1 Who We Are

Bag of Apples is a trading name of Enith Group LLC, registered in the State of Delaware, United States. We provide professional website design, hosting, and maintenance services for small businesses.

Contact:
Email: contact@bagofapples.com
Website: bagofapples.com

2 Information We Collect

2.1 Information You Provide Directly

When you fill out a contact form, request a quote, or communicate with us, we may collect:

• Your name and business name
• Email address and phone number
• Details about your project or inquiry
• Any other information you choose to share with us

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information, including:

• IP address and approximate location (country/city level)
• Browser type, device type, and operating system
• Pages visited, time spent on pages, and referring URLs
• Date and time of your visit

This information is collected through Google Analytics (see Section 4) and standard web server logs.

2.3 Information from Client Projects

If you become a client, we may collect and process:

• Business information, logos, images, and copy you supply for your website
• Billing contact information such as your name, email address, and billing address
• Communications related to your project

2.4 Payment Information

When you make a payment through our website, payment processing is handled by trusted third-party processors such as Stripe or PayPal. We do not collect, store, or have access to your full credit card number, CVV, or other sensitive financial data. The information these processors collect is governed by their own privacy policies. We may retain records of transaction amounts, dates, and associated billing contact information for accounting and legal purposes.

3 How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide quotes
• Deliver and manage the Services you have engaged us for
• Process payments and maintain billing records
• Communicate with you about your project
• Improve our website and Services using aggregated, anonymized analytics data
• Comply with legal obligations
• Enforce our Terms of Use

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4 Google Analytics

We use Google Analytics to understand how visitors use our website. Google Analytics collects data such as pages viewed, time on site, and general geographic location (city/country level). This data is aggregated and does not identify you personally.

Google Analytics uses cookies to track user interactions. The data is processed by Google LLC, which may transfer it to servers in the United States and other countries. Google’s use of this data is governed by Google’s Privacy Policy.

You can opt out of Google Analytics tracking by:

• Installing the Google Analytics Opt-out Browser Add-on
• Enabling “Do Not Track” in your browser settings
• Adjusting your browser’s cookie settings to block third-party cookies

5 Cookies

Our website uses cookies — small text files stored on your device. We use the following types:

Essential Cookies

Required for the website to function. These cannot be disabled without affecting core functionality.

Analytics Cookies

Set by Google Analytics to collect anonymous usage data as described in Section 4. You can opt out as described above.

Payment Cookies

When you initiate a payment, our third-party payment processors (such as Stripe or PayPal) may set cookies necessary to complete and secure the transaction. These are governed by the respective processor’s privacy policy.

You can control cookies through your browser settings. Note that disabling cookies may affect your experience on our site. For more information about cookies, visit allaboutcookies.org.

6 How We Share Your Information

We do not sell your personal information. We may share it only in the following limited circumstances:

6.1 Service Providers

We work with trusted third-party vendors to operate our business, including:

• Web hosting providers (to host bagofapples.com and client websites)
• Email service providers (to send and receive communications)
• Google LLC (for analytics as described in Section 4)
• Domain registrars (to register domains on behalf of clients)
• Payment processors such as Stripe and PayPal (to securely process transactions on our behalf)

These providers are contractually obligated to use your data only to provide services to us and to maintain appropriate security.

6.2 Legal Requirements

We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Bag of Apples, our clients, or others.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

7 Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

• Contact form inquiries: up to 2 years from last contact
• Client project data: for the duration of the client relationship plus 3 years
• Payment and billing records: as required by applicable law (typically 7 years)
• Analytics data: per Google Analytics’ default retention settings (26 months)

When data is no longer needed, we delete or anonymize it securely.

8 Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or misuse. These include SSL encryption on our website, access controls, and regular security monitoring.

Payments made through our website are processed by PCI-DSS compliant third-party processors. We do not store payment card data on our servers.

However, no method of data transmission or storage is completely secure. If you believe your information has been compromised, please contact us immediately at contact@bagofapples.com.

9 Your Rights

9.1 All Users

Regardless of your location, you have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data (subject to legal retention obligations)
• Opt out of marketing communications at any time

To exercise any of these rights, email us at contact@bagofapples.com. We will respond within 30 days.

9.2 EU and UK Residents (GDPR / UK GDPR)

If you are located in the European Economic Area or the United Kingdom, you have additional rights under GDPR or UK GDPR, including:

• The right to data portability — receive your data in a structured, machine-readable format
• The right to restrict processing — ask us to limit how we use your data
• The right to object — object to processing based on legitimate interests
• The right to withdraw consent — where processing is based on consent, you may withdraw it at any time
• The right to lodge a complaint with your local supervisory authority

Our lawful bases for processing your data are: Contract (to fulfill our obligations to you), Legitimate Interests (to respond to inquiries and improve our Services), Legal Obligation (to comply with applicable laws), and Consent (where you have explicitly opted in).

9.3 California Residents (CCPA)

If you are a California resident, you have the right under the CCPA to know what personal information we collect and how it is used, request deletion of your personal information, opt out of the sale of your personal information (note: we do not sell personal information), and non-discrimination for exercising your privacy rights. To submit a CCPA request, email contact@bagofapples.com with the subject line “CCPA Request”.

10 Children’s Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us at contact@bagofapples.com and we will promptly delete it.

11 International Data Transfers

We are based in the United States. If you access our Services from outside the US, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country.

For transfers of personal data from the EU or UK, we rely on applicable transfer mechanisms such as Standard Contractual Clauses where required.

12 Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy applies only to bagofapples.com. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies before providing any personal information.

13 Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top of this page. For significant changes, we may also notify active clients by email. Your continued use of our Services after any changes constitutes acceptance of the updated Policy.

14 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: contact@bagofapples.com
• Website: bagofapples.com/contact

We aim to respond to all privacy-related inquiries within 30 days.