Privacy Policy
This privacy policy explains how Autumn Manning, operating through Faana Works LLC ("we," "us," or "our"), collects, uses, shares, and protects your information when you visit autumnmanning.com (the "Site"). We are the data controller for the personal data collected through this Site. We take your privacy seriously. This policy is written to be clear and direct - not buried in legalese. If something here doesn't make sense, reach out to us via email at hello@faanaworks.com.
Information We Collect
Information You Provide Directly
When you submit a form on our Site (such as the contact or subscribe forms on the Connect page), we collect:
- Name
- Email address
- Company name (if provided)
- Message content
Information Collected Automatically
We and our service providers may process IP address information for site delivery, security, analytics, and approximate location. Google Analytics 4 does not log or store individual IP addresses, but may use IP-derived information to provide coarse geographic reporting.
When you visit the Site, our analytics and tracking tools automatically collect:
- IP address (anonymized by default in Google Analytics 4)
- Browser type and version
- Operating system and device type
- Pages viewed, time on page, and navigation path
- Referring URL (how you arrived at the Site)
- Approximate geographic location (derived from IP)
- Screen resolution and viewport size
Information Collected via Cookies and Similar Technologies
We use cookies and tracking pixels set by us and by third-party services. See Section 7: Cookies and Tracking Technologies for a complete breakdown of every cookie, who sets it, what it does, and how long it lasts.- Screen resolution and viewport size
How We Use Your Information
We use the information we collect for the following purposes and legal bases:
Purpose: Respond to your inquiries and form submissions
Legal Basis (GDPR): Performance of a contract / your consent
Purpose: Send updates or information you have requested
Legal Basis (GDPR): Your consent
Purpose: Analyze site traffic and usage patterns to improve the Site
Legal Basis (GDPR): Legitimate interest
Purpose: Maintain site security and prevent abuse
Legal Basis (GDPR): Legitimate interest
Purpose: Comply with legal obligations
Legal Basis (GDPR): Legal obligation
Where we rely on legitimate interest, we have assessed that our interests do not override your fundamental rights and freedoms. You may object to processing based on legitimate interest at any time (see Section 9: Your Rights).
Third-Party Services
We use the following third-party services that may process your data:
Google Analytics 4 and Google Tag Manager
We use Google Analytics 4 (measurement ID: G-4NMY73HCXY) loaded via Google Tag Manager to understand how visitors use the Site. GA4 collects usage data including pages viewed, session duration, traffic sources, and device information. IP addresses are anonymized by default in GA4. Google may process this data on servers in the United States.
Google's privacy policy: https://policies.google.com/privacy
Opt out of Google Analytics: https://tools.google.com/dlpage/gaoptout
HubSpot
We use HubSpot (portal ID: 44627146) for contact form management, visitor tracking, email communications, and customer relationship management. HubSpot's tracking code is loaded on every page and sets cookies that identify returning visitors, track page views, and associate form submissions with browsing history. HubSpot processes data in the United States.
HubSpot's privacy policy: https://legal.hubspot.com/privacy-policy
HubSpot's cookie policy: https://legal.hubspot.com/cookie-policy
Google Fonts
This Site loads fonts (Inter, Lora, Playfair Display) from Google's font service. When your browser requests these fonts, your IP address is transmitted to Google. Google's privacy policy applies to this data.
YouTube
Some pages embed video content via YouTube's privacy-enhanced mode (youtube-nocookie.com). YouTube may set cookies when you play a video. Google's privacy policy applies.
Data Sharing and Disclosure
We do not sell, rent, or trade your personal information.
We share data only in these circumstances:
- Service providers: With Google (analytics) and HubSpot (CRM and communications) as described above, acting as data processors on our behalf
- Legal requirements: If required by law, regulation, legal process, or governmental request
- Protection: To protect our rights, privacy, safety, or property, or that of our users or the public
We do not share your personal data with third parties for their own marketing purposes.
International Data Transfers
Your data may be transferred to and processed in the United States through our use of Google and HubSpot services. If you are located outside the United States (including in the European Economic Area, United Kingdom, or Switzerland), please be aware that data protection laws in the United States may differ from those in your jurisdiction.
Where required, these transfers are made pursuant to Standard Contractual Clauses (SCCs) approved by the European Commission, or other appropriate safeguards recognized under applicable law.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes described in this policy:
- Form submissions and contact data: Retained in HubSpot for as long as there is an active business relationship, or until you request deletion
- Analytics data: Google Analytics retains data for 14 months by default. HubSpot analytics cookies expire as described in the cookie table below
- Email communications: Retained for as long as you remain subscribed. You can unsubscribe at any time
After the retention period, data is deleted or anonymized. If you request deletion, we will process your request within 30 days (see Section 9).
Cookies and Tracking Technologies
Cookies are small text files stored on your device when you visit a website. We use cookies set by us (first-party) and by third-party services. The list below describes the main cookies and similar technologies we currently expect to use on this Site.
STRICTLY NECESSARY COOKIES
These cookies are essential for the Site to function. They do not require consent.
Cookie: __hs_opt_out
Provider: HubSpot
Purpose: Records your cookie consent opt-out preference
Duration: 6 months
Cookie: __hs_do_not_track
Provider: HubSpot
Purpose: Honors your do-not-track preference
Duration: 6 months
Cookie: __hs_cookie_cat_pref
Provider: HubSpot
Purpose: Records your cookie category preferences
Duration: 6 months
ANALYTICS COOKIES
These cookies help us understand how visitors interact with the Site. They collect information about pages visited, time spent, and how you arrived.
Cookie: _ga
Provider: Google Analytics
Purpose: Distinguishes unique visitors by assigning a randomly generated client ID
Duration: 2 years (effectively ~13 months due to browser limits)
Cookie: _ga_<container-id>
Provider: Google Analytics
Purpose: Maintains session state for GA4
Duration: 2 years (effectively ~13 months)
Cookie: _gid
Provider: Google Analytics
Purpose: Identifies users for the current 24-hour period
Duration: 24 hours
Cookie: _gat
Provider: Google Analytics
Purpose: Throttles request rate on high-traffic pages
Duration: 1 minute
Cookie: __hstc
Provider: HubSpot
Purpose: Tracks visitor identity across sessions. Contains domain, unique visitor token, first visit timestamp, last visit timestamp, current visit timestamp, and session count
Duration: 6 months
Cookie: hubspotutk
Provider: HubSpot
Purpose: Tracks visitor identity. Passed to HubSpot on form submission to associate browsing history with contact record
Duration: 6 months
Cookie: __hssc
Provider: HubSpot
Purpose: Tracks the current session: page view count and session start time
Duration: 30 minutes
Cookie: __hssrc
Provider: HubSpot
Purpose: Detects whether the visitor has restarted their browser (new session detection)
Duration: Session (expires when browser closes)
How to Control Cookies
You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking cookies may affect site functionality.
- Google Analytics opt-out: Install the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout
- Browser settings: Most browsers let you view, manage, and delete cookies under Settings > Privacy or Settings > Cookies
- Global Privacy Control (GPC): Where required by applicable law and supported by our consent tools, we honor Global Privacy Control signals as an opt-out request.
Do Not Track
Some browsers send a "Do Not Track" (DNT) signal. There is currently no universal standard for how websites should respond to DNT signals. We honor Global Privacy Control (GPC) signals as a valid opt-out mechanism under the California Consumer Privacy Act.
Your Rights
Depending on your location, you may have some or all of the following rights regarding your personal data:
All Visitors
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request that we delete your personal data
- Opt-out of marketing: Unsubscribe from emails at any time using the link in any email we send
European Economic Area, United Kingdom, and Switzerland (GDPR)
- Restrict processing: Request that we limit how we use your data
- Data portability: Receive your data in a structured, machine-readable format
- Object to processing: Object to processing based on legitimate interest
- Withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing
- Lodge a complaint: File a complaint with your local data protection supervisory authority
California Residents (CCPA/CPRA)
- Right to know: Request what personal information we collect, use, and disclose
- Right to delete: Request deletion of your personal information
- Right to opt-out: We do not sell or share personal information for cross-context behavioral advertising. If this changes, we will provide a "Do Not Sell or Share My Personal Information" link
- Right to non-discrimination: We will not discriminate against you for exercising your privacy rights
How to Exercise Your Rights
Submit your request through our Connect page at autumnmanning.com/connect or email hello@faanaworks.com. We will respond within 30 days (GDPR) or 45 days (CCPA/CPRA). If we need additional time, we will notify you.
Children's Privacy
This Site is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
Security
We implement reasonable technical and organizational security measures to protect your personal information, including encryption in transit (HTTPS/TLS), secure third-party service providers, and access controls. However, no method of electronic transmission or storage is completely secure. If you have reason to believe your interaction with us is no longer secure, please contact us immediately.
Third-Party Links
This Site contains links to third-party platforms including LinkedIn, Instagram, and X (formerly Twitter). When you click these links, you leave our Site and are subject to those platforms' privacy policies and cookie practices. We are not responsible for the privacy practices of third-party sites.
Changes to This Policy
We may update this privacy policy to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
Contact
For questions, concerns, or requests related to this privacy policy or your personal data: Online: autumnmanning.com/connect Email: hello@faanaworks.com Entity: Faana Works LLC, Austin, TX