Privacy Policy.

Canned Spinach LLC · Effective date: July 3, 2026 · Last updated: July 3, 2026

1. Introduction

Canned Spinach LLC (“Canned Spinach,” “we,” “us,” or “our”) is a UX/UI design and development agency based in Cincinnati, Ohio. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit cannedspinach.com (the “Site”), contact us, apply for a job, subscribe to our communications, or purchase our services.

By using the Site, you acknowledge this Privacy Policy. Where required by law, we will obtain your consent before placing non-essential cookies or similar technologies on your device.

2. Information We Collect

Information you provide to us

Project and general inquiries: name, business email address, phone number, and any details you include about your project or message (such as scope, timeline, and budget).
Job applications: name, email address, message, portfolio URL, and your resume, which may contain additional personal information such as your address, employment history, and education.
Newsletter signup: business email address.
Payments (Webmaster services): email address and payment information. Payments are processed by Stripe, Inc. Your full payment card details are transmitted directly to Stripe and are never stored on our servers.
Direct communications: information you provide when you email or call us.

Information collected automatically

When you visit the Site, we and our third-party partners automatically collect:

Device and connection data: IP address, browser type, operating system, device identifiers, and approximate geographic location derived from your IP address.
Usage data: pages viewed, referring pages, links clicked, time spent on pages, and similar interaction data.
Session recordings: we record how visitors interact with pages (mouse movement, clicks, scrolling) to improve usability.
Inferred professional identity: we use business visitor identification services that attempt to match your device, IP address, or hashed identifiers against third-party databases to identify you or your employer — for example, your name, business email address, company, and job title — even if you never fill out a form. See Sections 3 and 6.

Information from third parties

We may receive information about you from our service providers and identity-resolution partners described in this Policy, and from publicly available professional sources, and may combine it with information collected on the Site.

3. Cookies and Tracking Technologies

We use cookies, pixels, scripts, and local storage, grouped into the categories shown in our cookie consent banner. Strictly necessary technologies are always active because the Site cannot function safely without them. Analytics and Advertising technologies load only in accordance with the choices you make in the banner, and you can change your choices at any time using the cookie settings link on the Site.

Strictly necessary

Website platform (WordPress / Elementor): core cookies and local storage required to display the Site, remember preferences, and keep the Site secure.
Cookie consent tool: stores your cookie consent choices so we can honor them on future visits.
Google reCAPTCHA: protects our forms from spam and abuse; Google collects device and interaction data to distinguish humans from bots.
Stripe: fraud prevention and secure payment processing on our payment pages.

Analytics

Google Analytics: measures site traffic and usage, such as pages visited, session duration, approximate location, and device and browser type.
Hotjar: heatmaps and session recordings of mouse movement, clicks, scrolling, and page interactions to help us improve usability.
HubSpot: visitor analytics and form tracking connected to our customer relationship management (CRM) system. If you submit a form or otherwise identify yourself, HubSpot may associate your past and future visits with your contact record.

Advertising and visitor identification

Meta (Facebook) Pixel: collects information about your visit that Meta may use for ad measurement and to build advertising audiences. We may use this data for retargeting and conversion measurement.
LinkedIn Insight Tag: collects information about your visit that LinkedIn may use for ad measurement and to build advertising audiences. We may use this data for retargeting and conversion measurement.
RB2B and LiveIntent: business visitor identification and identity resolution, described below.

As required by our visitor identification provider, we disclose the following:

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout.

4. How We Use Personal Information

Respond to project inquiries, questions, and requests, and provide proposals;
Provide, bill for, and support our services, including Webmaster subscription plans;
Evaluate job applications and communicate with candidates;
Send newsletters and marketing communications you have requested (you can unsubscribe at any time);
Understand how visitors use the Site and improve its design, content, and performance;
Identify businesses and professionals who may be interested in our services and contact them about our services;
Measure the effectiveness of our marketing and, if we run advertising campaigns, build audiences for and measure retargeting and conversion advertising;
Protect the Site against spam, fraud, and security threats;
Comply with legal obligations and enforce our agreements.

5. How We Disclose Personal Information

We do not sell personal information for money. We disclose personal information to the following categories of third parties:

HubSpot: CRM, marketing automation, email, visitor analytics, and form data collection.
Stripe: payment processing for Webmaster service plans. Stripe receives your email address and full payment card details; we never see or store your card number.
Google: analytics (Google Analytics), spam protection (reCAPTCHA), fonts, and embedded maps.
Hotjar: usability analytics, heatmaps, and session recordings.
Meta Platforms and LinkedIn: advertising pixels for ad measurement and audience building.
RB2B and LiveIntent: business visitor identification and identity resolution, as described in Section 3.
Hosting and infrastructure providers: website hosting, content delivery, backups, and site maintenance.
Credly: embedded credential badge, which loads content from Credly’s servers when the page displays.

When advertising and identity technologies (Meta Pixel, LinkedIn Insight Tag, RB2B, and LiveIntent) are active, they transmit device identifiers and browsing activity on our Site to those companies, which may use the data for their own purposes, including building advertising profiles and associating your activity with your email address or online profiles. Under some U.S. state privacy laws this is considered a “sale” of personal information or “sharing” for targeted advertising. You can opt out as described in Section 6.

We may also disclose personal information to comply with law, legal process, or lawful government requests; to protect the rights, property, or safety of Canned Spinach, our clients, or others; and in connection with a merger, acquisition, financing, or sale of all or part of our business.

6. Your Opt-Out Choices (“Do Not Sell or Share”)

Cookie settings: use the cookie consent banner or the “Cookie Settings” / “Do Not Sell or Share My Personal Information” link on the Site to turn off Analytics and Advertising technologies at any time.
Visitor identification opt-out: opt out of the visitor identification advertising described in Section 3 at https://app.retention.com/optout.
Global Privacy Control (GPC): we honor GPC signals sent by your browser as a valid request to opt out of the sale or sharing of your personal information for that browser.
Email: you may also email hello@cannedspinach.com with the subject line “Privacy Request — Opt Out.”
Marketing emails: use the unsubscribe link in any marketing email.
Platform opt-outs: Meta, LinkedIn, Google, and Hotjar each offer their own opt-out controls in their privacy settings.

7. Your Privacy Rights Under U.S. State Laws

Depending on where you live (including California, Colorado, Connecticut, Delaware, Florida, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia, and other states with comprehensive privacy laws), you may have some or all of the following rights:

Right to know / access: request the categories and specific pieces of personal information we have collected about you, the sources, our purposes, and the third parties to whom it was disclosed.
Right to correct: request that we correct inaccurate personal information.
Right to delete: request that we delete personal information we have collected from you, subject to legal exceptions.
Right to portability: request a copy of your personal information in a portable format.
Right to opt out: opt out of the “sale” of personal information, “sharing” / processing for targeted advertising, and certain profiling.
Right to non-discrimination: we will not discriminate against you for exercising your rights.
Right to appeal: in many states, if we decline your request, you may appeal our decision by replying to our response, and we will re-review it.

To exercise any of these rights, email hello@cannedspinach.com with the subject line “Privacy Request” or call +1 (513) 788-1440. We will verify your identity using the email address or other information associated with our records, and we will respond within the time required by applicable law (generally 45 days). In California, you may designate an authorized agent to submit requests on your behalf; we will require proof of the agent’s authority.

Note to California residents: the categories of personal information we collect (identifiers, commercial information, internet activity, professional information, and inferences), the purposes, and the categories of recipients are described in Sections 2 through 5 above. We do not collect sensitive personal information as defined by the CCPA except as may be incidentally contained in resumes or messages you choose to send us, and we do not use it to infer characteristics. We do not knowingly sell or share the personal information of consumers under 16 years of age.

8. Data Retention

Inquiry and CRM records: retained while we have an active relationship or legitimate business interest in future engagement, after which they are deleted or archived;
Job applications: retained for up to two years to consider candidates for future openings, unless you ask us to delete them sooner;
Payment and billing records: retained as required for tax and accounting purposes (generally seven years);
Analytics, session recordings, and advertising data: retained according to each provider’s retention schedule;
Email marketing lists: retained until you unsubscribe or we delete the list.

9. Data Security

We use commercially reasonable technical and organizational safeguards to protect personal information, including TLS encryption on the Site, access controls, and reputable third-party providers. Payment card data is handled exclusively by Stripe, a PCI-DSS certified processor. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children’s Privacy

The Site is a business-to-business website and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

11. Third-Party Websites and Embedded Content

The Site contains links to third-party websites (such as Instagram, LinkedIn, and Google Maps) and embedded content (such as Credly badges and video players). When you interact with embedded content, the third party may collect information about you under its own privacy policy. We are not responsible for the privacy practices of third-party sites.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. If we make material changes, we will provide additional notice on the Site or by email where required.

13. Contact Us

Canned Spinach LLC
1455 Dalton Ave, STE 2
Cincinnati, Ohio, USA
Email: hello@cannedspinach.com
Phone: +1 (513) 788-1440