Privacy Policy

by Michael Santiago, CEO of Arising Co

Arising Co, LLC ("Arising Co," "we," "our," or "us") is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy describes how we collect, use, disclose, and protect information about you when you visit thearising.co and any related subdomains, pages, or services (collectively, the "Site"), and when you engage us for marketing, web design, SEO, or advertising services.

By using the Site or our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use of the Site. We may update this policy periodically; the "Last Updated" date at the top reflects the most recent revision. Continued use of the Site after an update constitutes acceptance of the revised policy.

Questions? Contact us at info@thearising.co.


Definitions

Personal Data / Personal Information — Any information that identifies, relates to, describes, or could reasonably be linked to you or your household. For California residents, this term corresponds to "Personal Information" as defined under the CCPA/CPRA.

Processing — Any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.

Data Subject — A natural person whose Personal Data is being Processed.

Child — A natural person under 16 years of age.

We / Us / Our — Arising Co, LLC, a Florida limited liability company.

Consent Record — A timestamped log of your cookie consent choice, stored in our secure audit database. It contains your choice (accepted/declined), an anonymized country code, a truncated browser user-agent string, and a policy version number. No IP address is stored.


Data Protection Principles

We follow these principles when handling your Personal Data:

  • Lawfulness, fairness, and transparency — We process Personal Data only on a valid legal basis and inform you of that basis.
  • Purpose limitation — Data is collected for specified, explicit, and legitimate purposes and not further processed in a way incompatible with those purposes.
  • Data minimization — We collect only what is necessary for the stated purpose.
  • Accuracy — We take reasonable steps to keep data accurate and up to date.
  • Storage limitation — We retain data only as long as necessary for its purpose or as required by law.
  • Integrity and confidentiality — We implement appropriate technical and organizational measures to protect Personal Data.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your Personal Data. To exercise any of these rights, email us at info@thearising.co.

  • Right to Know / Access — Request a copy of the Personal Data we hold about you and information about how it is used and shared.
  • Right to Rectification — Request correction of inaccurate or incomplete Personal Data.
  • Right to Erasure ("Right to be Forgotten") — Request deletion of your Personal Data where it is no longer necessary, where consent has been withdrawn, or where it has been unlawfully processed.
  • Right to Restrict Processing — Request that we limit how we use your Personal Data under certain conditions.
  • Right to Object — Object to Processing based on legitimate interests or for direct marketing purposes.
  • Right to Data Portability — Receive your Personal Data in a structured, machine-readable format and, where technically feasible, have it transmitted to another controller.
  • Right to Withdraw Consent — Withdraw any consent you have given at any time. Withdrawal does not affect the lawfulness of Processing prior to withdrawal.
  • Right to Non-Discrimination — We will not discriminate against you for exercising any of your privacy rights.
  • Right to Lodge a Complaint — You have the right to file a complaint with a supervisory authority (e.g., your state Attorney General or the EU data protection authority in your jurisdiction).

We will respond to verified requests within 30 days (or 45 days where permitted by law with notice).


California Residents — CCPA / CPRA Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

  • Right to Know — You may request disclosure of the categories and specific pieces of Personal Information we have collected, the sources, the business purpose, and the categories of third parties with whom we share it.
  • Right to Delete — You may request deletion of your Personal Information, subject to certain exceptions.
  • Right to Correct — You may request correction of inaccurate Personal Information.
  • Right to Opt-Out of Sale or Sharing — We do not sell your Personal Information for monetary consideration. However, we do share certain data (such as analytics identifiers and advertising pixels) with third-party partners for cross-context behavioral advertising purposes, which may qualify as "sharing" under the CPRA. You may opt out by clicking "Reject All" on our cookie banner or by contacting us at info@thearising.co.
  • Right to Limit Use of Sensitive Personal Information — We do not collect sensitive Personal Information (as defined under CPRA) beyond what is necessary for the services you request.
  • Right to Non-Discrimination — We will not deny services, charge different prices, or provide a different quality of service because you exercised a privacy right.

Do Not Sell or Share My Personal Information: To opt out of the sharing of your data for cross-context behavioral advertising, use the cookie banner on our Site or contact info@thearising.co. We will honor your request within 15 business days.

Authorized Agent: California residents may designate an authorized agent to submit requests on their behalf. We may require written proof of authorization and verification of your identity before processing such requests.


Information We Collect

Information You Provide to Us

When you fill out a contact form, book a call, request a quote, sign up for a newsletter, submit a support ticket, or otherwise communicate with us, we may collect:

  • Full name
  • Email address
  • Phone number
  • Company name and website URL
  • Project details and marketing goals
  • Billing and payment information (processed by Stripe — we do not store raw card data)
  • Any other information you voluntarily submit

Information Collected Automatically

When you visit the Site, we and our third-party partners automatically collect certain technical data, including:

  • IP address (used for geolocation at the country/region level; not stored in our consent audit logs)
  • Browser type and version
  • Operating system
  • Device type and identifiers
  • Pages visited and content viewed
  • Time and date of visit
  • Referring URL
  • Session duration and interaction data (clicks, scrolls)
  • Cookie identifiers and similar tracking technologies

This automatic collection only applies to analytics, marketing, and behavioral tracking if you have accepted cookies via our cookie banner. If you decline, no tracking scripts are loaded.

Publicly Available Information

We may collect information about your business that is publicly available (e.g., from your website, Google Business Profile, or social media) when evaluating your marketing needs or preparing proposals.


Cookies and Tracking Technologies

We use cookies and similar technologies (pixels, tags, and scripts) to operate the Site, analyze performance, and deliver relevant advertising. Your cookie preferences are recorded and enforced through our consent management system.

On your first visit, you will see a cookie banner asking you to Accept All or Reject All non-essential cookies. Your choice is stored as a first-party cookie (app-consent) for 365 days and logged in our secure audit system (Upstash Redis) with a timestamp, your choice, an anonymized country code, and your browser user-agent — no IP address is stored.

You may withdraw or change your consent at any time by visiting the cookie settings section below.

CategoryDescriptionConsent Required
Strictly NecessaryEnable core site functions (e.g., form submission, session state). Cannot be disabled.No
AnalyticsMeasure site traffic and user behavior to improve the Site.Yes
Marketing / AdvertisingUsed to deliver personalized ads and track campaign performance across platforms.Yes
FunctionalityRemember preferences to improve your experience (e.g., saved form fields).Yes

Third-Party Services That Set Cookies or Track Activity

The following services are loaded only when you accept cookies. Each link leads to that service's own privacy policy and opt-out tools.

ServicePurposeProvider Policy
Google Analytics (GA4)Website traffic and behavior analyticspolicies.google.com/privacyOpt out
Google AdsConversion tracking and remarketing for paid search campaignspolicies.google.com/privacy
Meta (Facebook) PixelConversion tracking and audience building for Facebook/Instagram adsfacebook.com/policy.phpAd preferences
Zoho SalesIQLive chat and visitor engagement widgetzoho.com/privacy.html
Zoho PageSenseHeatmaps, session recordings, and A/B testingzoho.com/privacy.html
MailerLiteEmail marketing — tracks email opens and link clicksmailerlite.com/legal/privacy-policy

The following services are loaded regardless of cookie preference because they are necessary to provide core site functionality or process transactions:

ServicePurposeProvider Policy
Zoho CRM (Forms)Contact and lead capture form processingzoho.com/privacy.html
StripeSecure payment processingstripe.com/privacy
AWS (Amazon Web Services)Cloud infrastructure (email delivery, file storage)aws.amazon.com/privacy
NetlifyWebsite hosting and edge deliverynetlify.com/privacy

To change your cookie preferences at any time, use the options below:

To withdraw consent (opt out of all non-essential cookies): Clear the app-consent cookie in your browser, then reload the page. The cookie banner will reappear and you may select "Reject All."

To opt out of specific services without clearing all cookies:

To manage cookies at the browser level: Most browsers allow you to view, block, or delete cookies through their settings. Note that disabling all cookies may affect the functionality of the Site.


How We Use Your Personal Data

We use your Personal Data for the following purposes:

To deliver our services:

  • Respond to inquiries, proposals, and support requests
  • Fulfill contracts for web design, SEO, PPC, and marketing services
  • Send invoices and process payments via Stripe

To operate and improve the Site:

  • Analyze site traffic and user behavior (with consent)
  • Identify and fix technical issues
  • Conduct A/B tests and optimize page performance (with consent)

For marketing and communications (with consent or legitimate interest):

  • Send newsletters, offers, and educational content via MailerLite
  • Run targeted advertising campaigns via Google Ads and Meta Pixel
  • Engage with you via Zoho SalesIQ live chat

For legal and security purposes:

  • Comply with applicable laws, regulations, and legal obligations
  • Detect and prevent fraud, abuse, and security threats
  • Maintain consent audit records for regulatory compliance
Processing ActivityLegal Basis
Responding to inquiries and delivering servicesContract performance (Art. 6(1)(b))
Analytics, marketing, and behavioral trackingConsent (Art. 6(1)(a))
Fraud prevention and securityLegitimate interests (Art. 6(1)(f))
Compliance with legal obligationsLegal obligation (Art. 6(1)(c))
Newsletter and promotional communicationsConsent (Art. 6(1)(a))

Who We Share Your Data With

We do not sell your Personal Data. We share it only in the following circumstances:

Service Providers: Third-party vendors who process data on our behalf under data processing agreements, including the services listed in the cookie table above.

Business Transfers: If Arising Co is acquired, merges with another company, or transfers its assets, your Personal Data may be part of that transfer. We will notify you via a prominent notice on the Site prior to such a transfer.

Legal Requirements: We may disclose your Personal Data if required by law, subpoena, court order, or governmental regulation, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

With Your Consent: We may share your data with additional third parties when you have explicitly consented.

We do not share Personal Data with unaffiliated third parties for their own direct marketing purposes without your explicit consent.


Data Retention

We retain Personal Data for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

Data TypeRetention Period
Client project files and communicationsDuration of engagement + 5 years
Contact form submissions3 years from last interaction
Cookie consent audit logs2 years from consent date
Payment records (Stripe)7 years (tax/legal compliance)
Marketing email opt-in recordsUntil unsubscribe + 3 years
Analytics data26 months (Google Analytics default)

How We Secure Your Data

We implement industry-standard technical and organizational measures to protect your Personal Data, including:

  • HTTPS/TLS encryption for all data in transit
  • Encrypted storage for sensitive data at rest
  • Access controls limiting data access to authorized personnel
  • Regular review of third-party vendor security practices
  • Consent audit logs stored in a dedicated, access-controlled database (Upstash Redis)

Despite these measures, no transmission over the Internet or electronic storage method is 100% secure. In the event of a data breach that creates a risk to your rights or interests, we will notify you and relevant supervisory authorities as required by applicable law.


International Data Transfers

Arising Co is based in Florida, USA. If you access the Site from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. We take steps to ensure that cross-border transfers comply with applicable law, including using standard contractual clauses where required under GDPR.


Children's Privacy

Our Site and services are not directed to children under the age of 16. We do not knowingly collect Personal Data from anyone under 16. If you believe a child under 16 has submitted Personal Data to us, please contact us immediately at info@thearising.co and we will delete that information promptly.


The Site may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party site you visit.


Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your Personal Data, please contact:

Arising Co, LLC Email: info@thearising.co Website: thearising.co

For verified consumer requests under CCPA/CPRA or GDPR, include your full name, email address, and a description of your request. We will respond within 30 days.


Severability

If any provision of this Privacy Policy is found to be invalid or unenforceable, that provision will be modified to the minimum extent necessary to make it enforceable, and the remaining provisions will continue in full force and effect.


Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of the page. For material changes, we will provide a more prominent notice (such as a banner on the Site). We encourage you to review this policy periodically.

No pressure, no commitment

Ready to work with us?

Book a free discovery call. We'll listen to where you're at, what you're trying to achieve, and let you know honestly if we can help.

Free Discovery Call15–20 minutes · Completely free
  • Tell us about your business
  • We ask the right questions
  • Youll know if were a good match
Book a Free Call →