Privacy Policy

Effective Date: October 29, 2026

MacMillan Design (“MacMillan Design,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect when you visit macmillandesign.com (the “Website”), contact us, or become a client, how we use that information, who we share it with, and the choices you have. It also contains the notices required by the California Consumer Privacy Act (CCPA).

By using the Website you agree to this Privacy Policy. If you do not agree, please do not use the Website.

1. Who We Are

MacMillan Design is a website design, hosting, and search engine optimization company located at 8533 Cumming Highway, Canton, Georgia 30115, United States. We serve businesses in the United States. We do not direct the Website or our services to people in the European Union, the United Kingdom, or other countries outside the United States.

Questions about this policy or your information can be sent to [email protected].

2. Information We Collect

We collect very little personal information through the Website. Most of what we collect comes from you, when you choose to give it to us.

Information you give us

Contact and enquiry forms. When you fill in a form on the Website (for example to request a quote, ask a question, book a call, or sign up for tips), we collect what you type in. This is usually your name, email address, phone number, company name, website address, and your message. The form also records the date and time of the submission and your IP address, which we use to prevent spam and abuse.
Email, phone, and meetings. If you email us, call us, or meet with us, we keep the correspondence and the notes we need to respond and to do the work you ask for.
Client information. If you become a client, we collect the information needed to carry out and bill for the work: your business details, billing contact and address, the content and images for your website, and the logins and access you choose to give us for your website, domain, hosting, and related accounts.
Payment information. Invoices are paid through our invoicing and payment provider. Your card or bank details go directly to that provider. We do not see or store full card numbers.

Information collected automatically

Server and security logs. Like almost every website, our web server and the security and content delivery network in front of it record the IP address, browser type, device type, pages requested, referring page, and date and time of each visit. These logs are used to keep the Website running, fast, and secure, and are kept only for a limited time.
Analytics. We use Google Analytics, loaded through Google Tag Manager, to understand how the Website is used: which pages are visited, how long people stay, roughly where visitors are located (city or region level), what device and browser they use, and which search terms or links brought them here. Google Analytics uses cookies and a random identifier. It does not tell us who you are.
Advertising measurement. We advertise on Google. Google Ads tags on the Website let us measure whether our advertising leads to enquiries, and may be used to show our ads to people who have previously visited the Website (remarketing). See Section 5 for your choices.
Spam and bot protection. Our forms are protected by Cloudflare Turnstile and Google reCAPTCHA, which analyse browser and interaction signals to tell people from automated bots. Form submissions are also screened by automated spam filtering that we run ourselves. Submissions judged to be spam are held and not acted on.

Information we do not collect

We do not ask for or knowingly collect Social Security numbers, government identification numbers, health information, financial account numbers, or precise location data through the Website. Please do not send us this kind of information through a contact form.

3. How We Use Information

We use the information we collect to:

respond to your enquiry, prepare a quote, and follow up with you about it;
provide, bill for, and support the services you buy from us;
send you website, hosting, and marketing tips if you asked to receive them, which you can stop at any time;
operate, secure, maintain, and improve the Website;
understand how visitors use the Website and how our advertising performs;
prevent spam, fraud, and abuse;
keep business records, meet our legal and tax obligations, and enforce our agreements.

We do not sell your personal information, and we do not use it to make automated decisions that have legal or similarly significant effects on you.

4. How We Share Information

We share personal information only in the following ways:

Service providers. We use trusted companies to host the Website, deliver it quickly and securely, send and receive email, store files and backups, send marketing email to people who asked for it, process invoices and payments, and measure visits and advertising. These providers process information on our behalf and under their own privacy and security commitments. The main ones are our web hosting provider, Cloudflare (security and content delivery), Google (Analytics, Tag Manager, Ads, reCAPTCHA, and Maps), our email delivery and email marketing providers, our content delivery network, and our invoicing and payment provider.
Our team. The people who work with us see the information they need to do their jobs and are bound to keep it confidential.
Legal reasons. We may disclose information if required by law, subpoena, or court order, or when we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others, or to investigate fraud or abuse.
Business transfers. If MacMillan Design is ever sold, merged, or reorganised, information may be transferred as part of that transaction. We would require the new owner to honour this policy.
With your consent. In any other case, we share information only when you ask us to or agree to it.

We never share, rent, or sell contact form submissions or client lists to third parties for their own marketing.

5. Cookies, Analytics, and Advertising Choices

The Website uses cookies and similar technologies for security, analytics, and advertising measurement. Our Cookie Policy lists the cookies we use and how long they last.

You can control cookies and tracking in several ways:

Browser settings. Every major browser lets you block or delete cookies. Blocking all cookies may stop some parts of the Website, such as forms protected by bot detection, from working.
Google Analytics. You can stop Google Analytics from recording your visits to any website by installing the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout.
Google Ads and remarketing. You can switch off personalised advertising from Google at adssettings.google.com. You can opt out of interest-based advertising from many companies at optout.aboutads.info.
Marketing email. Every marketing email we send has an unsubscribe link. You can also email [email protected] and ask to be removed.

Google’s use of information collected through its services is described at policies.google.com/technologies/partner-sites.

Do Not Track. There is no common standard for how websites should respond to browser “Do Not Track” or Global Privacy Control signals, and the Website does not currently change its behaviour when it receives them. The choices above work regardless of those signals.

6. How Long We Keep Information

Form submissions and correspondence are kept for as long as they are useful to us for answering your enquiry, serving you as a client, and keeping business records. We review stored submissions at least once a year. You can ask us to delete yours at any time (see Section 8).
Client records are kept for the life of the relationship and for as long afterwards as we need them for accounting, tax, and legal purposes, which is generally seven years.
Server and security logs are kept for a limited time and then deleted or overwritten automatically.
Analytics data is kept by Google for the retention period we set in Google Analytics, after which it is deleted or aggregated.

7. Security

The Website is served only over encrypted connections (HTTPS) and sits behind a security and content delivery network that filters malicious traffic. Access to the Website’s administration area is limited to the people who need it, protected by strong passwords and login protection, and monitored. Backups are encrypted and stored off the web server. We review the security of the Website and our hosting platform regularly.

No method of transmitting or storing information is completely secure, so we cannot guarantee absolute security. If we learn of a breach affecting your personal information, we will notify you as required by law.

8. Your Rights and Choices

Whatever state you live in, you can ask us to:

tell you what personal information we hold about you and how we use it;
correct information that is wrong or out of date;
delete your personal information, including any contact form submissions, unless we need to keep it for a legal, accounting, or security reason;
stop sending you marketing email.

To make a request, email [email protected] from the email address you used with us, or write to us at the address in Section 13. We will confirm your identity by matching the request to the information we hold and may ask a follow-up question if we are unsure. We will respond within 45 days. There is no charge for making a request, and we will never treat you differently for making one.

9. California Privacy Rights (CCPA)

This section applies to California residents and provides the notices required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act. MacMillan Design is a small business and may not meet the thresholds that make a business subject to the CCPA. We provide these notices and honour these rights for every California resident anyway.

Notice at collection

In the last 12 months we have collected the following categories of personal information, for the purposes described in Section 3:

Identifiers such as name, email address, phone number, company name, postal address, and IP address. Source: you, your browser.
Customer records such as billing contact details and the content you provide for your website. Source: you.
Commercial information such as the services you have asked about or bought. Source: you, our records.
Internet and network activity such as pages visited, referring page, browser and device type, and interactions with our advertising. Source: your browser, through cookies and tags.
Approximate geolocation (city or region derived from IP address, never precise location). Source: your browser, through analytics.
Professional information such as your job title or business type when you give it to us. Source: you.

We do not collect sensitive personal information as defined by the CCPA, and we do not collect personal information from people we know to be under 16.

Sale and sharing

We do not sell personal information and have not done so in the last 12 months. Advertising cookies used for Google Ads remarketing may count as “sharing” for cross-context behavioural advertising under the CCPA. You can opt out of that sharing using the Google Ads and browser controls described in Section 5, or by emailing [email protected] with the subject line “Do not share my personal information.” We do not knowingly sell or share the personal information of anyone under 16.

Your California rights

California residents have the right to know what personal information we collect, use, disclose, and share; to delete it; to correct it; to opt out of its sale or sharing; to limit the use of sensitive personal information (we collect none); and not to be discriminated against for exercising these rights. To exercise them, use the methods in Section 8. You may also use an authorised agent, in which case we will ask for proof that you gave the agent permission. We keep records of requests for 24 months.

10. Clients and Their Websites

We design, build, host, maintain, and promote websites for our clients. Those websites belong to our clients, and each client is responsible for its own privacy policy. When we handle information on a client’s website on the client’s instructions, we act as a service provider to that client and use the information only to provide our services.

In the course of that work we also:

monitor the websites we host and maintain for uptime, speed, security, and visitor activity. Visitor activity is measured anonymously and in aggregate. We do not record individual visitors’ IP addresses in those measurements, and the results identify no one;
receive confidential information from clients, such as passwords and access keys, through secure channels we provide. Information shared that way is encrypted in transit, available only to the intended recipient, and destroyed immediately after it has been delivered;
receive feedback and support requests from clients about their websites, which we keep for as long as the project or support plan requires.

If you are a visitor to one of our clients’ websites and have a question about your information, please contact that client directly.

11. Children

The Website is intended for businesses and adults. It is not directed at children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has given us personal information, email [email protected] and we will delete it.

12. Links, Embedded Content, and Reviews

The Website contains links to other websites and may embed content from third parties, such as a Google map or a video. When you interact with embedded content, the third party may collect information about you and set its own cookies under its own privacy policy. The Website also displays reviews that our clients have posted publicly on Google. We are not responsible for the privacy practices of other websites or services.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top shows when it was last changed. If a change materially affects how we use personal information we already hold, we will tell current clients by email. Continued use of the Website after a change means you accept the updated policy.

14. Contact Us

MacMillan Design
8533 Cumming Highway
Canton, Georgia 30115
United States

Email: [email protected]