Privacy Policy

Last updated: September 27, 2025

This Privacy Policy for Smart Brand Ideas LLC (“Company,” “we,” “us,” or “our“) describes how we collect, use, disclose, and safeguard personal information when you:

• Visit smartbrandideas.com or any site that links to this Privacy Policy (collectively, the Websites);
• Use our applications (web, mobile, or social) that link to this Privacy Policy (the Apps);
• Interact with us in other ways, including sales, marketing, events, and customer support (together with the Websites and Apps, the Services).

By using the Services, you acknowledge this Privacy Policy. If you do not agree, please discontinue use. You can contact us anytime at hello@smartbrandideas.com.

Quick Summary

• We collect the information you provide to us and certain information automatically (e.g., device data, IP address, usage analytics).
• We do not collect “sensitive” personal data unless you voluntarily provide it and we have a lawful basis.
• We do not knowingly collect information from children under 18.
• Depending on your location (e.g., EU/UK, California, Washington State), you may have additional rights and disclosures described below.
• We use reasonable administrative, technical, and organizational safeguards, but no system is 100% secure.

Table of Contents

1. Information We Collect
2. How We Use Information
3. Legal Bases (EEA/UK)
4. When We Share Information
5. Third‑Party Sites & Services
6. Cookies, Pixels & Similar Tech
7. Data Retention
8. Security
9. Children’s Privacy
10. Your Privacy Rights (Global)
11. Do‑Not‑Track & Global Privacy Control
12. California Notice (CCPA/CPRA)
13. Washington State Notice (MHMDA, Biometric, Breach)
14. Changes to This Policy
15. Contact Us
16. Access, Update, or Delete Your Data

1) Information We Collect

a) Information You Provide

We collect personal information you voluntarily provide, such as:

• Identifiers & contact: name, email, phone, address, company, role.
• Account & preferences: account credentials, communication preferences.
• Content: messages, form inputs, files you upload, survey responses.

Note: Please do not send us any personal information that you do not want us to process.

b) Information Collected Automatically

When you use the Services, we automatically collect:

• Device/technical: IP address (or proxy), browser type, OS, device IDs, ISP, language, referring/exit pages, timestamps.
• Usage/interaction: pages and features used, clicks, scrolls, session duration, performance data.
• Location: imprecise geolocation derived from IP (you can restrict this at the device/browser level).

We may use cookies, pixels, SDKs, and similar technologies (see Section 6) for security, analytics, and personalization.

c) Social Media & Integrations

If you connect or interact via a social network (e.g., Facebook) or third‑party platform, we may receive certain profile data and interaction signals consistent with that platform’s permissions and your settings. You can revoke access via that platform at any time.

d) No Intentional Collection of Sensitive Data

We do not seek to collect sensitive personal information (e.g., precise geolocation, government IDs, financial account numbers, consumer health data, or biometrics) unless you expressly provide it and we have a lawful basis. If you believe you inadvertently provided such data, contact us so we can address it.

2) How We Use Information

We use personal information to:

• Provide, operate, and support the Services (including account creation/authentication);
• Communicate with you (service notices, updates, responses to inquiries);
• Personalize content and measure/improve performance;
• Maintain security, prevent fraud/abuse, debug and fix errors;
• Comply with law, enforce terms, and protect our rights and users;
• Conduct research, analytics, and aggregated reporting;
• Send marketing or promotional messages consistent with your preferences (you can opt out anytime).

We may de‑identify or aggregate data for analytics and business insights. De‑identified data is not treated as personal information and we will not attempt to re‑identify it.

3) Legal Bases (EEA/UK)

Where the GDPR/UK GDPR applies, we process personal data on these legal bases:

• Contract (Art. 6(1)(b)): to provide the Services you request;
• Legitimate interests (Art. 6(1)(f)): e.g., security, analytics, improving Services, marketing to business contacts;
• Consent (Art. 6(1)(a)): where required (you may withdraw at any time);
• Legal obligation (Art. 6(1)(c)); Vital interests (Art. 6(1)(d)).

4) When We Share Information

We share personal information with:

• Service providers/Processors that help us operate the Services (hosting, analytics, communications, payment, security) under contracts that restrict use to our instructions;
• Business transfers in connection with a merger, acquisition, financing, or sale of assets;
• Legal & safety: if required by law, subpoena, or to protect rights, safety, or prevent fraud/abuse.

We do not sell personal information and we do not share it for cross‑context behavioral advertising without your consent. If this changes, we will update this Policy and provide required opt‑outs.

5) Third‑Party Sites & Services

Our Services may link to or integrate with third‑party sites, apps, and services. Their privacy practices are governed by their own policies. We are not responsible for the privacy or security of third‑party services. Review their terms and privacy notices before using them.

6) Cookies, Pixels & Similar Technologies

We use these technologies to keep the Services secure, remember preferences, analyze traffic and performance, and (if enabled) personalize content or ads. You can control cookies via your browser/device settings. For more details, see our Cookie Notice (link or URL placeholder).

7) Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy (e.g., the life of your account), to comply with legal, tax, or accounting obligations, or to resolve disputes. When no longer needed, we delete, de‑identify, or archive data in a secure manner.

8) Security

We employ reasonable administrative, technical, and organizational measures designed to protect personal information. However, no method of transmission or storage is completely secure. Use the Services at your own risk and report any suspected security issue to security@smartbrandideas.com.

9) Children’s Privacy

The Services are not directed to children under 18, and we do not knowingly collect data from them. If you believe a minor has provided us personal information, contact hello@smartbrandideas.com so we can delete it.

10) Your Privacy Rights (Global)

Depending on your location, you may have rights to:

• Access your personal information;
• Correct inaccurate data;
• Delete your data;
• Restrict or object to processing;
• Portability (obtain a copy in a usable format);
• Withdraw consent where processing is based on consent;
• Opt out of direct marketing.

To exercise rights, email hello@smartbrandideas.com or use our request form (link placeholder). We will respond consistent with applicable law.

11) Do‑Not‑Track & Global Privacy Control

Browsers may offer Do‑Not‑Track (DNT) signals; there is no uniform industry standard and we do not respond to DNT. Where required by law (e.g., California), we will honor Global Privacy Control (GPC) signals as an opt‑out of sale/sharing and certain targeted advertising. See Section 12.

12) California Residents (CCPA/CPRA)

If you are a California resident, you have rights to know/access, correct, delete, and opt out of sale or sharing of personal information; to limit the use of sensitive personal information; and to be free from discrimination for exercising these rights. You may submit requests at hello@smartbrandideas.com. If we sell or share personal information or use it for targeted advertising in the future, we will provide a “Do Not Sell or Share My Personal Information” link and honor GPC signals. We use service providers under written contracts for business purposes. We do not knowingly sell or share data of consumers under 16.

13) Washington State Notice

We are headquartered in Washington and provide the following disclosures:

a) Consumer Health Data (Washington My Health My Data Act, “MHMDA”)

• Scope: The MHMDA broadly defines consumer health data as personal information linked or reasonably linkable to a consumer that identifies their past, present, or future physical or mental health status (examples include health conditions, treatment information, reproductive or sexual health information, precise location that could reasonably indicate health services sought, and certain inferences).
• Our current practices: We do not intentionally collect consumer health data via the Services. If in the future we offer features that may process consumer health data, we will provide a dedicated Consumer Health Data Privacy Notice, obtain any required consents, offer access/deletion rights, and disclose any sale of such data (which would require your written authorization). We do not use geofencing to track or target individuals around health care facilities.
• Your rights (WA): If the MHMDA applies, Washington consumers may have rights to access, delete, withdraw consent, and appeal certain decisions regarding consumer health data. Requests may be submitted to hello@smartbrandideas.com.

b) Biometric Identifiers (RCW 19.375)

We do not enroll or use biometric identifiers (e.g., fingerprints, face/voice prints, iris/retina scans) for commercial purposes. If that changes, we will provide notice, obtain consent, use reasonable care to protect biometric data, and retain it no longer than reasonably necessary for disclosed purposes.

c) Washington Data Breach Notices (RCW 19.255)

If a breach of security involving personal information occurs, we will notify affected Washington residents without unreasonable delay. If a single breach affects more than 500 Washington residents, we will also notify the Washington Attorney General within 30 days of discovery, including required details. We maintain incident response procedures to meet these obligations.

14) Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date reflects the latest revision. Significant changes may be announced on the Websites/Apps or sent to your account email. Your continued use means you accept the updated Policy.

15) Contact Us

Smart Brand Ideas LLC
Attn: Privacy
United States
Email: hello@smartbrandideas.com
Security issues: hello@smartbrandideas.com

If you are in the EEA/UK and wish to contact a Data Protection Officer (if applicable) or our EU/UK representative, email hello@smartbrandideas.com and we will provide contact details.

16) Access, Update, or Delete Your Data

To submit a data rights request, email hello@smartbrandideas.com or use our web form (link placeholder). For account‑level changes, you may also update settings directly where available. We will verify your identity and respond within the time required by law. Authorized agents may submit requests with appropriate proof of authority.

Additional Disclosures

• Marketing Communications: You can opt out via the unsubscribe link in our emails or by emailing hello@smartbrandideas.com.
• Cookies/Ads Preferences: Manage via browser settings and our Cookie Notice/Preference Center (link placeholder).
• No Discrimination: We will not discriminate against you for exercising any privacy rights.

Note for Readers: This document is provided for transparency and is not legal advice. Because privacy laws evolve, we may further update this Policy and related notices (including a Cookie Notice and, if needed, a Consumer Health Data Notice for Washington).