This Privacy Policy explains how Central & Walton Studio (Central & Walton, we, us, our) collects, uses, discloses, and protects information when you visit or interact with our website (the Site), communicate with us, or otherwise engage with our business.

This Privacy Policy may be supplemented by additional notices at the point of collection (for example, on forms) and may be supplemented or modified by written agreements for paid services.

If you do not agree with this Privacy Policy, please do not use the Site.

1. Scope

This Privacy Policy applies to information collected through:

-- The Site and any pages, forms, scheduling links, chat widgets, or interactive features on it

Email, SMS (text), phone calls, social messages, and other communications between you and us

-- Any files, documents, or materials you upload or provide (if enabled)

-- Marketing and advertising interactions connected to the Site (if enabled), including attribution and analytics

This Privacy Policy does not apply to third-party websites, tools, or services that we do not control, even if they are linked to or embedded on the Site (see Section 13).

2. Notice at Collection

We collect personal information to operate the Site, communicate with you, provide and improve services, secure our systems, and (where permitted) market our services.

Categories of information we may collect

Depending on your interaction with us, we may collect: identifiers and contact details, commercial and intake information, communications, files/materials you provide, device/usage data, approximate location derived from IP, and marketing attribution data (see Section 3).

Purposes for collection

We use this information for the purposes described in Section 6, including responding to requests, providing services, analytics, security and fraud prevention, marketing (where permitted), legal compliance, and enforcement of our agreements.

3. Information We Collect

We collect information in three ways: (A) information you provide, (B) information collected automatically, and (C) information from third parties.

A) Information you provide

Depending on how you interact with us, you may provide:

-- Identifiers and contact details: name, email, phone number, business name, role/title

-- Inquiry and intake details: service interests, goals, timelines, preferences, notes you share, form responses

-- Commercial information: proposals, invoices, estimates, billing status, purchase history (if applicable)

-- Communications: emails, messages, chat content, call notes, SMS content, attachments

-- Files and materials: documents, images, brand assets, copy, creative assets, and other project-related information

-- Any other information you choose to share (including in open text fields)

B) Information collected automatically

When you use the Site, we (and our service providers) may collect:

-- Device and network data: IP address, browser type, device type, operating system, language, device identifiers

-- Approximate location: inferred from IP address (not precise GPS unless you enable it)

-- Usage and interaction data: pages visited, time on page, clicks, scroll activity, navigation paths, referring and exit pages, timestamps, error logs

-- Form and conversion signals: form starts/submissions, button clicks, link clicks, and similar events

-- Campaign and attribution data: UTM parameters, ad click identifiers, referral source information

-- Cookie and similar technology data: cookies, pixels, tags, local storage, SDKs, and server logs (see Section 8)

-- Session replay / heatmaps (if used): Some tools may record interactions (cursor movement, clicks, scrolling, and form interactions) to improve usability. Where required, we provide choices through cookie controls.

C) Information from third parties

We may receive information from:

-- Service providers that support the Site or our operations (hosting, analytics, forms, scheduling, CRM, email/SMS, security)

-- Advertising and measurement partners (if enabled) for attribution and campaign reporting

-- Social platforms if you interact with our profiles, content, or ads

-- Public sources (limited) such as publicly available business contact information for validation or context

D) Inferences

We may derive inferences from other information (for example, likely service interests based on pages visited). We use inferences to improve the Site, respond more effectively, and improve marketing performance where permitted.

4. Sensitive Information and “Do Not Send” Notice

We do not intend to collect sensitive personal information through the Site.

Please do not submit:

-- Social Security numbers or government IDs

-- Full payment card numbers or bank account details

-- Medical/health information

-- Account credentials (unless explicitly requested for a project and provided through an agreed secure method)

-- Any other regulated or highly sensitive data

If you voluntarily provide sensitive information, you acknowledge you do so at your own discretion. We may delete it, restrict its use, or request a secure alternative method.

5. Account and Portal Information (If Applicable)

If we offer an account, client portal, or gated resources now or in the future, we may collect and process additional information such as authentication events, account settings, and account activity logs. You are responsible for keeping your credentials confidential.

6. How We Use Information

We use information for business and operational purposes, including:

A) Communications and support

Respond to inquiries, questions, and requests

Schedule calls/meetings and coordinate next steps

Provide service communications, updates, and support

B) Providing and improving services

Prepare proposals, scope projects, and onboard clients

Deliver services and maintain client records (where applicable)

Improve our offerings, documentation, workflows, and quality

C) Operating and securing the Site

Maintain performance, functionality, and availability

Debug issues, monitor errors, and perform quality assurance

Detect, prevent, investigate, and remediate fraud, abuse, spam, and security incidents

D) Marketing and business development (where permitted)

Send follow-ups and relevant information about services

Measure and optimize marketing performance and attribution

Personalize content and improve conversion performance (where permitted)

E) Legal, compliance, and protection

Comply with legal obligations and lawful requests

Enforce our Terms of Use and other agreements

Protect our rights, property, and safety, and the rights/safety of others

Maintain records, resolve disputes, and prevent misuse

F) Aggregated and de-identified information

We may create aggregated or de-identified information from personal information and use it for analytics, reporting, business planning, and improving our services. Where permitted by law, de-identified information is not subject to this Privacy Policy.

7. When We Disclose Information

We do not disclose personal information except as described below.

A) Service providers (vendors/processors)

We may disclose information to vendors that help us operate, such as:

-- Hosting, infrastructure, and content delivery

-- Forms, scheduling, CRM, email, and SMS providers

-- Analytics, performance monitoring, debugging, and usability tools

-- Security monitoring, fraud prevention, and spam detection

-- Payment processors (if applicable)

These vendors are permitted to process information only to provide services to us and are typically bound by confidentiality and data protection obligations.

B) Advertising and measurement partners (if enabled)

If we use advertising/measurement tools, we may disclose limited identifiers and event data for analytics, attribution, and campaign optimization. In some jurisdictions, this may be considered “sharing” (and in some cases “sale”) for targeted advertising purposes. We provide controls where required (see Section 8.7).

C) Legal, safety, and enforcement

We may disclose information if we believe it is necessary to:

Comply with law, regulation, subpoena, court order, or lawful requests

Protect rights, safety, and security

Investigate and prevent fraud, abuse, or security incidents

Enforce our Terms, agreements, and policies

D) Business transfers

If we undergo a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our assets, information may be transferred as part of the transaction, subject to reasonable safeguards.

E) With your direction or consent

We may disclose information if you request it, direct us to do so, or consent.

8. Cookie Policy (Embedded)

This section explains how we and our partners use cookies and similar technologies.

8.1 What cookies are

Cookies are small text files placed on your device by websites you visit. They help websites function, remember preferences, measure performance, and (in some cases) support advertising.

We also may use similar technologies, such as pixels/tags, SDKs, local storage, server logs, and server-side event tracking. For simplicity, we refer to all of these as Cookies in this section.

8.2 First-party and third-party cookies

First-party Cookies are set by our Site.

Third-party Cookies are set by service providers or partners (for example, analytics, security, or advertising providers).

8.3 Session vs persistent cookies

Session Cookies expire when you close your browser.

Persistent Cookies remain until they expire or you delete them.

8.4 Cookie categories and purposes

We may use Cookies in the following categories:

CategoryPurposeExamplesStrictly NecessaryCore Site functions and securityfraud prevention, load balancing, form routing, consent managementFunctional / PreferencesRemember settings and improve experienceremembering preferences, saving form progress (if enabled)Performance / AnalyticsUnderstand usage and improve the Sitetraffic metrics, page views, click events, debuggingAdvertising / Targeted Advertising (if enabled)Measure ads and may support retargetingad attribution, frequency control, campaign measurement

8.5 Advertising, “sale/sharing,” and targeted ads

We do not sell personal information for money. However, certain cookie-based advertising and measurement practices may be considered a “sale” or “sharing” of personal information under some privacy laws (even when no money is exchanged).

If advertising Cookies are enabled, you may opt out where required by using cookie controls, recognized opt-out signals, or contacting us (Section 16).

8.6 Cookie Preferences link (recommended and supported by this policy)

If we provide a Cookie Preferences link (typically in the Site footer), you can use it to review and update your cookie choices at any time, including opting out of non-essential Cookies where available.

If a Cookie Preferences link is not available on your version of the Site, you can still manage cookies using the methods in Section 8.7 below.

8.7 Your cookie choices and controls

You can control Cookies in several ways:

-- Cookie Banner / Preference Tool (if implemented): adjust choices where available.

-- Cookie Preferences link (if implemented): open the preference tool to update selections.

-- Browser Controls: block or delete cookies (note: some Site features may not work).

-- Device Controls: limit ad tracking or reset advertising identifiers (mobile settings).

-- Global Privacy Control (GPC): where required by law, we will treat recognized signals like GPC as a request to opt out of certain targeted-advertising uses.

-- Do Not Track (DNT): because there is no consistent industry standard, we may not respond uniformly across all tools and providers.

8.8 Changes to cookies and tools

Our cookie practices may change as we update the Site or our providers. We may update this section from time to time.

9. Marketing Communications and Your Choices

Email

You can opt out of marketing emails at any time by using an unsubscribe link (if included) or contacting us (Section 16). Even if you opt out, we may still send non-marketing messages (responses, administrative notices, and service communications).

SMS and phone calls

If you provide your phone number, we may contact you regarding your inquiry, scheduling, follow-ups, and service communications.

Message and data rates may apply

Reply STOP to opt out of SMS (where supported)

Reply HELP for help (where supported) or contact us

Consent is not a condition of purchase.

We may maintain suppression lists (records of opt-outs) so we can respect your preferences.

10. Data Retention

We retain personal information as long as reasonably necessary to:

-- Respond to inquiries and provide services

-- Maintain business, accounting, and tax records

-- Enforce agreements and resolve disputes

-- Meet legal and compliance obligations

-- Maintain security logs and prevent abuse

Retention depends on the type of information, sensitivity, the context of collection, and applicable requirements. We may retain aggregated or de-identified information longer.

11. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. However, no system is perfectly secure, and we cannot guarantee absolute security.

If we become aware of a security incident involving your personal information, we will take reasonable steps to investigate and mitigate the incident and provide notifications when required by applicable law.

12. International Visitors and Cross-Border Transfers

If you access the Site from outside the United States, your information may be processed and stored in the United States or other locations where we or our service providers operate.

Where required, we use appropriate safeguards for cross-border transfers (which may include contractual protections with service providers).

13. Third-Party Links, Embeds, and Social Features

The Site may include links to third-party websites or embedded tools (maps, video players, scheduling tools, payment tools, social widgets). Third parties may collect information under their own privacy policies, which we do not control.

Review third-party privacy policies before providing information to them.

14. Children’s Privacy

The Site is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

If you believe a child has provided personal information to us, contact us and we will take steps to delete it.

15. Your Rights and Choices (Broad Notice)

Depending on where you live, you may have rights such as:

-- Access (know what we have)

-- Correction

-- Deletion

-- Portability (where applicable)

-- Opt-out of certain processing such as targeted advertising and “sale/sharing” (as defined by applicable law)

-- Restriction/objection (in certain jurisdictions)

-- Withdraw consent (where we rely on consent)

Verification

To protect your privacy, we may verify your identity before fulfilling requests and may request information needed to process your request.

Timing

Where required by law, we will respond within legally required timeframes (commonly within 45 days, with an extension where permitted).

Authorized agents

Where allowed, you may use an authorized agent to submit a request. We may require proof of authorization and identity verification.

Appeals

Where required, you may have the right to appeal a denied request. You can request appeal instructions by contacting us.

We will not unlawfully discriminate against you for exercising privacy rights.

16. Jurisdiction Addenda (If Applicable)

A) U.S. State Privacy Disclosure

We do not sell personal information for money. Some advertising/measurement tools may be considered “sharing” (and in some cases “sale”) under certain laws. Where required, we provide opt-outs via cookie preferences (if implemented), opt-out signals, and contacting us.

B) California Notice

If California law applies, you may have rights to know/access, delete, correct, and opt out of “sale/sharing” as defined by California law. We do not knowingly sell or share personal information of individuals under 16.

C) EEA/UK Notice

If you are in the EEA/UK, you may have rights such as access, correction, deletion, restriction, objection, and portability. Where required, processing is based on consent, contract necessity, legitimate interests, or legal obligations.

D) Canada Notice

If Canadian privacy laws apply, you may have rights to access and correct personal information. We collect and use information for the purposes described above and obtain consent where required.

17. Contact Us and Privacy Requests

For privacy questions, marketing opt-outs, or privacy rights requests:

Central & Walton Studio
Email: [email protected]

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on the Site with a revised effective date. Your continued use of the Site after an update means you accept the updated Privacy Policy.