Chapman Digital LLC
Effective Date: August 20, 2026

This Privacy Policy describes how Chapman Digital LLC (“Chapman Digital,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit or use chapmandigital.co and related pages that link to this Policy (the “Website”).

We designed this Policy to match how the Website actually works today: a marketing and company site with contact and careers forms, optional scheduling and map embeds, and Cloudflare-hosted infrastructure. If you do not agree with this Policy, please do not use the Website or submit information to us.

1. Who We Are (Controller)

Chapman Digital LLC
500 Grossman Dr # 1198
Braintree, MA 02184-4967
United States

Privacy contact: [email protected]
General support: [email protected]
Phone: +1 781-412-5683

For career application questions, you may also contact [email protected].

2. Scope

This Policy covers personal information processed in connection with:

  • browsing the Website;
  • submitting the contact form;
  • submitting a career application;
  • emailing published Chapman Digital addresses on chapmandigital.co or the connected haxer.net domain;
  • booking a consultation through our Cal.com scheduling embed (where shown);
  • viewing our Google Maps office embed (where shown); and
  • interacting with Cloudflare Turnstile bot protection on forms.

It does not cover client project environments, customer systems we manage under a separate contract, or third-party websites we merely link to (for example LinkedIn). Those are governed by their own terms and privacy notices, or by a separate agreement with you.

3. Information We Collect

3.1 Information you provide

Contact form (/contact and related contact UI) may collect:

  • full name;
  • email address;
  • phone number (optional);
  • company name (optional);
  • service interest; and
  • message content.

Career application form (/careers) may collect:

  • full name;
  • email address;
  • phone number (optional);
  • role of interest (optional);
  • additional notes (optional);
  • resume file (required; PDF, DOC, or DOCX, max 5 MB); and
  • cover letter file (optional; same file limits).

Direct communications. If you email or call us, we collect the information you choose to share in that conversation. Inbound email is delivered according to each domain’s MX records:

  • @chapmandigital.co addresses (including privacy, support, recruiting, and other published contacts) are received through Google Workspace.
  • @haxer.net addresses on our connected Microsoft domain are received through Microsoft 365.

Scheduling. If you book time through the Cal.com embed on contact or service pages, Cal.com collects the details you enter in that booking flow (typically name, email, and meeting details). See Section 6.

We do not currently operate an e-commerce checkout, paid account portal for Website visitors, promotions engine, survey platform, or working newsletter subscription backend. A newsletter-style UI may appear on some pages for design/content purposes, but as of the Effective Date those submissions are not sent to or stored by our servers.

3.2 Information collected automatically

When you use the Website or submit a form, we and our processors may collect:

  • IP address (used for security, bot checks, and rate limiting);
  • a one-way hashed submission fingerprint derived from your IP (stored with form abuse-prevention controls; we do not store raw IP addresses in our application database for contact/career submissions);
  • browser user agent (for career applications);
  • approximate request metadata provided by our hosting/CDN provider (Cloudflare), such as country or network signals used for security and performance;
  • pages requested, timestamps, and standard server/CDN logs; and
  • Turnstile challenge tokens used to verify that a submission is human.

3.3 Cookies and similar technologies

The Website is primarily a static site. We do not run Google Analytics or advertising pixels in our first-party codebase as of the Effective Date.

Certain features may still set or rely on cookies or similar technologies, including:

  • Cloudflare security, performance, and Turnstile (bot protection) technologies;
  • Cal.com (when you load or use the scheduling embed); and
  • Google Maps (when you load the map embed).

For more detail, see our Cookie Policy.

3.4 Sensitive information

Please do not include sensitive personal information (such as Social Security numbers, government ID numbers, health data, or financial account numbers) in contact messages, resumes, or notes unless we expressly ask for it and explain why. Career materials you upload may incidentally contain information you choose to include; we use those materials only for recruitment purposes described below.

4. How We Use Personal Information

We use personal information to:

  • respond to inquiries and provide requested information or consultations;
  • evaluate candidates and administer recruiting;
  • operate, secure, and maintain the Website (including bot prevention, rate limiting, fraud/abuse prevention, debugging, and uptime);
  • send transactional or administrative messages related to a request you made;
  • keep internal records needed for business operations and compliance;
  • enforce our terms, protect our rights and users, and respond to legal requests; and
  • improve Website content and service quality using aggregated or operational insights.

We do not sell personal information, and we do not rent personal information. We do not use Website form data for third-party advertising.

If you are in a jurisdiction that requires a legal basis for processing (such as the EEA/UK), we typically rely on:

  • Contract / pre-contract steps — responding to service inquiries you initiate, or evaluating job applications you submit;
  • Legitimate interests — securing the Website, preventing abuse, maintaining business records, and improving our services, balanced against your rights;
  • Consent — where required for optional embeds or communications, or where you clearly opt in; and
  • Legal obligation — where we must retain or disclose information to comply with law.

6. How We Share Information (Processors and Recipients)

We share personal information only as needed to operate the Website and our business:

Recipient / tool Role
Cloudflare Hosting, form APIs, career application storage, rate-limit storage, bot protection, and (for authorized staff) admin access controls
SMTP2GO Transactional email delivery for contact and careers notification messages sent by our Website systems
Google Workspace Mailbox hosting and inbound email for @chapmandigital.co (MX records for the chapmandigital.co domain). Messages you send to our published addresses on this domain, and copies of Website notification mail delivered to those inboxes, are processed by Google
Microsoft 365 Mailbox hosting and inbound email for @haxer.net (MX records for the haxer.net domain). Messages you send to Chapman Digital addresses on that connected domain are processed by Microsoft
Cal.com Scheduling embed and booking processing when you use that feature
Google Maps Maps embed for our meeting office location; Turnstile/security may also involve Cloudflare’s challenge infrastructure
Internal personnel Authorized Chapman Digital team members who need the information to respond, recruit, or administer systems
Professional advisers / authorities Only when reasonably necessary for legal, security, or compliance purposes

Career applications are reviewed in a staff admin workflow protected by Cloudflare Access. Application files are stored in private Cloudflare R2 object storage, and application metadata is stored in Cloudflare D1. Notification emails about new submissions are sent to our careers/contact notification addresses (currently configured to our internal recruiting/operations email on @chapmandigital.co), which are then received in Google Workspace.

If Cloudflare storage bindings are unavailable in an environment, application files may be attached to the notification email instead so the submission can still be reviewed. In production, the intended design is private R2/D1 storage plus email notice.

We may also disclose information if required by law, legal process, or to protect the rights, safety, or property of Chapman Digital, our users, or others.

7. Retention

We keep personal information only as long as needed for the purposes above, then delete or de-identify it when practicable.

  • Career applications: metadata and files are retained for up to 365 days (twelve months) by default, then automatically deleted by our retention job, unless a longer period is required for an active recruiting process, dispute, security investigation, or legal obligation. Audit events related to retention/admin actions may be kept for security and compliance.
  • Contact form messages: retained in email/notification systems and related operational records as long as needed to respond and maintain ordinary business records.
  • Rate-limit records: short-lived hashed counters (on the order of one hour) used to prevent form abuse.
  • Server/CDN/security logs: retained according to our providers’ and our operational security practices.

You may request earlier deletion where applicable (see Section 9).

8. Security

We implement technical and organizational measures appropriate to the nature of the data, including:

  • HTTPS/TLS in transit;
  • private object storage for application files;
  • access-controlled admin routes (Cloudflare Access) for application review;
  • bot protection (Cloudflare Turnstile) on public forms;
  • IP hashing for submission fingerprints / rate limiting;
  • file-type and size validation for uploads; and
  • least-privilege access for staff tools.

No internet transmission or storage system is perfectly secure. If you believe your interaction with us has been compromised, contact [email protected].

9. Your Rights and Choices

Depending on where you live, you may have rights to:

  • access the personal information we hold about you;
  • correct inaccurate information;
  • delete information;
  • object to or restrict certain processing;
  • receive a portable copy of information you provided; and/or
  • appeal or lodge a complaint with a supervisory authority.

U.S. state privacy rights (including CCPA/CPRA where applicable): You may request to know, access, correct, or delete personal information, and to opt out of “sale” or “sharing” for cross-context behavioral advertising. We do not sell personal information and do not share it for cross-context behavioral advertising as those terms are commonly defined. We also do not use or disclose sensitive personal information for purposes that require a right to limit under CPRA, beyond what is necessary to provide the services you request.

To exercise rights, email [email protected] with enough detail for us to verify and fulfill your request. We may need to confirm your identity before acting.

You can also:

  • decline to submit forms or book meetings;
  • use browser controls to block third-party embeds/cookies (some features may stop working); and
  • contact us to update or withdraw a job application.

10. International Transfers

Chapman Digital is based in the United States. If you access the Website from outside the U.S., your information may be processed in the United States and other countries where our processors operate (including Cloudflare, SMTP2GO, Google Workspace for @chapmandigital.co mail, and Microsoft 365 for @haxer.net mail). Those countries may have different data-protection laws than your home jurisdiction. Where required, we rely on appropriate transfer mechanisms and contractual protections with processors.

11. Children’s Privacy

The Website is directed to business professionals and is not intended for individuals under 18. We do not knowingly collect personal information from children under 18. If you believe a minor has provided information to us, contact us and we will take appropriate steps to delete it.

The Website may link to or embed third-party services (including Cal.com, Google Maps, and LinkedIn). Those services have their own privacy practices. We encourage you to review them before interacting. Loading an embed may cause the third party to receive your IP address and device/browser information.

13. Do Not Track

Some browsers offer a “Do Not Track” signal. There is no consistent industry standard for responding to DNT. Our Website does not alter its behavior solely because a DNT signal is present. You can still use the choices in Section 9 and our Cookie Policy.

14. Changes to This Policy

We may update this Privacy Policy to reflect product, legal, or operational changes. We will post the revised Policy on this page and update the Effective Date. Material changes may also be highlighted on the Website or communicated when appropriate. Continued use of the Website after an update means you acknowledge the revised Policy.

15. Contact Us

Questions about this Privacy Policy or our data practices:

Email: [email protected]
Mail: Chapman Digital LLC, 500 Grossman Dr # 1198, Braintree, MA 02184-4967, United States

Related notices: Cookie Policy · Terms · Disclaimer