Privacy Policy

Groovy Milk LLC is a limited liability company organized in the State of Maryland, United States, operating this website at groovymilk.io. We are the controller of the personal information described below. Contact: hello@groovymilk.io. Mailing address: 11101 Resort Road, #194, Ellicott City, MD 21042, USA.

Information you send us. When you submit the project brief form, we receive the identifiers and business details you choose to enter — your name, email address, the scope options you select, an indicative budget range, a timeline preference and your project notes — together with the time of submission. These fields are optional in the sense that you decide what to write; only name, email and the brief itself are needed for us to reply. The submission is delivered to our internal business messaging workspace and email so our team can respond. We do not ask for, and request that you do not send, sensitive personal information (such as government identifiers, health, financial account or biometric data) or confidential materials through this form.

Technical information. Our hosting provider processes standard server logs (IP address, browser type, requested pages, timestamps) to deliver and secure the site. We do not use advertising trackers, and we do not sell or share personal information for cross-context behavioral advertising.

We do not knowingly collect information from children under 13, and this site is not directed to children.

This website does not set advertising or analytics cookies. If we add analytics in future, we will update this policy and, where required, request consent before non-essential cookies are set.

To respond to your enquiry, prepare proposals, negotiate and perform contracts, keep business records, secure our systems, and comply with legal obligations. Where the GDPR or UK GDPR applies, our legal bases are performance of a contract or steps prior to a contract, our legitimate interests in responding to business enquiries and securing our services, your consent where requested, and compliance with legal obligations.

We share personal information with service providers acting on our instructions — for example website hosting, email, business messaging and productivity platforms used to receive and answer your enquiry — and with professional advisors, or where required by law, in connection with a corporate transaction, or to protect our legal rights. These providers may process the information on their own infrastructure under their terms and privacy notices. We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use it for profiling or automated decision-making that produces legal effects.

We are based in the United States and our team works from multiple countries, so information you send us may be processed outside your country of residence. Where required, transfers of personal information out of the EEA, the UK or Switzerland rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

We keep enquiry correspondence for as long as needed to evaluate and pursue the business relationship and then for the period required for tax, accounting and legal purposes, after which it is deleted or archived.

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to opt out of sale or targeted advertising (we do neither), to withdraw consent, and to appeal a decision we make about your request. These rights are provided under laws including the California Consumer Privacy Act as amended, the Maryland Online Data Privacy Act, other US state privacy laws, and the GDPR.

To exercise a right, email hello@groovymilk.io with the details of your request. We will verify your request, respond within the period the applicable law allows, and will not discriminate against you for making one. You may use an authorized agent where the law permits. EEA and UK residents may also complain to their local supervisory authority.

We apply administrative and technical measures appropriate to the sensitivity of the information we hold, including access controls, encryption in transit and least-privilege practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please do not send confidential material through the contact form — ask us for a mutual NDA and a secure channel first.

We may update this policy from time to time. The “last updated” date above shows the current version, and material changes will be posted on this page.

Categories collected. Identifiers (name, email address, IP address) and commercial or professional information you include in a project brief. Sources. Directly from you, and automatically from your device through server logs. Purposes. Responding to enquiries, evaluating and performing contracts, security, record-keeping and legal compliance. Retention. Enquiry records are kept while the business relationship is being evaluated or performed and then for the period required by tax, accounting and limitation-of-action rules; server logs are kept for a short operational period by our hosting provider. Sale or sharing. None. We do not sell personal information or share it for targeted advertising, and we do not process sensitive personal information for purposes requiring a right to limit.