Privacy Policy

1. Who we are

This website is operated by MBC (Montúfar Burgos Cruz) (“MBC,” “we,” “us,” or “our”), a small US-based creative and technology studio that designs, builds, and manages websites, apps, brand, and marketing for businesses. We work with clients across the United States and beyond. You can reach us any time at mbcbusinesses@gmail.com.

2. Scope and effective date

This policy explains what information we collect through this website, how and why we use it, who we share it with, the choices and rights you have, and how we protect it. It takes effect on the “last updated” date shown above and applies to this website only. It does not cover any third-party site we link to, and it does not govern the paid work we do for clients — those engagements are covered by a separate written agreement between you and us. This policy is written in English; while our website is also offered in Spanish, French, and German for convenience, the English version of this policy is the controlling one, and we are happy to help you understand it in another language if you email us first.

3. Information we collect, and how

We keep data collection to a minimum. This is a static marketing site: there are no accounts to create, nothing to buy, no payments taken here, no file uploads, and no comment sections or other user-generated content. There are only two ways information reaches us:

• Information you give us through the contact form. When you fill in our contact form, we collect what you choose to provide: your name, your business name, your email address, your phone number, and the contents of your message. You give us this information directly, and we use it only to respond to you and to discuss how we might help your business.
• Information collected automatically through analytics — only with your consent. If, and only if, you agree through our cookie banner, we use Google Analytics (GA4) to collect standard, aggregated usage data such as the pages you view, how you arrived, your approximate region, your device and browser type, and on-page engagement. This is collected automatically through cookies and similar technologies in your browser. If you do not consent, analytics does not run and this data is not collected.

We do not knowingly collect any sensitive personal information (such as government IDs, health, financial-account, or precise-location data), and we ask you not to include such information in your message.

4. How we use your information, and our legal bases

We use the information described above to respond to your inquiries and provide the services you ask about; to operate, maintain, and improve this website; to keep reasonable business records; and to comply with applicable law. We do not use it for advertising, and we do not build advertising or marketing profiles.

Where data-protection law (such as the EU/UK GDPR) requires a legal basis, we rely on the following:

• Legitimate interests for handling your contact-form message — namely, responding to a request you sent us and running our business — in a way that does not override your rights.
• Consent for analytics cookies and the usage data they collect. You can withdraw that consent at any time, and doing so does not affect anything we did before you withdrew it.
• Legal obligation where we must keep or disclose information to comply with the law.

5. Cookies

We use a small number of cookies and similar technologies. Strictly necessary ones — which are always on — remember your cookie choice and your language preference. Optional analytics cookies run only with your consent. For details and to change your choice at any time, see our Cookie Policy and the “Cookie settings” link in our footer.

6. Who we share it with

We share information only with the service providers that help us operate this website and respond to you, and they may process it solely on our behalf and on our instructions — never for their own purposes. Specifically: our contact form is delivered to us by Formspree (Formspree, Inc.) — see the Formspree Privacy Policy — and arrives in a Google Gmail inbox. Where you have given consent, usage analytics are provided by Google Analytics — see the Google Privacy Policy. Some files needed to display the site — web fonts (from Google Fonts), a phone-number formatting library (from the jsDelivr CDN), and an animation library (from the Cloudflare CDN) — load directly from those providers when the page opens, before you interact with our cookie banner; as a normal part of delivering those files, the providers receive your IP address and basic device information. We use them only to display the site, not to track you, and they set no advertising cookies here. We do not sell or rent your personal information, and we do not share it for advertising. We may also disclose information if the law requires it or to protect our rights, but only to the extent necessary.

7. International data transfers

We are based in the United States and our service providers are too, so information you submit is processed in the US. If you are in the EU, the UK, or another region with data-export rules, this means your information may be transferred to a country whose data-protection laws differ from your own. Where such transfers happen, our providers are expected to rely on recognized safeguards — for example, Google participates in the EU-US Data Privacy Framework, and providers such as Formspree offer data-processing terms with Standard Contractual Clauses. You can review each provider’s current terms through the links above.

8. How long we keep it

Contact-form messages arrive in our email inbox. We keep them while we are in touch about your inquiry and for a reasonable period afterward, and we delete inquiries that do not become projects within about 12 to 24 months. You can ask us to delete your message at any time by emailing mbcbusinesses@gmail.com, and we will do so unless the law requires us to keep it. Analytics data is retained only in aggregated form, according to our analytics configuration, and no longer than necessary for the purpose described above.

9. Security

We take the security of your information seriously and use reasonable technical and organizational measures to protect it against unauthorized access, loss, misuse, or disclosure — including serving this site over an encrypted connection (HTTPS), working only with reputable service providers, and limiting access to the information to those who need it in order to respond to you. As is true of every website and online service, no method of transmitting or storing data can be guaranteed one hundred percent secure; but we work diligently to safeguard the information you share with us and to address any concern promptly. If we ever become aware of a breach affecting your personal information, we will act quickly to address it and notify you and any regulator where the law requires. If you ever believe your information may have been compromised, please contact us right away.

10. Your privacy rights

Depending on where you live, you may have some or all of the following rights over the personal information we hold about you: to access it, to correct it, to delete it, to receive a copy in a portable form, to object to or restrict certain processing, and to withdraw consent for analytics at any time. We will not discriminate or retaliate against you for exercising any of these rights.

To make a request, email us at mbcbusinesses@gmail.com. To protect your information, we may need to verify your request using the email address tied to it; an authorized agent may make a request on your behalf with proof of authorization. We aim to respond within about 30 to 45 days, and we will let you know if we need more time. You can withdraw analytics consent yourself at any time using the “Cookie settings” link in the footer. If you believe we have not handled your information properly, you have the right to complain to your data-protection regulator — for example, an EU or UK supervisory authority, or the California Privacy Protection Agency or California Attorney General.

11. A note for California residents

MBC is a small studio that falls below the thresholds that make a business subject to the California Consumer Privacy Act, so those specific obligations do not apply to us. Even so, we honor the spirit of the law: we collect only the limited information described above, we use it only for the purposes described, and we do not sell or “share” personal information (as those terms are defined under California law) for cross-context behavioral advertising. California residents are welcome to exercise the choices in the section above.

12. No marketing, no tracking-based advertising, no automated decisions

We do not run a newsletter or mailing list and we do not send marketing emails — if you contact us, we reply about your inquiry and nothing more. We do not use advertising pixels, retargeting, or social-media tracking embeds, and we do not make automated decisions or profile you in any way that produces legal or similarly significant effects. Because we do not sell your information or use it for targeted advertising, there is nothing to opt out of on that front. We also respect privacy signals your browser can send: if your browser sends a Global Privacy Control (GPC) signal, we treat it as a request not to run analytics and do not enable Google Analytics, and we recognize Do Not Track in the same spirit. Analytics never runs unless you opt in.

13. Children

This website is intended for businesses and a general adult audience. It is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

14. Third-party links

Our site may link to third-party websites, such as a client’s site or a provider’s policy. We are not responsible for the content or privacy practices of those sites, and this policy does not apply to them. We encourage you to read the privacy policy of any site you visit.

15. Business transfers

If MBC is ever involved in a merger, acquisition, financing, or sale of all or part of its business or assets, information covered by this policy may be transferred as part of that transaction. If that happens, we will require the recipient to honor this policy or notify you of any material change.

16. Changes to this policy

We may update this policy from time to time. The “last updated” date above reflects the latest version. If we make a material change to what we collect, how we use it, or who we share it with, we will note it prominently on this page (and email you if we have your address), and we will not apply that change to information you already gave us without telling you first.

17. Contact

Questions about this policy or your information can be sent to mbcbusinesses@gmail.com.