to respond to your inquiries and provide the Services you request; to design, build, launch, and maintain your website; to process payments and manage billing and subscriptions; to communicate with you about your project, your account, and service updates; to send transactional messages such as invoices, receipts, renewal notices, and security alerts; to monitor, secure, and improve sitecitrus.com and our Services; to detect, prevent, and address fraud, abuse, and technical issues; and to comply with applicable law and enforce our Terms of Service.

We do not sell your personal information. We do not share your personal information with third parties for their own direct marketing purposes.

4. How we share information

Service providers. We use a small number of trusted service providers to operate the Services, and each is contractually limited to using your information only to deliver the service we ask of them. Our current providers include Netlify, Inc. (hosting and contact form processing), Cloudflare, Inc. (DNS, content delivery, and security), Stripe, Inc. (payment processing), Google LLC (web fonts), UptimeRobot (availability monitoring), and the email providers we use to send and receive messages at [email protected].

Legal and safety disclosures. We may disclose information when we believe in good faith that disclosure is required by law, subpoena, court order, or other legal process, or is necessary to protect the rights, property, or safety of SiteCitrus, our clients, our users, or the public.

Business transfers. If SiteCitrus is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its assets, your information may be transferred as part of that transaction. The receiving party will be required to honor this Privacy Policy or notify you of any material changes.

With your consent. We share information in any other circumstance only with your consent or at your direction.

5. Data retention

We retain the information you provide for as long as your account or relationship with SiteCitrus is active and for a reasonable period afterward to comply with our legal obligations, resolve disputes, enforce our agreements, and maintain business records. Contact form submissions from non-clients are typically retained for up to 24 months, unless you request earlier deletion. Client records, project files, and billing records are typically retained for up to seven years after the end of the engagement to comply with tax and recordkeeping obligations.

6. Security

We use reasonable administrative, technical, and physical safeguards to protect the information we hold, including encryption in transit, access controls, and vetted service providers. No system is perfectly secure, and we cannot guarantee the security of any information you transmit to us. You are responsible for keeping the credentials you use to access our Services, or any accounts at third parties used to operate your site, confidential and secure.

7. Your rights

Depending on where you live, you may have the right to request access to the personal information we hold about you, to correct inaccurate information, to request deletion, to restrict or object to certain processing, to port your information, and to withdraw consent where processing is based on consent. To exercise any of these rights, email us at [email protected]. We will respond within the time required by applicable law. We will not discriminate against you for exercising any of these rights.

California residents. If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"). These include the right to know what personal information we collect and how we use it, the right to request deletion, the right to correct inaccurate information, the right to opt out of the "sale" or "sharing" of personal information (we do not sell or share your personal information as those terms are defined in the CCPA), and the right to limit use of sensitive personal information (we do not collect sensitive personal information). You may designate an authorized agent to make a request on your behalf.

Other U.S. state residents. Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may have similar rights, including access, correction, deletion, portability, and the right to opt out of targeted advertising, sale, or profiling. We do not engage in targeted advertising, sale of personal information, or profiling that produces legal or similarly significant effects.

EU and UK residents. If you are located in the European Economic Area, the United Kingdom, or Switzerland, you may have additional rights under the General Data Protection Regulation and equivalent laws. Our lawful bases for processing are the performance of a contract (when you engage us to build or maintain your website), our legitimate interests (in operating and improving our business and preventing abuse), compliance with legal obligations, and your consent where required. You also have the right to lodge a complaint with your local data protection authority.

8. International data transfers

SiteCitrus is based in the United States. Our service providers are primarily located in the United States. If you access our Services from outside the United States, information you provide will be transferred to, stored in, and processed in the United States, which may have different data protection laws than your country of residence. By using the Services, you consent to this transfer.

9. Children's privacy

Our Services are not directed to children under 13 and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, contact us at [email protected] and we will delete it.

10. Do Not Track

Some browsers transmit "Do Not Track" signals. There is no industry standard for how to respond to these signals. sitecitrus.com does not use cross-site tracking and does not respond to Do Not Track signals.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page. If the changes are material, we will provide a more prominent notice, such as an email to active clients or a notice on sitecitrus.com. Your continued use of the Services after a change takes effect means you accept the updated Privacy Policy.

12. Contact us

Questions, concerns, or requests regarding this Privacy Policy or your information can be sent to SiteCitrus LLC, Attn: Privacy, at [email protected].