Privacy Policy
This policy explains what information Coastal Growth Co. collects when you use this website, and how we use it. We keep this simple: we only collect what we need to help you, and we do not sell your information.
What we collect
When you fill out the contact form, we collect your name, email, optional business name, and message. Please do not include passwords, payment information, or sensitive account details. We also keep correspondence you send us so we can respond.
Our server records technical requests to operate and secure the website. We count page views and contact-link clicks by page and campaign. Campaign labels can be stored in your browser for the current session and included with an inquiry so we know how you found us. Rate limiting uses a keyed hash of the request address that expires after its short abuse-prevention window.
We also use PostHog for website analytics and session recordings to understand how visitors navigate the site and where contact forms may be difficult to use. It records page visits, device and browser information, campaign labels, contact clicks, and whether a form was started, accepted, or encountered an error. PostHog uses cookies and browser storage to recognize an anonymous browser across visits. We do not identify visitors by name or email in PostHog or send it the contents of inquiry forms. Session recordings mask text and input values and block the contact form; network request bodies and console logs are not recorded.
How we use it
- To respond to your inquiry and provide the services you ask about.
- To follow up about an assessment, quote, or ongoing support.
- To keep our website and systems secure and working.
How we share it
We do not sell your personal information. Website inquiries are stored on our server and sent to our private Discord notification channel so we can review them. Our hosting, notification, and email providers process information as needed to operate these services and respond to you. PostHog processes website analytics and masked session recordings in its US cloud service. You can read PostHog's privacy policy for details about that provider. We may disclose information if required by law.
Data retention and security
The website delivery queue removes successfully notified inquiries after 90 days; undelivered inquiries remain available for recovery. Aggregate website counts are retained for up to one year. Relevant correspondence and client records may be retained longer to provide services and meet business and legal requirements. Access to the delivery queue is restricted, and messages are transmitted using HTTPS.
Your choices
Browser analytics and session recording are disabled when your browser sends Do Not Track or Global Privacy Control. You can also block analytics requests or clear this site's cookies and browser storage. The contact form works without PostHog.
You can ask us what information we hold about you, ask us to correct it, or ask us to delete it. Contact us using the details below and we will take care of it.
Contact
Questions about this policy? Email [email protected].