Your Privacy Matters to Us

1 Information We Collect

In the course of operating our business and delivering systems design and integration services, Arteaga the Label LLC may collect the following categories of information:

• Contact Information -- Your name, email address, phone number, company name, job title, and physical mailing address when you fill out a contact form, request a consultation, subscribe to updates, or engage in direct correspondence with our team.
• Project and Business Information -- Details about your technology infrastructure, system requirements, architecture diagrams, integration specifications, and business objectives that you voluntarily share with us during the consulting, scoping, or project delivery phases.
• Account and Authentication Data -- If we provide you with access to client portals, dashboards, or collaboration platforms, we may collect usernames, encrypted passwords, access logs, and session tokens necessary for secure authentication.
• Communication Records -- Email threads, meeting notes, support tickets, call recordings where legally disclosed and consented, and written correspondence related to service delivery, billing, or technical support.
• Payment and Billing Information -- Invoicing details, payment method information, transaction records, and billing addresses. Note that full credit card numbers and sensitive financial credentials are processed exclusively through PCI-DSS-compliant third-party payment processors and are never stored on Arteaga Label systems.
• Technical and Usage Data -- IP addresses, browser type and version, operating system, device identifiers, referring URLs, pages visited, time spent on pages, click patterns, and other diagnostic data automatically collected when you interact with our website or digital platforms.
• Cookies and Tracking Technologies -- First-party and third-party cookies, web beacons, pixels, and similar technologies used for analytics, session management, preference storage, and service optimization as described in Section 5 below.

2 How We Use Your Information

Arteaga the Label LLC processes collected information for legitimate business purposes aligned with the delivery of computer systems design and integration services. Every use case described below is grounded in either contractual necessity, legitimate business interest, legal obligation, or your explicit consent:

• Service Delivery and Fulfillment -- To design, architect, implement, and support the systems integration solutions you have engaged us to deliver. This includes project scoping, technical assessments, deployment coordination, and post-launch optimization.
• Client Communication and Relationship Management -- To respond to inquiries, provide project status updates, deliver proposals and statements of work, manage billing and invoicing, and maintain ongoing professional correspondence throughout the engagement lifecycle.
• Platform Operation and Improvement -- To operate, maintain, monitor, and enhance our website, client portals, and internal tooling. This includes debugging, performance optimization, security hardening, and feature development based on aggregated usage analytics.
• Security and Fraud Prevention -- To detect, investigate, and prevent unauthorized access, malicious activity, security incidents, policy violations, and fraudulent behavior across our systems and networks.
• Legal and Regulatory Compliance -- To comply with applicable laws, regulations, legal processes, and enforceable governmental requests. This includes tax reporting, financial record-keeping, and responding to lawful subpoenas or court orders.
• Marketing and Business Development (With Consent) -- To send newsletters, service updates, event invitations, and informational content where you have opted in. You may withdraw marketing consent at any time via the unsubscribe link in every communication or by contacting us directly.
• Research and Analytics -- To generate aggregated, anonymized, and de-identified insights that help us understand industry trends, improve service quality, and inform strategic business decisions. Aggregated data cannot be used to re-identify any individual.

3 How We Share Information

We share information only in the limited circumstances described below and always subject to appropriate contractual, security, and confidentiality safeguards:

• Service Providers and Subprocessors -- We engage carefully vetted third-party vendors to perform functions on our behalf, including cloud hosting and infrastructure, payment processing, email delivery, analytics, customer support platforms, and collaboration tools. Each provider is contractually bound to process data only per our documented instructions and to maintain security standards commensurate with our own.
• Professional Advisors -- Legal counsel, auditors, accountants, and insurance providers who require access to certain information in connection with their professional services to Arteaga the Label LLC, subject to confidentiality obligations.
• Business Transfers -- In the event of a merger, acquisition, reorganization, asset sale, or similar corporate transaction, information may be transferred as part of the business assets, provided that the recipient agrees to honor this Privacy Policy or provide equivalent protections.
• Legal Obligations and Protection -- When required by law, regulation, court order, or valid legal process, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Arteaga the Label LLC, our clients, or the public.
• With Your Consent -- In any other scenario not covered above, we will obtain your explicit affirmative consent before sharing your information.

4 Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, and reporting obligations. Retention periods are determined by the nature of the data and the specific business need:

• Active Client Data -- Retained for the duration of the client relationship plus seven (7) years following project completion to support warranty obligations, ongoing support inquiries, and statutory record-keeping requirements.
• Inquiry and Prospect Data -- Retained for up to three (3) years from last contact, after which it is securely deleted or anonymized unless a longer retention period is required by law or you have converted to an active client.
• Website Analytics and Logs -- Raw server logs and analytics data are retained for up to 26 months in identifiable form, after which they are aggregated or permanently deleted.
• Marketing Consent Records -- Retained indefinitely to respect opt-out preferences, though associated contact details are minimized to only what is necessary to honor the opt-out.
• Payment Records -- Retained per IRS and applicable tax authority requirements, typically seven (7) years from the transaction date.

When the retention period expires, we securely delete, destroy, or irreversibly anonymize the data using industry-standard data sanitization methods. You may request earlier deletion as described in Section 6.

5 Cookies and Tracking Technologies

Our website and digital platforms use cookies and similar tracking technologies to provide core functionality, analyze usage patterns, and deliver a secure browsing experience. Below is a breakdown of the categories in use:

• Strictly Necessary Cookies -- Essential for basic site operation, including session management, load balancing, security token validation, and form submission processing. These cannot be disabled as the site will not function without them.
• Performance and Analytics Cookies -- Collect aggregated, pseudonymized data about how visitors interact with our site -- pages viewed, time on site, navigation paths, browser type, and geographic region. We use this information to improve site architecture and content relevance. No personally identifiable information is captured by these cookies.
• Functional Cookies -- Remember your preferences such as language selection, display settings, and previously viewed content to provide a more streamlined experience on return visits.
• Third-Party Cookies -- Embedded content from third-party services (such as embedded maps, videos, or social sharing features) may set their own cookies. Arteaga the Label LLC does not control these cookies. We recommend reviewing the privacy policies of those third-party providers directly.

You can manage cookie preferences through your browser settings at any time. Most browsers allow you to block all cookies, delete existing cookies, or receive a notification before a cookie is set. Note that disabling certain categories may degrade the functionality and user experience of our site.

6 Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information. Arteaga the Label LLC honors these rights for all individuals regardless of location, to the extent feasible under applicable law:

• Right to Access -- You may request a copy of the personal information we hold about you, along with details about how it is being processed and with whom it has been shared.
• Right to Rectification -- If you believe any information we hold is inaccurate or incomplete, you may request that it be corrected or supplemented.
• Right to Erasure (Right to Be Forgotten) -- You may request deletion of your personal information where there is no compelling reason for its continued processing, subject to legal retention obligations.
• Right to Restrict Processing -- You may request that we limit the processing of your personal information in certain circumstances, such as while a dispute over accuracy is being resolved.
• Right to Data Portability -- You may request a machine-readable copy of the personal information you have provided to us, in a structured, commonly used format suitable for transfer to another controller.
• Right to Object -- You may object to processing based on legitimate interests, including profiling activities where applicable. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent -- Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
• Right to Non-Discrimination -- We will not discriminate against you for exercising any of the rights described in this policy. Exercising your privacy rights will not result in denial of service, different pricing, or degraded quality of service.

To exercise any of these rights, please contact us using the information in Section 10. We will respond to verifiable requests within 30 calendar days, or 45 days for complex requests, with an extension notice provided if needed. Identity verification may be required to prevent unauthorized disclosures.

7 Data Security

At Arteaga the Label LLC, security is not a separate discipline -- it is embedded into every layer of how we design, build, and operate our systems. We implement and continuously improve a multi-layered security program that includes the following measures:

• Encryption -- Data at rest is encrypted using AES-256. Data in transit is protected by TLS 1.3 with strong cipher suites. All API endpoints enforce HTTPS with HSTS preloading.
• Access Controls -- Role-based access control (RBAC) with least-privilege enforcement, multi-factor authentication (MFA) for all administrative interfaces, and hardware security keys for high-sensitivity operations.
• Network Security -- Defense-in-depth network architecture with segmented environments, Web Application Firewall (WAF), DDoS mitigation, intrusion detection and prevention systems (IDS/IPS), and continuous network traffic monitoring.
• Vulnerability Management -- Regular automated vulnerability scanning, annual third-party penetration testing, dependency auditing with automated patch deployment, and a responsible disclosure program for security researchers.
• Operational Security -- Security awareness training for all personnel, background checks, incident response plan with tabletop exercises, immutable audit logging with real-time alerting, and secure development lifecycle (SDLC) practices across all engineering work.
• Physical Security -- Access-controlled facilities, 24/7 video surveillance, biometric access for data center areas, and redundant power and environmental controls at all colocation points.

8 International Data Transfers

Arteaga the Label LLC is headquartered in the United States, and our primary data processing facilities are located within the United States. If you are accessing our services from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where our servers and central database are located, and where data protection laws may differ from those in your jurisdiction.

When we transfer personal information from the European Economic Area (EEA), the United Kingdom, Switzerland, or other regions with adequacy requirements, we implement appropriate safeguards in accordance with applicable law:

• Standard Contractual Clauses (SCCs) -- We rely on the European Commission approved Standard Contractual Clauses for transfers to third countries, with supplementary measures where necessary to ensure an essentially equivalent level of protection.
• Adequacy Decisions -- Where a jurisdiction has been recognized by the relevant authority as providing an adequate level of data protection, we rely on such adequacy decisions to govern data transfers.
• Data Processing Agreements (DPAs) -- All third-party subprocessors handling personal data on our behalf are bound by Data Processing Agreements that mandate SCC-equivalent contractual protections and prohibit onward transfers without equivalent safeguards.

By using our services, you understand that your information may be transferred to our facilities and to those third parties described in Section 3, consistent with the safeguards outlined above.

9 Childrens Privacy

Arteaga the Label LLC provides professional computer systems design and integration services to businesses and enterprises. Our services are not directed to, nor intended for, individuals under the age of 18. We do not knowingly collect, solicit, or process personal information from anyone under 18 years of age.

If we become aware that we have inadvertently collected personal information from a child under 18 without verified parental consent -- or under 16 or 13, as applicable in certain jurisdictions -- we will take immediate steps to delete that information from our systems. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately using the details in Section 10.

10 Contact Us About Privacy

If you have questions, concerns, requests, or complaints regarding this Privacy Policy or our data practices, we encourage you to reach out. We take every privacy inquiry seriously and will respond promptly:

• Email -- info@arteagalabel.buzz (please include Privacy Inquiry in the subject line for faster routing)
• Phone -- +1 (707) 788-4885 (available Monday through Friday, 9:00 AM to 5:00 PM Mountain Time)
• Mail -- Arteaga the Label LLC, Attn: Privacy Office, 449 N 400 E, Kaysville, UT 84037-1509, United States

For individuals in the EEA, UK, or Switzerland, you have the right to lodge a complaint with your local data protection supervisory authority if you believe your data protection rights have been violated. We would, however, appreciate the opportunity to address your concerns directly before you escalate to a regulatory body.

11 California Privacy Rights

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have specific rights regarding their personal information. In addition to the rights enumerated in Section 6, California residents are entitled to:

• Right to Know -- Request disclosure of the categories and specific pieces of personal information we have collected about you in the preceding 12 months, the sources from which it was collected, the business purpose for collection, and the categories of third parties with whom we shared it.
• Right to Opt Out of Sale and Sharing -- As stated in Section 2, Arteaga the Label LLC does not sell personal information as defined under the CCPA. We also do not share personal information for cross-context behavioral advertising purposes.
• Right to Limit Use of Sensitive Personal Information -- We do not collect or process sensitive personal information for purposes beyond those expressly permitted under the CPRA. Any such collection would require your explicit opt-in consent.
• Authorized Agent -- You may designate an authorized agent to submit a privacy request on your behalf. We will require written proof of the agents authorization and may verify your identity directly.

To exercise your California privacy rights, contact us using any method listed in Section 10. We will not discriminate against you for exercising your CCPA/CPRA rights.

12 Changes to This Privacy Policy

Arteaga the Label LLC reserves the right to update, modify, or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, legal obligations, or regulatory landscape. When we make material changes, we will take the following steps to ensure transparency:

• Post the updated Privacy Policy on this page with a revised Last Updated date at the top of the document.
• For material changes that significantly affect your rights or the nature of our data processing, we will provide at least 30 days notice through a prominent notice on our website homepage and, where feasible, via email to active clients.
• Maintain an accessible changelog of material policy revisions for at least 24 months.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our services after any modification constitutes acceptance of the updated policy. If you disagree with any change, you should discontinue use of our services and contact us to request deletion of your data.