Privacy Policy

This Privacy Policy is designed to comply with applicable U.S. federal and state digital privacy laws, including the Illinois Personal Information Protection Act (PIPA), the California Consumer Privacy Act (CCPA) as amended by the CPRA, and the Digital Advertising Alliance (DAA) Self-Regulatory Principles for digital advertising compliance.

1. About This Policy & Who We Are

Cabanski LLC (collectively "Cabanski," "we," "us," or "our") is a videography and visual content business operated by Colin Cabana, headquartered in Arlington Heights, Illinois, and serving the northwest Chicagoland suburbs.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit www.caban.ski (the "Site"), submit inquiries or project requests, interact with our advertising, or otherwise engage with our services. It applies to all visitors, clients, and prospective clients.

By using this Site, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please do not access the Site.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information you voluntarily provide to us, including through the following channels:

a) Website Contact & Project Inquiry Forms

When you submit a form on our Site, we may collect:

• Full name and business name
• Email address and phone number
• Project description, goals, and objectives
• Budget range and any financial details relevant to scoping or proposing the project
• Custom service requests and notes
• Preferred timeline or event date

Form submissions on this Site are processed by Web3Forms, a third-party form-processing service that transmits your submission to our business email. Web3Forms temporarily stores submissions on secure servers (hosted on Amazon Web Services infrastructure) for approximately 30 days before automatic deletion. Web3Forms' handling of this data is governed by its own privacy policy (available at web3forms.com/privacy).

b) Meta (Facebook/Instagram) Ads Lead Forms

If you submit a lead form through one of our Meta advertising campaigns, Meta collects and transmits to us:

• Full name
• Email address and/or phone number
• Any other fields included in the specific lead form ad

Meta's collection and handling of this data is governed by Meta's own Privacy Policy (available at facebook.com/privacy/policy). We receive this data to follow up regarding our services.

c) Free Consultation Booking

When you schedule a free consultation via our booking tool (Microsoft Bookings / Outlook), the booking platform collects your name, email address, and appointment preferences.

d) Newsletter ("Future in Focus")

When you sign up for our newsletter, we collect your email address. Newsletter signups are processed and stored by MailerLite, a third-party email marketing service, which we use to send you our newsletter and notifications about new blog posts. Newsletter emails may include standard engagement tracking (such as whether an email was opened or a link was clicked) provided by MailerLite. You can unsubscribe at any time using the link in any newsletter email, and your email address will be removed from our list. MailerLite's handling of this data is governed by its own privacy policy (available at mailerlite.com/legal/privacy-policy).

2.2 Information Collected Automatically

When you visit our Site, certain information is collected automatically through cookies, tracking pixels, and similar technologies:

a) Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC. Google Analytics places cookies on your device and collects data including:

• Pages viewed and time spent on each page
• Referring website or source
• Browser type, device type, and operating system
• Geographic location (city/country level, derived from IP address)
• User interactions such as clicks and scroll depth

Google processes this data on our behalf to help us understand how visitors use the Site. Google may also use this data in accordance with its own privacy policy. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-on at tools.google.com/dlpage/gaoptout.

b) Meta Pixel

We use the Meta Pixel (formerly Facebook Pixel), a tracking code provided by Meta Platforms, Inc. The Meta Pixel collects:

• Pages visited on our Site
• Actions taken (e.g., form submissions, page views)
• Browser and device identifiers
• IP address (hashed)

This data allows us to measure the effectiveness of our Meta advertising campaigns, build custom audiences for targeted advertising, and improve our ad relevance. Meta may match this data against your Facebook or Instagram profile if you are logged into those services. You can manage your Meta ad preferences at facebook.com/adpreferences.

c) Cloudflare (Hosting & Security)

Our Site is hosted and delivered through Cloudflare, Inc., a web infrastructure, content delivery, and security provider. To serve and secure the Site, Cloudflare automatically processes technical data such as IP addresses, request headers, and security and performance logs. Cloudflare's data collection and use is governed by Cloudflare's Privacy Policy (available at cloudflare.com/privacypolicy).

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• To respond to your inquiries and provide information about our services
• To follow up on project requests, leads, or consultations you have initiated
• To prepare proposals, quotes, or service agreements
• To communicate with you regarding your project, deliverables, or appointments
• To process and fulfill service engagements
• To measure and analyze Site traffic and user behavior to improve our Site
• To serve and optimize targeted advertising on Meta platforms using aggregated or hashed audience data
• To comply with legal obligations
• To protect our rights, property, and the safety of our clients and the public

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

4. Legal Basis for Processing

We process your personal information on the following legal bases:

• Consent: Where you have provided explicit consent, such as by submitting a contact form or lead form, or accepting cookies on our Site.
• Contractual Necessity: Where processing is necessary to take steps at your request prior to entering into a contract for services.
• Legitimate Interests: Where we have a legitimate interest in understanding how our Site is used, improving our services, and marketing our business, provided that interest is not overridden by your rights.
• Legal Compliance: Where processing is required to meet our legal obligations.

5. Cookies and Tracking Technologies

We use cookies and similar technologies on our Site. Cookies are small data files placed on your device. The categories of cookies we use include:

• Essential Cookies: Required for the Site to function, including security cookies set by Cloudflare. These cannot be disabled.
• Analytics Cookies: Used by Google Analytics to understand Site usage (see Section 2.2).
• Advertising/Marketing Cookies: Used by the Meta Pixel to support advertising measurement and targeting (see Section 2.2).

You can control cookie settings through your browser. Most browsers allow you to refuse cookies, delete cookies, or be notified when a cookie is set. Note that disabling certain cookies may affect Site functionality. Additionally, industry opt-out tools are available at:

• Digital Advertising Alliance (DAA): optout.aboutads.info
• Network Advertising Initiative (NAI): optout.networkadvertising.org
• Google Analytics Opt-Out: tools.google.com/dlpage/gaoptout
• Meta Ad Preferences: facebook.com/adpreferences

6. Disclosure of Your Information

We do not sell your personal information. We may share your personal information in the following limited circumstances:

10DLC Non-Sharing Statement: Cabanski LLC does not sell, share, rent, or otherwise disclose customer mobile phone numbers to third parties or affiliates for marketing, advertising, or lead generation purposes. Mobile phone numbers collected through our website forms or advertising lead forms are used solely to respond to your inquiry or deliver services you have requested.

6.1 Service Providers & Platform Operators

We work with the following third-party services that may receive or process your personal data on our behalf:

• Google LLC — Analytics services (Google Analytics)
• Meta Platforms, Inc. — Advertising and lead form services (Meta Pixel, Meta Lead Ads)
• Cloudflare, Inc. — Website hosting, content delivery, and security
• Web3Forms — Website form submission processing and delivery
• MailerLite — Newsletter signup processing, email list management, and newsletter delivery
• Microsoft Corporation — Appointment booking (Microsoft Bookings) and business email services

Each of these providers is contractually obligated to protect your data and use it only as directed or as set forth in their own privacy policies.

6.2 Business Transactions

In the event of a merger, acquisition, restructuring, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change via a prominent notice on our Site.

6.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Cabanski, our clients, or others.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including:

• Contact and inquiry data: Retained for up to 3 years from last contact, or the duration of any active service relationship, whichever is longer.
• Website form submissions: Delivered to our business email and retained per the contact-data schedule above; temporary copies held by Web3Forms are automatically deleted after approximately 30 days.
• Project-related financial information: Retained for up to 7 years to comply with applicable tax and accounting obligations.
• Analytics data: Retained per the default retention settings of Google Analytics (up to 26 months).
• Meta Pixel and advertising data: Retained per Meta's data retention policies.
• Newsletter subscriber data: Retained in MailerLite until you unsubscribe or request deletion, after which it is removed from our active mailing list.

When personal information is no longer needed, we securely delete or anonymize it.

8. Data Security

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. These measures include:

• Secure Sockets Layer (SSL/TLS) encryption on our Site
• Access controls limiting who within our business may access personal information
• Use of reputable, security-vetted third-party platforms (Cloudflare, Google, Meta, Microsoft, Web3Forms, and MailerLite)

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.

9. Your Privacy Rights

9.1 Illinois Residents

Under the Illinois Personal Information Protection Act (PIPA) and related Illinois laws, you have the right to be notified of a security breach involving your personal information. If you are an Illinois resident and your personal information is subject to a qualifying breach, we will notify you as required by law.

9.2 California Residents

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale/Sharing: We do not sell your personal information. We do share certain data with advertising platforms (Meta) for cross-context behavioral advertising purposes; you may opt out of this by using the ad preference tools referenced in Section 5.
• Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined under the CPRA beyond what is necessary to provide our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

To exercise your California privacy rights, please contact us using the information in Section 15.

9.3 All Users — General Rights

Regardless of your location, you may:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information (subject to legal obligations)
• Withdraw consent at any time where processing is based on consent
• Opt out of marketing communications by contacting us directly

To submit a privacy request, please email us at contact@caban.ski with the subject line "Privacy Request." We will respond within 45 days. In some cases, we may need to verify your identity before processing your request.

10. Digital Advertising Compliance

This section addresses our commitments under digital advertising compliance frameworks, including the Digital Advertising Alliance (DAA) Self-Regulatory Principles.

We are committed to responsible digital advertising practices. In connection with our use of Google Analytics, the Meta Pixel, and Meta Lead Ads, we adhere to the following principles:

• Transparency: We clearly disclose all tracking technologies and advertising tools used on this Site.
• Notice: We provide you with notice of data collection before or at the time of collection via this Privacy Policy and cookie disclosures.
• Choice & Control: We provide meaningful opt-out mechanisms for interest-based advertising (see Section 5).
• Data Minimization: We collect only the personal information reasonably necessary to fulfill the stated purposes.
• Purpose Limitation: Data collected for analytics and advertising is used only for those stated purposes.
• Security: We implement appropriate safeguards for data transmitted to and from advertising platforms.
• Accountability: We maintain records of our data processing activities and third-party data relationships.
• Sensitive Data: We do not use interest-based advertising in a manner that targets sensitive categories of personal information.
• Consent for Lead Data: Data collected through Meta Lead Ads forms is collected only from individuals who have actively engaged with our paid advertisements and submitted their information voluntarily.
• Compliance with Platform Policies: Our use of Google Analytics and Meta Pixel complies with Google's Terms of Service and Meta's Business Tools Terms, respectively.

If you have questions about our digital advertising practices or wish to opt out, please contact us at contact@caban.ski or use the opt-out tools listed in Section 5.

11. SMS/Text Message Communications (10DLC Compliance)

If you provide your mobile phone number to us via a website form, a Meta lead advertisement, or in the course of our business relationship, we may contact you by SMS/text message to respond to your inquiry or provide service-related communications. This section governs our SMS practices in compliance with U.S. carrier regulations for 10-Digit Long Code (10DLC) business messaging.

11.1 Consent

We only send SMS messages to individuals who have provided consent by submitting their phone number through one of the following methods:

• Completing and submitting a contact or project inquiry form on www.caban.ski that includes your phone number
• Submitting your phone number through a Meta (Facebook/Instagram) lead form in response to one of our advertisements
• Verbally providing your phone number during a consultation or in the course of a service engagement

11.2 Message Types & Frequency

We may send SMS messages for the following purposes: responding to your inquiry, scheduling or confirming consultations, providing project updates, and sharing service information relevant to your engagement with Cabanski. Message frequency will vary based on the nature of your inquiry and project. Standard message and data rates from your mobile carrier may apply.

11.3 Opt-Out Instructions

You may opt out of SMS communications at any time by replying STOP to any text message you receive from us. You may also reply HELP at any time to receive support information, or contact us directly at contact@caban.ski or 224.666.3411.

11.4 Non-Sharing of Mobile Data

10DLC Carrier Requirement: Cabanski LLC does not sell, share, rent, or otherwise disclose customer mobile phone numbers to any third party or affiliate for marketing, advertising, or lead generation purposes. Mobile phone numbers are used exclusively to communicate with you regarding your inquiry or service engagement.

12. Children's Privacy

Our Site and services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take prompt steps to delete that information. If you believe we may have collected information from a minor, please contact us immediately at contact@caban.ski.

13. Third-Party Links

Our Site may contain links to third-party websites, including our social media profiles (Instagram). These third-party sites have their own privacy policies, and we are not responsible for their content or practices. We encourage you to review the privacy policy of any third-party site you visit.

14. Client Portal (client.caban.ski)

Clients we work with are issued an account on our client portal at client.caban.ski. This section describes what the portal collects and who processes it. It supplements, and does not replace, the rest of this policy.

14.1 Information in the Portal

Through the portal we process:

• Account and contact details — your name, business name, email address, phone number, and billing and shipping addresses.
• Billing and financial information — invoices, estimates, proposals, payment status, balances, and where applicable the credit limit on your account. This information originates in our accounting system and is displayed to you through the portal.
• Project information — project status, shoot dates, venue details, deliverables, and messages exchanged about your work.
• Consent records — where you give consent (for example to SMS messaging, a payment authorization, or a content licence), we record the exact text shown to you, a version identifier and integrity hash of that text, the date and time, your IP address, and your browser user agent. We retain these records as evidence that consent was given, for as long as necessary to establish or defend a legal claim.
• Authentication data — your email address and sign-in activity, handled by our authentication provider.

14.2 We Do Not Handle Card or Bank Details

Cabanski does not collect, process, or store your full payment card number, bank account number, or routing number. Where a payment method is required, you enter it directly with our payment processor on their own secure page. We receive only limited information such as whether a payment succeeded and the last digits or type of the method used. Bank remittance details we provide to invoiced clients are issued directly to you and are not published.

14.3 Accounting Data and QuickBooks

Our accounting records are maintained in QuickBooks Online, operated by Intuit Inc. When you view billing information in the portal, it is retrieved from QuickBooks at the time you request it and displayed to you.

We do not provide third parties with access to QuickBooks data, and we do not export, save, or store QuickBooks data for any purpose other than operating the portal and administering your account. Access is authorized by Cabanski, is restricted to the accounting data required for that purpose, and can be revoked at any time.

14.4 Service Providers Used by the Portal

In addition to the providers listed in Section 6, the portal relies on:

• Clerk — authentication and account management.
• Vercel — hosting.
• Upstash — encrypted storage of access credentials and portal records.
• Intuit (QuickBooks Online) — accounting, invoicing, and payment processing.
• Dropbox — storage and delivery of project files.
• monday.com — project tracking.
• Microsoft 365 — transactional email sent from contact@caban.ski.

Each processes your information only as needed to provide its service to us. We do not sell your personal information.

14.5 Security Measures

Portal access requires authentication, and every request is authorized on our servers before any of your data is returned. Access credentials for connected services are encrypted at rest using AES-256. All portal pages are served over HTTPS and are configured not to be cached. Pages containing your information are excluded from search engine indexing.

14.6 Retention and Access

Account, billing, and consent records are retained for as long as your account is active and thereafter as required for tax, accounting, and legal purposes. Project files are retained for a limited period and are not an archival service — please keep your own copies of final deliverables.

You may request a copy of the information held in your portal account, or ask us to correct it, by emailing contact@caban.ski. Requests to withdraw SMS consent or portfolio permission are described in Sections 11 and in our Terms of Service.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will revise the "Effective Date" at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the Site after any changes constitutes your acceptance of the updated policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Cabanski LLC
Operated by: Colin Cabana
Based in Arlington Heights, Illinois
Email: contact@caban.ski
Phone: 224.666.3411
Website: www.caban.ski

For privacy-related requests, please email contact@caban.ski with the subject line "Privacy Request" and include your name and a brief description of your request. We aim to respond within 45 business days.