Privacy Policy

Last updated: January 15, 2026 · Effective immediately

1. Who We Are

Elevated Media, LLC ("we," "us," or "our") is a Louisiana-registered limited liability company (Charter #45585911K) operating from 521 Azalea Pl, Oakdale, LA 71463, United States. We are the data controller for the personal information described in this policy.

For any privacy-related question, contact our Data Protection Lead at albert@elevated-media.net or by post to the address above.

2. Scope of This Policy

This Privacy Policy applies to:

• Our website at elevated-media.net and any subdomain we control
• Our marketing, sales and onboarding activities
• Our service engagements with clients and their end users (as relevant)
• Email, phone and other communications you have with us

3. Information We Collect

We collect information in three ways: (a) you give it to us, (b) we collect it automatically, (c) we receive it from third parties.

3.1 Information you give us

• Contact form submissions: name, email, phone (optional), company (optional), service of interest, monthly budget range, your message
• Account / client information: name, title, company, billing details, business address, tax ID where required
• Communications: emails, support tickets, meeting notes, recorded calls (with consent)
• Marketing opt-ins: newsletter subscription, event RSVPs

3.2 Information collected automatically

• Device & connection: IP address, browser type/version, operating system, device type, screen resolution
• Usage data: pages visited, time on page, click paths, referrer URL, exit pages
• Cookies & similar: see our Cookie Policy

This data is collected only after you consent to non-essential cookies via our cookie banner (where required by law).

3.3 Information from third parties

• Public sources: LinkedIn profiles, business directories, company websites
• Enrichment providers: Clearbit, Apollo, ZoomInfo (for B2B sales prospecting only)
• Payment processors: Stripe, PayPal (transaction metadata, not card numbers)

4. How We Use Your Information & Legal Bases

Under the EU/UK GDPR, we process your data only when we have a valid legal basis. Under the CCPA/CPRA, you have corresponding rights. We use your data for the following purposes:

5. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their own purposes. We share data only with carefully selected service providers who help us operate our business, and only the minimum necessary to perform the service:

• Hosting & infrastructure: Google Cloud, Cloudflare, Vercel (US/EU regions)
• Email & marketing: Google Workspace, Mailchimp, Klaviyo, HubSpot (depending on use case)
• Analytics: Google Analytics 4 (only after consent)
• Payments: Stripe, PayPal
• Customer support: Intercom or Help Scout (when applicable)
• Legal & compliance: courts, regulators, tax authorities, law enforcement — only when legally required

All third-party processors are bound by data processing agreements (DPAs) that meet GDPR Article 28 requirements.

6. International Data Transfers

We are based in the United States. When we transfer your data outside your home jurisdiction, we rely on one of the following safeguards:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• UK International Data Transfer Agreement (IDTA) for transfers from the UK
• Data Privacy Framework (DPF) for transfers from the EU/UK/Switzerland to certified U.S. organizations
• Explicit consent where no other mechanism applies

7. Data Retention

We keep personal data only as long as necessary for the purposes described in this policy, then securely delete or anonymize it. Specific retention periods:

• Contact form inquiries: 24 months from last interaction
• Client & project data: 7 years from end of engagement (tax & accounting requirement)
• Newsletter subscribers: until you unsubscribe
• Analytics data: 14 months (then auto-deleted)
• Server logs: 90 days
• Tax & accounting records: 7 years (IRS / Louisiana DOR requirement)

8. Your Rights

You have the following rights regarding your personal data. To exercise any of them, email albert@elevated-media.net — we respond within 30 days at no cost.

• Right of access — request a copy of the data we hold about you
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten") — request deletion of your data
• Right to restrict processing — ask us to pause processing while we investigate
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interest or for direct marketing
• Right to withdraw consent — at any time, where processing is based on consent
• Right not to be subject to automated decision-making — including profiling with legal or similarly significant effects
• Right to lodge a complaint with your local data protection authority (e.g. CNIL in France, ICO in the UK, BfDI in Germany, or your state AG in the U.S.)

CCPA / CPRA Specific Rights (California Residents)

• Right to know what personal information we collect and how we use it
• Right to delete personal information we collected from you
• Right to correct inaccurate personal information
• Right to opt-out of the sale or sharing of personal information (we do not sell)
• Right to limit the use of sensitive personal information (we do not collect SPI)
• Right to non-discrimination for exercising your CCPA rights

9. Security

We use industry-standard technical and organizational measures to protect your data, including:

• HTTPS / TLS 1.3 for all data in transit
• AES-256 encryption for data at rest
• Two-factor authentication on all internal systems
• Role-based access control and least-privilege principles
• Annual third-party security reviews and penetration testing
• Employee training on data protection and security awareness
• Incident response plan with 72-hour breach notification

No system is 100% secure. If we ever suffer a breach affecting your data, we will notify you and the relevant authorities within 72 hours of discovery.

10. Children's Privacy

Our services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

11. Third-Party Links & Services

Our site may link to third-party websites (LinkedIn, YouTube, partner sites, etc.). We are not responsible for their privacy practices. We encourage you to read their privacy policies before submitting any personal data.

12. Changes to This Policy

We may update this policy from time to time. When we do, we'll change the "Last updated" date above. For material changes, we'll notify you by email (if you're a subscriber or client) or via a banner on our site. Continued use of our services after changes constitutes acceptance.

13. Contact Us

For any privacy-related question, request, or complaint:

Elevated Media, LLC · Data Protection Lead
521 Azalea Pl, Oakdale, LA 71463, USA
Email: albert@elevated-media.net
Phone: (318) 555-0199
Charter #45585911K

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.