Privacy Policy

Who we are

Windsor Peak is a social media management agency based in Princeton, New Jersey, operated by Windsor Peak LLC. Contact us about privacy at hello@windsorpeakmedia.com.

Contact form

When you send a message through our contact form, we collect your name, email address, what you need, and anything optional you choose to give (business name, phone number, budget range, message). We also record how you arrived on this visit: the site that linked you here (its domain only), any campaign tags in the link, and the first page you viewed. This is kept in your browser only for the visit and is sent to us only if you submit the form. If you give a phone number, we use it only to call you back about your request. We never send text messages. We use all of this only to reply to you, discuss your project, and learn which channels bring us clients. We email you a one-time confirmation that we received your message. Messages are delivered to us by email through our email provider, Resend. We keep contact form messages for 24 months and then delete them, unless you become a client.

To block spam, the form uses Cloudflare Turnstile, which may process your IP address and browser information to check that you are a person. We also record your IP address briefly to limit repeated submissions.

Analytics

We count visits on our own server: anonymous daily totals per page and, for the first page of a visit, the site or campaign that sent you. We store no cookies, IP addresses, or visitor IDs for this, and we use no third-party analytics or advertising tools. See our Cookie Policy.

Cookies

We set no tracking cookies. Cloudflare Turnstile, the spam check on our forms, may set its own essential cookie. Clients who sign in to the portal also get essential session cookies that keep them signed in. We use no tracking cookies.

Client accounts

If you are a client, we create a portal account for you. Our database provider, Supabase, stores your name, business name, email address, phone number (if you add one), and a hashed (scrambled, unreadable) version of your password. We never see or store your password itself.

Forms and media releases

Clients can submit shoot briefs and media releases through the portal. Media releases can include the names and signatures of people who appear on camera, and for anyone under 18, a parent or guardian. They are stored in the same private storage as your project and are used only to confirm permission for that project.

People who appear in our work

We film and photograph people only with the client's permission and, where needed, a media release. For student athletes and anyone else under 18, we rely on a parent or guardian release or the school's own release process. If you appear in our portfolio or social media and want something removed, email hello@windsorpeakmedia.com and we will take it down from our own channels within 7 days.

Your deliverables

Photos, videos, and other files we make for you are stored in private storage with Supabase. Only you and Windsor Peak can access your files. We keep them for 12 months after delivery so you can download them again, then delete them.

Payments

We don't take card payments. Invoices are paid by check, Zelle, or ACH bank transfer. We keep a record of each payment (amount, date, method, and check number) for our books and taxes. We never ask for or store card or bank account numbers.

Agreements

Agreements are signed on paper. You download the agreement from your portal, sign it, and return a scan or photo, which we store privately with your project. Only you and Windsor Peak can access it.

Leads and outreach

When you contact us or book a call, we keep your details and our notes in a private, admin-only list so we can follow up. We may also note publicly available business information (such as a business's website, Instagram, and Google rating) when reaching out to local businesses. We never send text messages, and you can ask us to stop contacting you or delete your details at any time.

Who we share information with

We do not sell your personal information. We share it only with the service providers named above (Resend, Cloudflare, Vercel, Supabase, and Google Calendar for booked calls) so they can provide their services to us, or when the law requires it.

How long we keep information

• Contact form messages and leads that don't become clients: 24 months.
• Client account details: while you are a client, plus 3 years afterward.
• Deliverables: 12 months after delivery.
• Invoices, payment records, and signed agreements: 7 years, for tax and legal records.
• Recruiting-reel requests: 24 months after the reel is delivered.

Security

Client files are stored privately and shared only through short-lived download links. Database access is limited so each client can see only their own projects. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.

Global Privacy Control

We honor Global Privacy Control. Since we don't sell data, run targeted ads, or use tracking cookies, there is nothing to opt out of, but the signal is respected if that ever changes.

Your rights

You can ask us to show you the personal information we hold about you, correct it, or delete it. Emailhello@windsorpeakmedia.com and we will respond within 30 days. We may need to keep some records, such as invoices, where the law requires it.

New Jersey residents

New Jersey's consumer data privacy law gives New Jersey residents rights to access, correct, delete, and obtain a copy of their personal data, and to opt out of its sale or use for targeted advertising. Windsor Peak does not sell personal data or use it for targeted advertising. As a small business, Windsor Peak expects to fall below the size thresholds where that law applies, but we honor these rights for everyone, wherever you live.

Children

This website is for businesses and organizations. We do not knowingly collect personal information from children under 13 through it. Student athletes and other minors may appear in footage we make for schools, teams, and families. We film minors only at events or practices the school or program has authorized us to cover, or with a parent or guardian's consent (required for every recruiting reel). We don't publish a minor's full name in our portfolio without permission, and a parent or guardian can ask us to remove footage of their child from our channels at any time.

Changes

If we change this policy, we will update the date at the top of this page.