Privacy Policy — THNKBIG

THNKBIG LLC ("THNKBIG," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.thnkbig.com or engage with our consulting services. Please read this policy carefully. By using our website, you consent to the practices described below.

1. Information We Collect

We collect information you provide directly to us, as well as information gathered automatically when you interact with our site.

Information you provide:

Contact Information: Name, email address, company name, job title, and phone number when you submit our contact form, schedule a call, or sign up for our newsletter.
Communication Data: Messages, questions, and feedback you send via our contact form, email correspondence, or meeting scheduling tools.
Professional Information: Details about your organization's infrastructure, technology stack, or project requirements shared during assessments and consultations.

Information collected automatically:

Usage Data: Pages visited, time spent on each page, referral source, click patterns, and navigation paths collected via Google Analytics.
Device Information: Browser type and version, operating system, screen resolution, and device type.
Session Data: Aggregated behavioral data collected via Microsoft Clarity to understand how visitors interact with our site, including scroll depth, clicks, and session recordings. This data is anonymized and does not include personal identifiers.
Network Information: IP address (anonymized in analytics), approximate geographic region, and internet service provider.

2. How We Use Your Information

We use the information we collect for the following purposes:

Respond to inquiries and provide requested consulting services
Schedule and conduct infrastructure assessments, discovery calls, and technical workshops
Send relevant updates about our services, case studies, and engineering insights (only with your explicit consent)
Improve our website content, user experience, and service offerings based on usage patterns
Monitor and analyze site performance, including page load times and error rates
Protect against fraudulent or unauthorized activity on our website
Comply with applicable legal obligations and regulatory requirements

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3. Data Storage & Security

We take the security of your data seriously. Contact form submissions and newsletter signups are stored securely via Sanity.io, which provides encryption at rest and in transit (TLS 1.2+). Our security measures include:

TLS/SSL encryption for all data transmission across our website
Access controls and role-based permissions limiting data access to authorized personnel
Regular security audits and vulnerability monitoring
Secure hosting infrastructure on DigitalOcean with automated backups
Environment-level secrets management for API keys and service credentials

While we strive to protect your personal information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we continuously evaluate and improve our practices.

4. Third-Party Services

We rely on trusted third-party services to operate our website and deliver our services. These providers may process data on our behalf:

Cal.com: Meeting and consultation scheduling. When you book a call, Cal.com processes your name, email, and selected time slot.
Sanity.io: Content management system for blog posts, case studies, page content, and secure storage of contact form submissions and newsletter subscriptions.
DigitalOcean: Static website hosting and content delivery.
Google Analytics: Website traffic analysis and visitor behavior reporting. IP addresses are anonymized.
Microsoft Clarity: Session replay and heatmap analytics to understand user interaction patterns. Data is anonymized and no personal identifiers are collected.

Each third-party service maintains its own privacy policy governing how it handles data. We encourage you to review their respective policies.

5. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience:

Essential Cookies: Required for basic site functionality, including page navigation and secure form submission. These cannot be disabled.
Analytics Cookies: Used by Google Analytics and Microsoft Clarity to collect aggregated usage data. These help us understand which pages are most visited and how users navigate our site.
Preference Cookies: Remember your settings and choices, such as form field values, to improve your experience on return visits.

You can control cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though this may impact certain site functionality. For more information, consult your browser's help documentation.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Request that we update or correct inaccurate information.
Deletion: Request that we delete your personal data, subject to legal retention requirements.
Opt-Out: Unsubscribe from marketing communications at any time via the link in our emails or by contacting us directly.
Data Portability: Request your data in a structured, machine-readable format.
Restriction: Request that we limit processing of your data in certain circumstances.

To exercise any of these rights, please contact us at [email protected]. We will respond to verified requests within 30 days.

7. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) provides additional rights. You have the right to know what personal information we collect and how it is used, request deletion of your data, and opt out of the sale of personal information. THNKBIG does not sell personal information. To submit a request under the CCPA, email us at [email protected] with the subject line "CCPA Request."

8. International Users

THNKBIG operates from the United States. If you access our website from outside the US, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using our website, you consent to the transfer of your information to the United States.

9. Data Retention

We retain personal data only as long as necessary to fulfill the purposes described in this policy:

Contact form submissions: Retained for up to 24 months, then securely deleted unless an active business relationship exists.
Newsletter subscriptions: Retained until you unsubscribe or request deletion.
Analytics data: Google Analytics data is retained for 14 months. Microsoft Clarity session data is retained for 30 days.
Consultation records: Project-related communications may be retained for up to 36 months for service continuity and legal compliance.

You may request earlier deletion of your data at any time by contacting us.

10. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete that information promptly. If you believe a child has provided us with personal data, please contact us at [email protected].

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes acceptance of the updated policy.

12. Contact

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, contact us at:

THNKBIG LLC
Email: [email protected]
Website: www.thnkbig.com