Privacy Policy
Last updated: September 15, 2026
This policy explains what information Andru Bailey LLC collects when you visit andrubailey.com, why we collect it, and what you can do about it. It is written in plain English on purpose. If anything here is unclear, email hello@andrubailey.com and I will explain it properly.
Andru Bailey LLC provides website strategy, design and development for custom home builders. The business is based in Hoschton, Georgia, USA, and works with clients in the United States and internationally.
What I collect and why
Information you give me directly
When you fill in the contact form on this site, or send your website in for a free review, you provide your name, email address, your company name, your website address, and whatever you write in the message. I use this to reply to you, to prepare the review you asked for, and to discuss working together. That is the only reason it is collected.
If you go on to become a client, I will also hold the information needed to run the project and the business relationship: project details, correspondence, invoices, and payment records.
Information collected automatically
When you visit the site, some technical information is collected in the background: your IP address, browser type, device type, which pages you looked at, how long you spent, and which site or link brought you here. This is used to understand how the site is performing and which pages are useful. It is not used to identify you personally.
What I do not collect
Nothing is sold on this website, so no payment card details are ever entered or stored here. Invoices are sent separately by email and paid by bank transfer. This site does not knowingly collect information from anyone under 16.
The specific tools this site uses
I would rather name these than hide behind "third-party providers."
Framer hosts this website and processes contact form submissions before they reach me. Framer is a US-based company.
GoHighLevel is the CRM and email system where enquiries and client contacts are stored and where any email I send you is sent from. GoHighLevel is US-based.
Google Analytics measures how the site is used: visitor numbers, popular pages, traffic sources. Google is US-based.
Meta Pixel and Google Ads conversion tracking are advertising tools that record whether someone who saw an ad later visited this site or made an enquiry. Meta and Google are both US-based.
Each of these companies handles some of your data on my behalf, under their own privacy terms.
Cookies
This site uses cookies, which are small files stored by your browser.
Necessary cookies keep the site working: page loading, form submission, security. The site cannot function without these.
Analytics cookies let Google Analytics count visits and understand which pages people actually read.
Advertising cookies are set by the Meta Pixel and Google Ads. These are the ones that allow advertising platforms to recognise you across different websites and show you relevant ads.
You can refuse or delete cookies in your browser settings at any time. Blocking necessary cookies may stop parts of the site working. If you are in the EU, EEA, or UK, analytics and advertising cookies are only set if you agree to them.
How long I keep things
Contact form enquiries that do not become projects: 24 months from our last contact, then deleted.
Client project records, contracts and correspondence: 7 years after the project ends, because tax and accounting rules require it.
Invoices and payment records: 7 years, for the same reason.
Email marketing contacts: until you unsubscribe, then a further 12 months so I have a record that you asked to be removed.
Google Analytics data: 14 months.
Advertising pixel data: held by Meta and Google according to their own retention periods, typically up to 180 days for individual event data.
If you ask me to delete your information sooner, I will, unless I am legally required to keep it (invoices being the usual example).
Your rights, wherever you are
Whoever you are and wherever you live, you can:
Ask what information I hold about you
Ask me to correct anything that is wrong
Ask me to delete it
Ask me to stop emailing you, at any time
Email hello@andrubailey.com or use the contact page at andrubailey.com/contact. I will respond within 30 days. There is no charge for this.
Depending on which US state you live in, you may have additional rights under state law. Georgia, where this business is based, now has its own consumer privacy law, the Georgia Consumer Privacy Protection Act, which took effect on July 1, 2026. Whatever your state, the rights listed above are available to you on request.
If you are in the EU, EEA, or UK
The UK GDPR and EU GDPR give you additional rights, and they apply to the handling of your information described here.
The legal basis for each thing I do
Replying to your enquiry and preparing a free website review: legitimate interests. You contacted me and expect a reply, and running a business that responds to enquiries is a legitimate interest of mine. It is also a step towards a possible contract.
Delivering work you have bought: performance of a contract.
Sending marketing emails: your consent, given when you sign up.
Analytics and advertising cookies: your consent, given through the cookie banner.
Keeping invoices and financial records: legal obligation under tax law.
Withdrawing consent
Anything based on your consent can be withdrawn at any time, and it is easy. Unsubscribe from any email using the link at the bottom, or change your cookie choices in your browser. Withdrawing consent does not affect anything done before you withdrew it.
Your full rights
Access: a copy of the personal data I hold about you
Rectification: correction of anything inaccurate or incomplete
Erasure: deletion of your data, where I have no overriding legal reason to keep it
Restriction: asking me to pause processing while a dispute or correction is resolved
Portability: receiving your data in a common, machine-readable format, or having it sent to someone else
Objection: objecting to processing based on legitimate interests, including any direct marketing
To use any of these, email hello@andrubailey.com.
Complaints
If you are unhappy with how I have handled your data, you can complain to your data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk). In the EU and EEA it is your own national authority, and the European Data Protection Board publishes the full list at edpb.europa.eu.
Data leaving your country
All the tools named above (Framer, GoHighLevel, Google, Meta) are US-based, so your information will be transferred to and stored in the United States. These transfers rely on appropriate safeguards, including the EU-US Data Privacy Framework and the UK extension to it, or Standard Contractual Clauses where a provider is not certified under that framework.
If you are in California
First, some honesty about whether this applies. The California Consumer Privacy Act, as amended by the CPRA, only legally binds businesses above certain size thresholds: very roughly, over about $26.6 million in annual revenue, or handling the personal information of 100,000 or more Californians a year, or making 50% or more of revenue from selling or sharing personal information. Andru Bailey LLC is a one-person consultancy and does not meet any of those. This section is included because it is good practice and because Californians deserve the same clarity as everyone else.
Categories of personal information collected
Identifiers: name, email address, company name, website address, IP address
Commercial information: services enquired about or purchased
Internet or network activity: pages visited, time on site, referring website, interaction with ads
Inferences: a general sense of whether you might be a good fit as a client, drawn from the above
No sensitive personal information as defined by the CPRA is deliberately collected.
Where it comes from
Directly from you when you fill in a form or email me, and automatically from your device when you browse the site.
Why it is collected
To respond to enquiries, deliver the free website review, provide services you have bought, send emails you asked for, measure how the site performs, and measure whether advertising works.
Who it is shared with
Framer, GoHighLevel, Google, and Meta, as described above. It is not shared with anyone else, and it is never sold for money.
Do I "sell" or "share" your information?
I do not sell personal information for money, and never have. However, under California's definition, running Meta and Google advertising pixels does count as sharing personal information for cross-context behavioural advertising. So the honest answer is yes to sharing, and you have the right to opt out of it.
Your California rights
Know and access: what I collect, why, where it goes, and a copy of it
Delete: have your personal information erased
Correct: have inaccurate information fixed
Opt out of sale or sharing: stop the advertising pixels using your data
Limit use of sensitive personal information: although none is deliberately collected
No discrimination: you will never receive worse service or a different price for exercising any of these rights
How to exercise them
Two ways, as California requires:
Email hello@andrubailey.com
Use the contact form at andrubailey.com/contact
You may also nominate an authorised agent to make a request for you. I will respond within 45 days and may ask you to confirm your identity first, purely so I do not hand your data to the wrong person.
Changes to this policy
If this policy changes, the "Last updated" date at the top changes with it. If the change is significant, I will say so plainly rather than quietly editing the page.
Contact
Andru Bailey LLC Hoschton, Georgia, USA Email: hello@andrubailey.com Web: andrubailey.com/contact
Any question about your privacy, your data, or this policy goes to that address, and I answer it myself.