Privacy Policy

Serendipity Creative LLC
Mount Rainier, MD, United States
Effective Date: March 17, 2026

Serendipity Creative LLC (“we,” “us,” or “our”) is committed to protecting the privacy of everyone who visits our website at serendipitycreative.com. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have regarding your information. Please read this policy carefully. By using our website, you agree to the practices described below.

Contents

  1. Information We Collect
  2. How We Use Your Information
  3. Cookies & Tracking Technologies
  4. Third-Party Services
  5. How We Share Your Information
  6. Data Retention
  7. Security
  8. Your Rights & Choices
  9. Do Not Track
  10. Children’s Privacy
  11. External Links
  12. Changes to This Policy
  13. Contact Us

1. Information We Collect

We collect information in two ways: information you give us directly, and information collected automatically when you visit our site.

Information You Provide Directly

Direct contact. Our Contact page does not use a contact form. If you reach out to us directly by email at hello@serendipitycreative.com, we will receive and retain the information you include in that message, which may include your name, email address, organization, phone number, and any other details you choose to share.

Email mailing list (Mailchimp). If you sign up for our mailing list, we collect your name and email address. When you interact with email campaigns we send through Mailchimp, additional information may be collected automatically, including:

  • Device information such as your IP address, operating system, browser ID, and connection details
  • Email interaction data such as open dates and times, links clicked, and browsing activity associated with the email
  • Performance metrics related to email deliverability and engagement

This information is collected via Mailchimp cookies and tracking technologies. For more detail, see Mailchimp’s Cookie Statement.

Information Collected Automatically

When you browse our website, technical and behavioral data is collected automatically through Google Analytics and Cloudflare. This may include your IP address, browser type and version, operating system, referring URLs, pages visited, time and date of your visit, time spent on pages, device type, and general geolocation. This data is used to understand how visitors use our site and to support our internal marketing purposes. See Section 3 for full details on the cookies used to collect this data.


2. How We Use Your Information

We use the information we collect for the following purposes:

  • Responding to inquiries. Information you send us by email is used to respond to your message and explore potential project engagements.
  • Email communications. If you join our mailing list, we use your contact information to send you news, updates, and information about our services. You may unsubscribe at any time via the link included in every email.
  • Site improvement and internal marketing. Analytics data helps us understand which content is most useful to visitors and informs our marketing strategy.
  • Security and performance. Cloudflare cookies and related technologies are used to protect our site from threats, manage traffic, and optimize performance.
  • Legal compliance. We may process or retain information as necessary to comply with applicable law.

We do not use your personal information for automated decision-making or profiling, and we do not sell your information to third parties.


3. Cookies & Tracking Technologies

Our website uses cookies — small text files placed on your device — and similar technologies. We use a cookie consent manager that allows you to accept, reject, or customize your cookie preferences by category. The categories and specific cookies in use are described below.

Essential Cookies

These cookies are necessary for the website to function and cannot be switched off.

Cookie Name Description Duration
Cookie Preferences Stores the user’s cookie consent preferences as set via the cookie consent manager 30 days

Cloudflare Cookies (Performance & Security)

Our site uses Cloudflare for web performance, security, and DDoS protection. Cloudflare sets a number of cookies to perform these functions. For full details, see Cloudflare’s cookie documentation.

Cookie Name Description Duration
cf_ob_info Provides information on the HTTP status code returned by the origin server, the Ray ID of any failed request, and the data center serving traffic Session
cf_clearance Indicates whether a CAPTCHA or JavaScript challenge has been successfully completed Session
__cfseq Tracks the order and timing of requests to validate valid or invalid request sequences via Cloudflare Rules Session
__cf_bm Set by Cloudflare’s Bot Management and Bot Fight Mode to identify and mitigate automated traffic Session
__cflb Used by Cloudflare Load Balancer to route requests to the same origin server and manage failover Session
_cfuvid Set when Rate Limiting Rules are in use; helps the Cloudflare WAF distinguish individual users sharing the same IP address Session
cf_chl_rc_ni, cf_chl_rc_m, cf_chl_rc_i Internal Cloudflare cookies used to identify production issues on clients Session
__cfruid Used by Cloudflare’s content delivery network to identify trusted web traffic Session
cf_use_ob Informs Cloudflare to fetch resources from the Always Online cache; expires after 30 seconds Session (~30 seconds)
__cfwaitingroom Used to track visitors accessing a host and path combination where a Cloudflare Waiting Room is active Session

Google Analytics Cookies (Statistics)

We use Google Analytics to collect anonymized statistics about how visitors use our site. These cookies are only set if you accept the Statistics category via our cookie consent manager. For more information, see Google’s Privacy Policy.

Cookie Name Description Duration
_ga Used to identify unique users across sessions 2 years
_ga_ (GA4) Used to identify users in Google Analytics 4 2 years
_gid Used to identify users for 24 hours after last activity 24 hours
_gat Used to throttle Google Analytics server request rates when using Google Tag Manager 1 minute
_gali Used by Google Analytics to identify which links on a page are being clicked 30 seconds
_gac_ Contains information related to marketing campaigns; shared with Google Ads when accounts are linked 90 days
__utma Used to identify users and sessions (legacy Universal Analytics) 2 years after last activity
__utmb Used to distinguish new sessions and visits (legacy Universal Analytics) 30 minutes after last activity
__utmc Used with legacy Urchin versions of Google Analytics to distinguish new sessions End of browser session
__utmt Used to throttle Google Analytics server request rates (legacy) 10 minutes
__utmv Stores custom data set by the developer via the _setCustomVar method (legacy) 2 years after last activity
__utmx Used to determine whether a user is included in an A/B or multivariate test 18 months
__utmz Contains information about the traffic source or campaign that directed the user to the site (legacy) 6 months after last activity

Managing Your Cookie Preferences

You can manage your cookie preferences at any time using the cookie consent manager on our website (accessible via the “Preferences” button in the cookie banner). You can also control or delete cookies through your browser settings. Please note that disabling certain cookies may affect site functionality. For more information on managing cookies, visit allaboutcookies.org. To opt out of Google Analytics specifically, you may use the Google Analytics Opt-Out Browser Add-on.


4. Third-Party Services

Our website relies on several third-party services, each of which has its own privacy policy. We encourage you to review their policies directly:

Service Purpose Privacy Policy
Cloudflare Website performance, security, DDoS protection, and CDN cloudflare.com/privacypolicy
Google Analytics Website usage statistics and visitor behavior analysis policies.google.com/privacy
Mailchimp (Intuit) Email mailing list management and campaign delivery intuit.com/privacy
LinkedIn Linked social media profile linkedin.com/legal/privacy-policy

5. How We Share Your Information

We do not sell, rent, or loan your personal information to any third party. We may share your information only in the following limited circumstances:

  • Employees and independent contractors. We may share information with employees or contractors who need it to help us provide our services or process information on our behalf. They are required to handle it in accordance with this Privacy Policy.
  • Service providers. We share data with the third-party tools that help us operate our website (listed in Section 4 above), solely for the purposes described in this policy.
  • Legal requirements. We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Organizational transfers. In the unlikely event of a merger, acquisition, or dissolution of Serendipity Creative LLC, user data may be transferred to a successor organization, provided it continues to be used in a manner consistent with this policy.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, or as required by applicable law.

  • Email correspondence is retained for as long as is reasonably necessary to support the business relationship or inquiry, and for administrative and legal record-keeping purposes.
  • Mailing list subscriber data is retained in Mailchimp for as long as you remain subscribed. Upon unsubscribing, Mailchimp may retain your email on a suppression list to prevent future mailings; you may request full deletion by contacting us.
  • Google Analytics data is retained in accordance with the retention settings configured in our Google Analytics account, typically up to 26 months, after which it is automatically deleted.
  • Cloudflare data is retained in accordance with Cloudflare’s own data retention policies, which vary by cookie and data type.

7. Security

We take reasonable technical and organizational measures to protect the personal information we hold against unauthorized access, disclosure, alteration, or destruction. Our website uses HTTPS encryption for data in transit and is protected by Cloudflare’s security infrastructure, including bot management and DDoS protection.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately at the address provided in Section 13.


8. Your Rights & Choices

Depending on where you live, you may have certain rights regarding your personal information, including:

  • Access. The right to request a copy of the personal information we hold about you.
  • Correction. The right to request that we correct inaccurate or incomplete personal information.
  • Deletion. The right to request that we erase personal data we hold about you. This does not include data we are required to keep for administrative, legal, or security purposes.
  • Opt-out of email communications. Every marketing email includes an unsubscribe link. You may also contact us directly to be removed from our mailing list.
  • Cookie preferences. You may update your cookie consent choices at any time via the cookie consent manager on our site.
  • Data portability. In some jurisdictions, you have the right to receive a copy of your data in a structured, machine-readable format.
  • Withdrawal of consent. Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Residents of California are afforded additional rights under the California Consumer Privacy Act (CCPA). Residents of the European Economic Area or the United Kingdom may have rights under the General Data Protection Regulation (GDPR) or UK GDPR, including the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, please contact us using the information in Section 13. We will respond to your request within 30 days.


9. Do Not Track

California law requires us to disclose how we respond to web browser Do Not Track (DNT) signals. We respect DNT signals we receive. If your browser has Do Not Track enabled, we will honor that preference and will not track your browsing activity across our site for behavioral advertising purposes. To learn more about DNT and how to configure your browser settings, visit allaboutdnt.com.


10. Children’s Privacy

Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately and we will take steps to delete that information.


Our website contains links to external websites, including client and partner organization sites and our LinkedIn profile. Once you leave our site, this Privacy Policy no longer applies. We encourage you to review the privacy policies of any external site you visit. We are not responsible for the privacy practices or content of those sites.


12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the effective date at the top of this page. We encourage you to review this page periodically. Your continued use of our website after any changes constitutes your acceptance of the revised policy.


13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Serendipity Creative LLC
Mount Rainier, MD, United States
Email: hello@serendipitycreative.com
Website: serendipitycreative.com/contact

We aim to respond to all privacy-related inquiries within five business days.


See also: Terms of Use | Cookie Policy