Privacy Policy

Effective Date: March 5, 2026

‍

1. Introduction

MMG Studio ("Company," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, disclose, and protect your information when you visit our website at https://www.mmg.studio (the "Site"), submit forms, engage our services, or otherwise interact with us.

By accessing or using the Site, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Site.

‍

2. Information We Collect

2.1 Information You Provide Directly. We collect information that you voluntarily provide to us, including:

Contact information such as your name, email address, phone number, company name, job title, and mailing address when you fill out a contact form, request a consultation, or engage our services.
Project-related information including content, assets, brand guidelines, login credentials, and other materials you provide in connection with our services.
Communication records including emails, messages, and other correspondence between you and the Company.
Payment information such as billing address and payment details, which are processed through our third-party payment processors. We do not store credit card numbers on our servers.

2.2 Information Collected Automatically. When you visit the Site, we and our third-party service providers automatically collect certain information using cookies, pixels, scripts, and similar tracking technologies. This information may include:

Device and browser information such as your IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
Usage data such as pages visited, links clicked, time spent on pages, referring URLs, and navigation patterns.
Location data including approximate geographic location derived from your IP address.
Session behavior data including mouse movements, clicks, scroll depth, and interaction patterns collected through session recording tools.
Company and organizational identification data derived from your IP address or other technical identifiers, used to identify the business or organization associated with your visit.

2.3 Information from Third-Party Sources. We may receive information about you from third-party sources, including analytics platforms, visitor identification services, advertising platforms, and publicly available business information such as your company website, LinkedIn profile, or industry directories.

2.4 Tracking Technologies and Scripts We Use. The Site uses the following third-party tracking tools, scripts, and services to collect data about visitors and their behavior:

Google Tag Manager (GTM): A tag management system that deploys and manages tracking scripts on the Site. GTM itself does not collect personal data but facilitates the loading of other tracking tools listed here.
Google Analytics 4 (GA4): Collects data about website traffic, user behavior, page views, session duration, traffic sources, conversions, and demographic/interest data. Data is processed by Google and may be used in accordance with Google's privacy policy.
Microsoft Clarity: Records user sessions and generates heatmaps to analyze how visitors interact with the Site, including mouse movements, clicks, scroll behavior, and navigation patterns. Session recordings may capture on-screen content during your visit. Data is processed by Microsoft.
ConvertBox: A lead capture and on-site messaging tool that displays targeted pop-ups, forms, and calls-to-action based on visitor behavior, referral source, and other targeting criteria. Collects information you submit through its forms, including name, email address, and other fields.
RB2B: A visitor identification service that identifies individual website visitors by matching IP addresses and other technical signals to personal and professional identity data. This may include your name, email address, LinkedIn profile, job title, company name, and other publicly available or commercially sourced information, even if you do not fill out a form on the Site.
Leadfeeder: A B2B visitor identification and analytics tool that identifies companies visiting the Site by analyzing IP addresses and matching them to business databases. Collects data about which pages company visitors view, visit duration, and traffic source.
Snitcher: A website visitor identification tool that identifies companies and, where available, individual visitors based on IP address and other signals. Collects company name, industry, employee count, location, pages visited, and visit behavior.
Vector: A visitor identification and tracking service that collects data about website visitors, including IP-based identification, browsing behavior, pages viewed, session data, and other technical information used for lead generation and visitor intelligence purposes.

Each of these services operates under its own privacy policy and data processing terms. We encourage you to review the privacy policies of these third-party providers for more information about how they collect, use, and protect your data.

‍

3. How We Use Your Information

We use the information we collect for the following purposes:

To provide, deliver, and improve our Services.
To respond to your inquiries, requests, and communications.
To send you information about our services, including proposals, invoices, and project updates.
To send marketing communications such as newsletters, articles, case studies, and service announcements (you may opt out at any time as described below).
To analyze website traffic, user behavior, and Site performance to improve our Site and user experience.
To identify companies and individuals visiting our Site for business development purposes.
To personalize your experience on the Site, including displaying targeted messages and calls-to-action through tools like ConvertBox.
To detect, prevent, and address technical issues, fraud, or security concerns.
To comply with legal obligations and enforce our Terms of Service.
To create and display case studies, testimonials, and portfolio examples (with your consent where required).

‍

4. Legal Bases for Processing (For EEA/UK Visitors)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), we process your personal data based on the following legal bases under the General Data Protection Regulation (GDPR):

Consent: Where you have given us explicit consent to process your data for specific purposes, such as marketing communications or non-essential cookies.
Contractual Necessity: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
Legitimate Interests: Where processing is necessary for our legitimate business interests, such as improving our services, analyzing website usage, and conducting business development, provided these interests are not overridden by your rights and freedoms.
Legal Obligation: Where processing is necessary to comply with a legal obligation to which we are subject.

‍

5. Cookies and Tracking Technologies

5.1 What Are Cookies and Tracking Scripts. Cookies are small text files placed on your device when you visit a website. Tracking scripts are code embedded on the Site that collects data about your visit and transmits it to third-party platforms. We use cookies, pixels, web beacons, JavaScript tracking scripts, and similar technologies to collect information about your browsing activity and to identify visitors for analytics and business development purposes.

5.2 Types of Cookies and Tracking Technologies We Use.

Essential Cookies: Required for the basic operation of the Site, including session management and security features. These cookies cannot be disabled.
Analytics Cookies and Scripts: Help us understand how visitors interact with the Site by collecting and reporting usage information. This includes cookies and scripts deployed by Google Analytics 4, Microsoft Clarity, Leadfeeder, and Snitcher.
Marketing Cookies and Scripts: Used to deliver relevant advertisements, capture leads, and measure the effectiveness of our marketing efforts. This includes cookies and scripts deployed by Google Tag Manager, ConvertBox, RB2B, and Vector.
Personalization Cookies: Allow the Site to remember choices you make and provide enhanced, more personalized features, including targeted messaging through ConvertBox.

5.3 Cookie Consent. We use CookieFlow to manage cookie consent on our Site. Depending on your location:

If you are located in the EEA/UK (GDPR jurisdictions), non-essential cookies and tracking scripts are disabled by default and require your affirmative opt-in consent before activation.
If you are located in California (CCPA jurisdiction), you may opt out of the sale or sharing of personal information through cookies and tracking technologies by selecting "Do Not Sell or Share My Personal Information" in the cookie banner.
For visitors in other locations, a notice is provided about our use of cookies and tracking technologies.

You can manage your cookie and tracking preferences at any time by clicking the cookie settings link in the footer of the Site or by adjusting your browser settings. Please note that disabling certain cookies or scripts may affect the functionality of the Site.

5.4 Visitor Identification Disclosure. Some of the tracking technologies we use, specifically RB2B, Leadfeeder, Snitcher, and Vector, are designed to identify companies and, in some cases, individual visitors to our Site without requiring you to fill out a form or otherwise voluntarily submit information. These tools use IP address matching, reverse DNS lookup, and commercially available data sources to associate your visit with a business or individual identity. This information is used solely for our internal business development and marketing purposes.

‍

6. How We Share Your Information

We do not sell your personal information in the traditional sense. However, certain tracking technologies on the Site may constitute "sharing" of personal information under the California Consumer Privacy Act (CCPA). We may share your information in the following circumstances:

Tracking and Analytics Providers: Data collected through the tracking tools listed in Section 2.4, including Google Analytics 4, Google Tag Manager, Microsoft Clarity, ConvertBox, RB2B, Leadfeeder, Snitcher, and Vector, is transmitted to and processed by those respective third-party platforms in accordance with their own privacy policies and data processing agreements.
Service Providers and Contractors: We share information with trusted third-party service providers who assist us in operating the Site, conducting business, and delivering our services, including web hosting providers (Webflow), email and communication platforms, payment processors, and project management tools. These providers are obligated to protect your information and use it only for the purposes for which it was disclosed.
Business Development: We use visitor identification data from RB2B, Leadfeeder, Snitcher, and Vector to identify companies and individuals visiting our Site for business development and outreach purposes. This may include reaching out to you via email, LinkedIn, or other professional channels based on your visit to our Site.
Legal Requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, the safety of others, investigate fraud, or respond to a government request.
Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Site of any change in ownership or uses of your personal information.
With Your Consent: We may share your information with third parties when you have given us your explicit consent to do so.

‍

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with our legal and contractual obligations, resolve disputes, and enforce our agreements. Specifically:

Client project files and related communications are retained for a minimum of three (3) years following the completion of the engagement.
Contact form submissions and marketing inquiries are retained for up to two (2) years from the date of submission, unless you request earlier deletion.
Analytics and tracking data are retained according to the default retention settings of the applicable analytics platform (e.g., Google Analytics 4 default retention periods).
Visitor identification data from RB2B, Leadfeeder, Snitcher, and Vector is retained according to each platform's default retention settings and our internal business development records.
Payment records are retained as required by applicable tax and accounting laws.

When personal information is no longer needed, we will securely delete or anonymize it.

‍

8. Data Security

We implement commercially reasonable technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, destruction, or loss. These measures include encrypted data transmission (SSL/TLS), access controls and authentication, regular security reviews, and secure third-party service providers.

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

‍

9. Your Privacy Rights

9.1 All Users. Regardless of your location, you may:

Opt out of receiving marketing communications by clicking the "unsubscribe" link in any marketing email or by contacting us directly.
Manage your cookie and tracking preferences through the cookie consent manager on the Site.
Request information about what personal data we hold about you by contacting us.

9.2 California Residents (CCPA/CPRA). If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
Right to Opt Out of Sale/Sharing: You have the right to opt out of the sale or sharing of your personal information. We do not sell personal information in the traditional sense. However, certain uses of cookies and tracking technologies, including visitor identification tools such as RB2B, Leadfeeder, Snitcher, and Vector, may constitute "sharing" under the CCPA. You may exercise this right through the "Do Not Sell or Share My Personal Information" link on the Site.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise these rights, contact us at andy@mmg.studio or call 937-543-2254. We will respond to verifiable consumer requests within 45 days.

9.3 EEA/UK Residents (GDPR). If you are located in the EEA or UK, you have the following rights under the GDPR:

Right of Access: The right to request a copy of the personal data we hold about you.
Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
Right to Erasure: The right to request deletion of your personal data under certain circumstances.
Right to Restriction of Processing: The right to request that we restrict the processing of your personal data under certain circumstances.
Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object: The right to object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, contact us at andy@mmg.studio. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

‍

10. International Data Transfers

Our Site and Services are operated from the United States. If you are accessing the Site from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those of your jurisdiction. By using the Site, you consent to the transfer of your information to the United States.

For EEA/UK residents, where we transfer personal data outside the EEA/UK, we rely on appropriate safeguards, such as standard contractual clauses approved by the European Commission, to ensure adequate protection.

‍

11. Children's Privacy

The Site is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly. If you believe we may have collected information from a child under 16, please contact us immediately at andy@mmg.studio.

‍

12. Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals. There is currently no universally accepted standard for how websites should respond to DNT signals. At this time, the Site does not respond to DNT signals. However, you can manage your tracking preferences through our cookie consent manager.

‍

13. Third-Party Links and Services

The Site may contain links to third-party websites, services, and applications that are not owned or controlled by us. This Privacy Policy does not apply to third-party websites. We encourage you to review the privacy policies of any third-party websites you visit. We are not responsible for the privacy practices or content of third-party websites.

‍

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Effective Date" at the top of this page. We encourage you to review this Privacy Policy periodically for the latest information on our privacy practices.

‍

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

MMG Studio

Email: andy@mmg.studio

Phone: 937-543-2254

Location: Columbus, Ohio

Website: https://www.mmg.studio