Chapman Digital LLC
Effective Date: September 11, 2026

This Privacy Policy describes how Chapman Digital LLC (“Chapman Digital,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit or use chapmandigital.co and related pages that link to this Policy (the “Website”).

We designed this Policy to match how the Website actually works today: a marketing and company site with contact and careers forms, live chat, optional scheduling and map embeds, and Cloudflare-hosted infrastructure. If you do not agree with this Policy, please do not use the Website or submit information to us.

1. Who We Are (Controller)

Chapman Digital LLC
500 Grossman Dr # 1198
Braintree, MA 02184-4967
United States

Privacy contact: privacy@chapmandigital.co
General support: support@chapmandigital.co
Phone: +1 781-412-5683

For career application questions, you may also contact careers@chapmandigital.co.

2. Scope

This Policy covers personal information processed in connection with:

  • browsing the Website;
  • submitting the contact form;
  • submitting a career application;
  • emailing published Chapman Digital addresses on chapmandigital.co or the connected haxer.net domain;
  • using the Chatwoot live-chat widget on the Website;
  • booking a consultation through our Cal.com scheduling embed (where shown);
  • viewing our Google Maps office embed (where shown); and
  • interacting with Cloudflare Turnstile bot protection on forms.

It does not cover client project environments, customer systems we manage under a separate contract, or third-party websites we merely link to (for example LinkedIn). Those are governed by their own terms and privacy notices, or by a separate agreement with you.

3. Information We Collect

3.1 Information you provide

Contact form (/contact and related contact UI) may collect:

  • full name;
  • email address;
  • phone number (optional);
  • company name (optional);
  • service interest; and
  • message content.

Career application form (/careers) may collect:

  • full name;
  • email address;
  • phone number (optional);
  • role of interest (optional);
  • additional notes (optional);
  • resume file (required; PDF, DOC, or DOCX, max 5 MB); and
  • cover letter file (optional; same file limits).

Direct communications. If you email or call us, we collect the information you choose to share in that conversation. Inbound email is delivered according to each domain’s MX records:

  • @chapmandigital.co addresses (including privacy, support, recruiting, and other published contacts) are received through Google Workspace.
  • @haxer.net addresses on our connected Microsoft domain are received through Microsoft 365.

Scheduling. If you book time through the Cal.com embed on contact or service pages, Cal.com collects the details you enter in that booking flow (typically name, email, and meeting details). See Section 6.

Live chat (Chatwoot). The Website includes a Chatwoot live-chat widget that may appear sitewide. If you open or use the chat, we (and Chatwoot, acting as our processor) may collect:

  • information you enter in the chat or any pre-chat form (which may include name, email address, and phone number, depending on inbox settings);
  • the content of your chat messages and any files or links you send in the conversation;
  • conversation metadata (such as timestamps, the page URL where the chat was started, and conversation identifiers); and
  • technical information associated with the chat session (such as IP address and browser/device information) that Chatwoot uses to operate and secure the widget.

You can choose not to use live chat and contact us instead through the contact form, email, or phone. Please do not send sensitive personal information in chat unless we expressly ask for it.

We do not currently operate an e-commerce checkout, paid account portal for Website visitors, promotions engine, survey platform, or working newsletter subscription backend. A newsletter-style UI may appear on some pages for design/content purposes, but as of the Effective Date those submissions are not sent to or stored by our servers.

3.2 Information collected automatically

When you use the Website or submit a form, we and our processors may collect:

  • IP address (used for security, bot checks, and rate limiting);
  • a one-way hashed submission fingerprint derived from your IP (stored with form abuse-prevention controls; we do not store raw IP addresses in our application database for contact/career submissions);
  • browser user agent (for career applications);
  • approximate request metadata provided by our hosting/CDN provider (Cloudflare), such as country or network signals used for security and performance;
  • pages requested, timestamps, and standard server/CDN logs;
  • when the Chatwoot widget loads or is used, request and device metadata processed by Chatwoot to deliver the chat service (see Sections 3.1 and 6); and
  • Turnstile challenge tokens used to verify that a submission is human.

3.3 Cookies and similar technologies

The Website is primarily a static site. We do not run Google Analytics or advertising pixels in our first-party codebase as of the Effective Date.

Certain features may still set or rely on cookies or similar technologies, including:

  • Cloudflare security, performance, and Turnstile (bot protection) technologies;
  • Chatwoot (when the live-chat widget loads), including a cw_conversation cookie used to keep a chat session available as you browse or return to the Website;
  • Cal.com (when you load or use the scheduling embed); and
  • Google Maps (when you load the map embed).

For more detail, see our Cookie Policy.

3.4 Sensitive information

Please do not include sensitive personal information (such as Social Security numbers, government ID numbers, health data, or financial account numbers) in contact messages, resumes, or notes unless we expressly ask for it and explain why. Career materials you upload may incidentally contain information you choose to include; we use those materials only for recruitment purposes described below.

4. How We Use Personal Information

We use personal information to:

  • respond to inquiries and provide requested information or consultations;
  • respond to live-chat conversations and related support or sales inquiries;
  • evaluate candidates and administer recruiting;
  • operate, secure, and maintain the Website (including bot prevention, rate limiting, fraud/abuse prevention, debugging, and uptime);
  • send transactional or administrative messages related to a request you made;
  • keep internal records needed for business operations and compliance;
  • enforce our terms, protect our rights and users, and respond to legal requests; and
  • improve Website content and service quality using aggregated or operational insights.

We do not sell personal information, and we do not rent personal information. We do not use Website form or live-chat data for third-party advertising.

If you are in a jurisdiction that requires a legal basis for processing (such as the EEA/UK), we typically rely on:

  • Contract / pre-contract steps: responding to service inquiries you initiate, or evaluating job applications you submit;
  • Legitimate interests: securing the Website, preventing abuse, maintaining business records, and improving our services, balanced against your rights;
  • Consent: where required for optional embeds or communications, or where you clearly opt in; and
  • Legal obligation: where we must retain or disclose information to comply with law.

6. How We Share Information (Processors and Recipients)

We share personal information only as needed to operate the Website and our business:

Recipient / tool Role
Cloudflare Hosting, form APIs, career application storage, rate-limit storage, bot protection, and (for authorized staff) admin access controls
SMTP2GO Transactional email delivery for contact and careers notification messages sent by our Website systems
Google Workspace Mailbox hosting and inbound email for @chapmandigital.co (MX records for the chapmandigital.co domain). Messages you send to our published addresses on this domain, and copies of Website notification mail delivered to those inboxes, are processed by Google
Microsoft 365 Mailbox hosting and inbound email for @haxer.net (MX records for the haxer.net domain). Messages you send to Chapman Digital addresses on that connected domain are processed by Microsoft
Chatwoot Live-chat widget hosting and conversation processing through Chatwoot Cloud. Message content, contact details you provide in chat, and related technical metadata are processed by Chatwoot so our team can view and reply. See Chatwoot’s Privacy Policy
Cal.com Scheduling embed and booking processing when you use that feature
Google Maps Maps embed for our meeting office location; Turnstile/security may also involve Cloudflare’s challenge infrastructure
Internal personnel Authorized Chapman Digital team members who need the information to respond, recruit, or administer systems
Professional advisers / authorities Only when reasonably necessary for legal, security, or compliance purposes

Career applications are reviewed in a staff admin workflow protected by Cloudflare Access. Application files are stored in private Cloudflare R2 object storage, and application metadata is stored in Cloudflare D1. Notification emails about new submissions are sent to our careers/contact notification addresses (currently configured to our internal recruiting/operations email on @chapmandigital.co), which are then received in Google Workspace.

If Cloudflare storage bindings are unavailable in an environment, application files may be attached to the notification email instead so the submission can still be reviewed. In production, the intended design is private R2/D1 storage plus email notice.

Live-chat conversations are stored in our Chatwoot Cloud account and are accessible to authorized Chapman Digital personnel through the Chatwoot dashboard. Chatwoot hosts the service in the United States and may use subprocessors as described in its notices. We use chat content to respond to you and maintain ordinary customer-service and sales records. We do not use Website chat transcripts for third-party advertising.

We may also disclose information if required by law, legal process, or to protect the rights, safety, or property of Chapman Digital, our users, or others.

7. Retention

We keep personal information only as long as needed for the purposes above, then delete or de-identify it when practicable.

  • Career applications: metadata and files are retained for up to 365 days (twelve months) by default, then automatically deleted by our retention job, unless a longer period is required for an active recruiting process, dispute, security investigation, or legal obligation. Audit events related to retention/admin actions may be kept for security and compliance.
  • Contact form messages: retained in email/notification systems and related operational records as long as needed to respond and maintain ordinary business records.
  • Live-chat conversations (Chatwoot): retained in our Chatwoot account for as long as needed to handle the inquiry and maintain ordinary support or sales records, then deleted or de-identified when practicable, unless a longer period is required for a dispute, security investigation, or legal obligation.
  • Rate-limit records: short-lived hashed counters (on the order of one hour) used to prevent form abuse.
  • Server/CDN/security logs: retained according to our providers’ and our operational security practices.

You may request earlier deletion where applicable (see Section 9).

8. Security

We implement technical and organizational measures appropriate to the nature of the data, including:

  • HTTPS/TLS in transit;
  • private object storage for application files;
  • access-controlled admin routes (Cloudflare Access) for application review;
  • bot protection (Cloudflare Turnstile) on public forms;
  • IP hashing for submission fingerprints / rate limiting;
  • file-type and size validation for uploads; and
  • least-privilege access for staff tools.

No internet transmission or storage system is perfectly secure. If you believe your interaction with us has been compromised, contact privacy@chapmandigital.co.

9. Your Rights and Choices

Depending on where you live, you may have rights to:

  • access the personal information we hold about you;
  • correct inaccurate information;
  • delete information;
  • object to or restrict certain processing;
  • receive a portable copy of information you provided; and/or
  • appeal or lodge a complaint with a supervisory authority.

U.S. state privacy rights (including CCPA/CPRA where applicable): You may request to know, access, correct, or delete personal information, and to opt out of “sale” or “sharing” for cross-context behavioral advertising. We do not sell personal information and do not share it for cross-context behavioral advertising as those terms are commonly defined. We also do not use or disclose sensitive personal information for purposes that require a right to limit under CPRA, beyond what is necessary to provide the services you request.

To exercise rights, email privacy@chapmandigital.co with enough detail for us to verify and fulfill your request. We may need to confirm your identity before acting.

You can also:

  • decline to submit forms or book meetings;
  • decline to open or use the live-chat widget and contact us through the contact form, email, or phone instead;
  • use browser controls to block third-party embeds/cookies (some features may stop working); and
  • contact us to update or withdraw a job application.

10. International Transfers

Chapman Digital is based in the United States. If you access the Website from outside the U.S., your information may be processed in the United States and other countries where our processors operate (including Cloudflare, SMTP2GO, Chatwoot, Google Workspace for @chapmandigital.co mail, and Microsoft 365 for @haxer.net mail). Those countries may have different data-protection laws than your home jurisdiction. Where required, we rely on appropriate transfer mechanisms and contractual protections with processors.

11. Children’s Privacy

The Website is directed to business professionals and is not intended for individuals under 18. We do not knowingly collect personal information from children under 18. If you believe a minor has provided information to us, contact us and we will take appropriate steps to delete it.

The Website may link to or embed third-party services (including Chatwoot, Cal.com, Google Maps, and LinkedIn). Those services have their own privacy practices. We encourage you to review them before interacting. Loading an embed or the live-chat widget may cause the third party to receive your IP address and device/browser information.

13. Do Not Track

Some browsers offer a “Do Not Track” signal. There is no consistent industry standard for responding to DNT. Our Website does not alter its behavior solely because a DNT signal is present. You can still use the choices in Section 9 and our Cookie Policy.

14. Changes to This Policy

We may update this Privacy Policy to reflect product, legal, or operational changes. We will post the revised Policy on this page and update the Effective Date. Material changes may also be highlighted on the Website or communicated when appropriate. Continued use of the Website after an update means you acknowledge the revised Policy.

15. Contact Us

Questions about this Privacy Policy or our data practices:

Email: privacy@chapmandigital.co
Mail: Chapman Digital LLC, 500 Grossman Dr # 1198, Braintree, MA 02184-4967, United States

Related notices: Cookie Policy · Terms · Disclaimer