Data Processing Policy

1. Scope and who is responsible

This Data Processing Policy describes how personal data is handled on ocdesigns.info and in my work with clients in the United States. OC Presentation Designs ("I", "me") is the business responsible for that data, and I decide why and how it is used.

It sits alongside my Privacy Policy, which sets out what I collect, who I share it with, and the rights you have. This policy covers the processing details: the purposes, how long data is kept, the service providers involved, security, and how requests from you are handled.

Where a state privacy law uses the terms "controller" and "processor", I act as the controller (or business) of the information described here, and my service providers act as processors (or service providers and contractors) that only handle data on my written instructions.

2. What personal data is processed

• Identifiers: your first and last name, company, and email address.
• Inquiry details: the project type you select and the message you send, which may include information about your project, timelines, and organization.
• Correspondence: emails and messages exchanged while we discuss or work on a project.
• Website usage data: pages viewed, approximate location derived from your IP address, browser and device type, and the referring site, kept in aggregate.
• Cookie data: the preference stored in your browser when you accept or dismiss the cookie notice.

3. Why it is processed

• To answer your inquiry and prepare a quote or proposal, and to take the steps you ask for before a project starts.
• To deliver presentation design and training services and manage the working relationship, including project files and feedback.
• To keep records of clients and projects and to invoice and account for work, as required by tax and accounting rules.
• To send the Decked Out newsletter, where you have subscribed, and to honor your unsubscribe requests.
• To understand in aggregate how the site is used so I can improve it.
• To prevent spam, fraud, and abuse, and to comply with legal obligations and enforce my agreements.

4. How long data is kept

Inquiry form submissions and email correspondence are kept for up to three years after our last contact. If we work together, project records and related correspondence are kept for up to seven years to satisfy tax and accounting requirements. Newsletter subscriptions are kept until you unsubscribe, plus a minimal suppression record. Analytics data is kept only in aggregate and is not linked to you. Cookie preferences stay in your browser until you clear them.

5. Service providers and other recipients

I do not sell your personal data, and I do not share it for cross-context behavioral advertising or targeted advertising. I use a small number of service providers, described in California law as "service providers" and "contractors", and they handle data only for the purposes set out above:

• The website platform and hosting provider that runs this site and stores inquiry submissions (Base44).
• The email service used to deliver inquiry notifications and newsletter messages.
• The scheduling tool used when you book a call (Calendly).
• The email client I use to correspond with you.

6. Where data is stored and when it moves

My providers may store data on servers in the United States and in other countries. Where data is transferred outside the country you live in, I rely on the safeguards those providers have in place, such as standard contractual clauses and equivalent contractual protections, so your data keeps a comparable level of protection. If you want to know which safeguards apply to your data, contact me and I will tell you.

Beyond those providers, I share data only with professional advisers such as my accountant, with authorities where the law requires it or where I need to protect my rights, and with a successor business if the studio is ever sold or merged, in which case this policy would continue to apply.

7. Security

Inquiry submissions are stored in an access-controlled database and are visible only to me. Access to my email, project files, and website account is protected by passwords and, where available, two-factor authentication. I collect only the information needed to quote and deliver a project, and I am glad to sign an NDA before confidential material is shared. If an incident affects your personal data and creates a risk of harm, I will notify you and the relevant state authorities as required by applicable U.S. law.

8. Automated decisions, profiling, and sensitive data

I do not use your data for automated decision-making or profiling, and I do not collect sensitive personal data such as government identifiers, financial account details, precise geolocation, health information, or biometric data. Please avoid including sensitive information in the inquiry form; if a project genuinely requires it, I will arrange a more secure way to share it.

9. Your rights and how requests are handled

If you live in California or another state with a comprehensive privacy law, including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and Montana, you can ask to know what personal data I hold about you, access a copy, correct inaccuracies, delete it, or receive a portable copy of what you provided. You also have the right to be free from discrimination for exercising these rights. The Privacy Policy lists these rights in full.

To make a request, email oreet@ocdesigns.info or use the contact form on this site. I will confirm your identity by matching the details you provide against my records and respond within 45 days, or sooner where your state requires it, with no more than one 45-day extension if more time is genuinely needed. Residents of Virginia, Colorado, and Connecticut can appeal a decision by replying to it, and I will respond in writing within 45 days, explaining how to contact your state attorney general if you remain unsatisfied.

I do not sell or share personal data, so there is no opt-out of sale or sharing for you to exercise. Visitors outside the United States may have additional rights under their local law, and I will honor those requests wherever I can.

10. Children

This site and my services are intended for businesses and professionals, not children. I do not knowingly collect personal data from anyone under 13, the age set by the Children's Online Privacy Protection Act (COPPA). If you believe a child under 13 has sent me information, contact me and I will delete it promptly.

11. Cookies and analytics

This site uses a cookie notice to store your preference, and may use analytics cookies to understand which pages are useful, kept in aggregate. You can change your choice at any time using the Cookie preferences link in the footer, or block cookies in your browser settings. Section 4 of the Privacy Policy covers cookies in more detail.

12. Changes to this policy

If the way I process data changes, I will update this page and revise the date at the top. Material changes will be highlighted on the site so returning visitors can see what is different.

13. Contact

Questions about how your data is processed? Email me at oreet@ocdesigns.info or get in touch and I'll be happy to help.