Privacy Policy
Privacy Policy
Effective Date: May 31, 2026
This Privacy Policy describes how ChangeLabs, LLC ("ChangeLabs," "we," "us") collects, uses, and protects information when you visit changelabs.com and its subdomains.
1. What We Collect
Information you give us directly. When you fill out a contact form, we collect: your name, company, email address, phone number (if provided), the nature of your inquiry, your timeline, and how you heard about us. If you correspond with us by email, we keep that correspondence.
Information collected automatically. When you visit the site, our hosting and analytics providers collect standard technical information, including your IP address, browser type, device type, operating system, pages visited, time on site, referring URL, and approximate geographic location based on IP address.
We use Google Analytics and Netlify Analytics for this purpose. These services collect information about how visitors use the site. Google Analytics uses cookies; you can opt out using the Google Analytics opt-out browser add-on at https://tools.google.com/dlpage/gaoptout. Netlify Analytics is server-side and does not use cookies.
No sensitive data. We don't collect health information, financial account data, Social Security numbers, or other sensitive personal information through this site.
2. How We Use It
We use the information we collect to:
- Respond to your inquiry and determine whether there's a fit for an engagement.
- Communicate with you about our services.
- Understand how the site is being used and improve it.
- Detect and prevent fraud, abuse, or security incidents.
- Comply with legal obligations.
We do not sell your personal information. We do not share it with third parties for their own marketing purposes.
3. Who We Share It With
Service providers. We share information with vendors that help us operate the site and our business, including our hosting provider (Netlify), our analytics provider (Google), our form handler, and our email platform. These providers access your information only to perform services on our behalf and are contractually required to protect it.
Legal requirements. If we are required by law, subpoena, court order, or regulatory authority to disclose information, we will comply. We may also disclose information when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
Business transfers. If ChangeLabs is acquired, merged, or undergoes a similar transaction, your information may be transferred to the successor entity. We would notify you before your information becomes subject to a different privacy policy.
4. Cookies and Tracking Technologies
This site uses cookies and similar technologies for analytics and basic site functionality. A cookie is a small text file stored on your device. The cookies on this site include:
- Google Analytics cookies (analytics and performance measurement).
- Functional cookies set by Netlify to operate the site.
You can disable cookies through your browser settings. Some parts of the site may not function correctly without them. You can opt out of Google Analytics specifically using the link in Section 1.
5. Data Retention
We retain contact form submissions and related correspondence for as long as there is an active or potential business relationship, and for up to seven (7) years after to maintain records and meet legal obligations. Analytics data is retained according to the default settings of Google Analytics and Netlify, generally between fourteen (14) and twenty-six (26) months. You can ask us to delete your information at any time — see Section 7.
6. Security
We take reasonable technical and organizational steps to protect the information we hold, including encryption in transit, access controls, and reputable third-party providers. No system is completely secure. If you believe your information has been compromised, contact us immediately at josephkline@changelabsmarketing.com.
7. Your Rights
Depending on where you are located, you may have rights over your personal information.
California residents (CCPA and CPRA). You have the right to:
- Know what categories and specific pieces of personal information we have collected about you.
- Request deletion of your personal information, subject to certain exceptions.
- Correct inaccurate personal information.
- Opt out of any sale or sharing of your personal information for cross-context behavioral advertising. We do not sell or share personal information in this way.
- Limit our use of sensitive personal information. We do not collect sensitive personal information through this site.
- Not be discriminated against for exercising these rights.
To exercise these rights, contact us at josephkline@changelabsmarketing.com. We will respond within forty-five (45) days. We may need to verify your identity before responding.
EEA, UK, and Swiss residents (GDPR and UK GDPR). You have the right to access, correct, delete, and port your personal data, and to object to or restrict certain processing. Our legal basis for processing contact form submissions is our legitimate interest in responding to business inquiries. Our legal basis for analytics is our legitimate interest in understanding and improving the site, balanced against your privacy interests. To exercise your rights, contact josephkline@changelabsmarketing.com.
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with your local data protection authority.
8. International Visitors
ChangeLabs operates from the United States. If you visit the site from outside the US, your information will be transferred to and processed in the US, where data protection laws may differ from those in your country.
9. Children
This site is not directed at children under thirteen (13), and we do not knowingly collect personal information from them. If you believe a child has submitted information through this site, contact us and we will delete it.
10. Disputes
Privacy-related disputes are subject to the dispute resolution provisions in our Terms of Service, including binding arbitration administered by JAMS in Orange County, California. Your statutory rights under the CCPA, GDPR, or other applicable privacy laws are not waived by this provision.
11. Changes to This Policy
We may update this policy. When we do, we will update the effective date at the top. Material changes will be noted clearly on the site. Continued use of the site after an update constitutes acceptance of the revised policy.
12. Contact
Privacy questions or requests:
ChangeLabs, LLC
32162 Calle Los Elegantes
San Juan Capistrano, CA 92675
josephkline@changelabsmarketing.com