Legal - Privacy Policy
What this site collects, why, who else sees it, and how to turn it off.
The short version
- Analytics cookies only run after you accept them. Decline and none are set.
- We do not sell your personal information, and we do not run advertising or ad targeting anywhere on this site.
- If you send us a form, we use what you wrote to reply and to keep a record of the conversation.
- You can change your cookie choice at any time, from this page.
1. Who we are
This site, immaculate.dev, is run by IMM LLC, doing business as IMMACULATE, a Shopify development agency in Seattle, Washington, United States. IMM LLC decides what is collected here and why, which under the GDPR makes us the controller of that information.
This policy covers this website only. It does not cover the Shopify stores, apps, or platforms we build for clients. Those are run by our clients under their own privacy policies.
2. Information you give us
You only send us personal information if you fill out a form. There are three:
- Contact form: your name, email address, and message.
- Request for proposal: your name, email address, company, website, project details, budget range, and timeline.
- Newsletter: your email address.
Form submissions are delivered by Web3Forms, which passes the contents to our email inbox. We keep a record of enquiries and the conversations that follow in HubSpot, our customer relationship system.
We use what you send to reply to you, to scope and quote work, and to keep track of the relationship. We do not sell it, and we do not use it to build advertising profiles.
3. Information collected automatically
If you accept cookies, Google Analytics 4 records:
- Which pages you view, how long you stay, and how you arrived, including the referring site and any campaign parameters in the URL.
- Approximate location, at city level, derived from your IP address. Google discards the IP address and does not log or store it for Analytics.
- Device and browser type, screen size, operating system, and language.
- Interactions Google Analytics measures on its own: scrolling, clicks to other sites, file downloads, on-site searches, and video engagement.
We have Google Analytics redact email addresses and sensitive URL query parameters before they are recorded, and we do not send names, email addresses, or anything else that identifies you to Google.
Separately from analytics, our hosting provider keeps standard server logs, including IP addresses, to serve the site and to defend against abuse. Those logs are not used to profile you or build a picture of your visits.
4. Cookies and local storage
Nothing in the first two rows below is set unless you accept. The last row is set either way, because it is how we remember not to ask you again.
| Name | Set by | Purpose | Expiry |
|---|---|---|---|
| _ga, _ga_* | Google Analytics | Tells repeat visits apart and groups them into sessions | Up to 2 years |
| hubspotutk, __hstc, __hssc, __hssrc | HubSpot | Recognizes a returning visitor and links a visit to an enquiry | Session to 6 months |
| imm-cookie-consent | IMMACULATE | Remembers whether you accepted or declined. Stored in your browser's local storage, not a cookie, and never sent to us | Until you clear it |
5. Your choices
The banner on your first visit is the whole mechanism. Accept and the cookies above are set. Decline and none are, no identifiers are stored on your device, and HubSpot is not loaded at all.
One thing worth being straight about: if you decline, Google Analytics still receives a cookieless signal that a page was viewed. It carries no identifier, is not stored on your device, and cannot be tied to you or joined to your other visits. If you would rather it did not happen at all, Google publishes a browser opt-out add-on, and any content blocker will stop it.
If your browser sends a Global Privacy Control signal, we treat that as a decline and do not show the banner.
You can also clear or block cookies in your browser settings at any time. Clearing them resets your choice here, and you will see the banner again.
Cookie preferences
Your choice is stored in this browser. Change it whenever you want. If you switch from accepted to declined, we delete the cookies listed above and reload the page so nothing keeps running.
6. Who else sees it
We use a small number of providers, and each one only receives what it needs to do its job:
| Provider | What it handles | What it receives |
|---|---|---|
| Google (Google Analytics 4) | Site analytics | Page views, interactions, device and approximate location, only after you accept |
| HubSpot | Customer relationship system and visitor tracking | Enquiry records, and site visits after you accept |
| Web3Forms | Form delivery | Everything you type into a form, in transit to our inbox |
| Our hosting and email providers | Serving the site and receiving enquiries | Server logs and the contents of enquiries |
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We will disclose information if the law requires it, and if the business is ever sold or reorganized, records could transfer with it.
7. Where your information goes
We are in the United States, and our providers process this information in the United States. If you are in the EEA, the UK, or Japan, using this site means your information is transferred there.
For analytics we rely on your consent. For enquiries we rely on the steps needed to respond to you and on our legitimate interest in running the business. Our providers offer standard contractual clauses for these transfers, and you can withdraw consent at any time without affecting what happened before.
8. How long we keep it
- Enquiries and the conversations that follow: as long as we need them to respond and to keep a reasonable record of the relationship.
- Analytics: for the retention period configured in Google Analytics, after which event-level data is deleted and only aggregate reporting remains.
- Newsletter: until you unsubscribe, which you can do from any email we send.
9. Your rights
Wherever you are, you can ask us what we hold about you, ask us to correct it, and ask us to delete it. Some places add more:
- EEA and UK (GDPR): access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent at any time. You can also complain to your local supervisory authority.
- California (CCPA/CPRA): the right to know, delete, and correct, and the right to opt out of sale or sharing. We do neither, and we will not treat you differently for exercising any of these.
- Japan (APPI): disclosure of what we hold, correction, and suspension of use.
To make a request, use the contact form and say what you are asking for. We may need enough information to confirm who you are before we act, and we will respond within the time the applicable law allows.
10. Security
The site is served over HTTPS. Access to enquiry records is limited to the people at IMMACULATE who need it, and our providers are chosen partly on their security posture. No system is perfectly secure, so we do not claim otherwise.
11. Children
This site is aimed at businesses. It is not directed at children, and we do not knowingly collect information from anyone under 16. If you think a child has sent us something, tell us and we will delete it.
12. Changes to this policy
We update this page when what we collect changes. The date at the top is the last change. If a change is significant, we will reset your cookie choice so you are asked again rather than opted in quietly.
13. Contact us
Questions about this policy, or a request about your information, go through the same place as everything else:
IMM LLC, doing business as IMMACULATE, Seattle, Washington, United States.