Privacy Policy
Effective Date: December 13, 2025 | Last Updated: December 13, 2025
1. Information We Collect
1.1 Information You Provide Directly
When you contact us through our website forms, we collect:
| Data Type | Purpose | Retention |
|---|---|---|
| Name (First, Last, Suffix) | To address you properly and provide personalized service | Duration of service relationship + 3 years |
| Email Address | To respond to your inquiry and communicate about services | Duration of service relationship + 3 years |
| Phone Number | To contact you regarding your inquiry | Duration of service relationship + 3 years |
| Message Content | To understand your needs and provide relevant services | Duration of service relationship + 3 years |
1.2 Information Collected Automatically
When you visit our website, we automatically collect certain information:
- IP Address: For security monitoring, rate limiting, and fraud prevention
- Browser Type & User Agent: For website compatibility and security
- Device Information: Screen size, operating system for optimal display
- Referring URLs: To understand how visitors find us
- Pages Visited: To improve our website and services
1.3 Information We Do NOT Collect
- Social Security Numbers
- Financial account information (credit cards, bank accounts)
- Health information (unless voluntarily provided in your inquiry)
- Biometric data
- Precise geolocation data
2. How We Use Your Information
We use the information we collect to:
- Respond to your inquiries and communicate with you
- Provide educational advocacy services you request
- Schedule consultations and meetings
- Send service-related communications (not marketing)
- Improve our website and services
- Protect against fraud, spam, and abuse
- Comply with legal obligations
No Sale of Personal Information
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. This applies to all users, including California residents under CCPA.
3. Information Sharing and Disclosure
We may share your information only in the following circumstances:
3.1 Service Providers
We use trusted third-party services to operate our business:
- Email Services: To send and receive communications
- Website Hosting: To maintain our website infrastructure
- Analytics: To understand website usage (anonymized data only)
3.2 Legal Requirements
We may disclose information if required by law, such as:
- In response to a court order or subpoena
- To comply with legal process
- To protect our rights or the safety of others
- To investigate potential violations of our terms
3.3 Business Transfers
If Data.Driven.Advocacy or Zone 2e, Inc. is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our website.
4. Your Privacy Rights
California Residents (CCPA/CPRA Rights)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: Request what personal information we collect, use, disclose, and sell
- Right to Delete: Request deletion of your personal information
- Right to Correct: Request correction of inaccurate personal information
- Right to Opt-Out: Opt out of the sale/sharing of personal information (we do not sell your data)
- Right to Non-Discrimination: We will not discriminate against you for exercising your rights
- Right to Limit Use: Limit use of sensitive personal information (if applicable)
To exercise these rights: Contact us at [email protected]. We will respond within 45 days.
All Users - General Rights
Regardless of your location, you have the right to:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your personal information (subject to legal retention requirements)
- Withdraw Consent: Withdraw consent for specific data processing activities
- Data Portability: Receive your data in a structured, commonly used format
5. Data Security
We implement industry-standard security measures to protect your information:
- Encryption: All data transmitted via HTTPS/TLS encryption
- Access Controls: Limited access to personal information on a need-to-know basis
- Input Validation: Protection against injection attacks and malicious input
- Rate Limiting: Protection against automated attacks and abuse
- Security Monitoring: Logging and monitoring for suspicious activity
- Spam Prevention: Honeypot fields and timing validation to prevent bot submissions
While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes
- Enforce our agreements
Generally, we retain contact form submissions for the duration of any service relationship plus 3 years for legal and business purposes. After this period, data is securely deleted or anonymized.
7. Children's Privacy
Our website and services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately and we will delete the information.
Note: Our educational advocacy services are provided to parents and caregivers on behalf of their children. Information about children's educational needs shared by parents in service inquiries is treated with the highest confidentiality.
8. Cookies and Tracking Technologies
Our website uses minimal tracking:
- Essential Cookies: Required for website functionality (form security tokens)
- No Marketing Cookies: We do not use advertising or marketing cookies
- No Third-Party Trackers: We do not embed third-party tracking pixels
You can control cookies through your browser settings. Disabling cookies may affect some website functionality.
9. Third-Party Links
Our website may contain links to third-party websites (e.g., Zone 2e, Inc.). We are not responsible for the privacy practices of these websites. We encourage you to read the privacy policies of any third-party sites you visit.
10. Contact Us
Privacy Inquiries & Data Requests
For privacy-related questions, data access requests, or to exercise your privacy rights, contact us:
Data.Driven.AdvocacyA Zone 2e, Inc. Business Practice
Email: [email protected]
Phone: 949-390-6982
26895 Aliso Creek Road #B630
Aliso Viejo, CA 92656
We will respond to all privacy requests within 45 days.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last Updated" date at the top
- Sending email notification for significant changes (if we have your email)
Your continued use of our website after changes are posted constitutes acceptance of the updated Privacy Policy.
12. California "Do Not Track" Disclosure
California law requires us to disclose how we respond to "Do Not Track" (DNT) browser signals. Because there is no industry standard for DNT, our website does not currently respond to DNT signals. However, we do not track users across third-party websites and do not use marketing cookies.
13. Nevada Privacy Rights
Nevada residents may submit a request directing us not to sell their personal information. As stated above, we do not sell personal information. To submit such a request, contact us at [email protected].
Questions?
If you have any questions about this Privacy Policy or our data practices, please don't hesitate to contact us. We are committed to transparency and will be happy to address your concerns.