Privacy Policy

1. Introduction

Castaneda Networks LLC, a California limited liability company ("we," "our," or "us"), respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website castanedanetworks.com or use our services.

2. Information We Collect

2.1 Information You Provide

• Contact Information: Name, email address, optional phone number, company name. We use phone numbers only to return your inquiry — not for marketing calls or texts.
• Newsletter Subscription: Email address and optional name/company when you subscribe to our weekly newsletter
• Project Information: Details about your project requirements and specifications
• Communication Data: Messages you send through our contact form or email
• Booking Information: Appointment scheduling data through Microsoft Bookings

2.2 Information Automatically Collected

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, time spent on site, referring URLs
• Cookies: Session cookies for site functionality

3. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide customer service
• Send project proposals and quotes
• Schedule and manage consultations
• Send weekly newsletters with tech insights and updates (only if you subscribe)
• Generate personalized newsletter content using AI (Claude API by Anthropic)
• Improve our website and services
• Comply with legal obligations

3.1 Newsletter Communications

If you subscribe to our newsletter:

• You will receive weekly emails with content about cloud computing, AI, web development, and technology trends
• Newsletter content is generated using Claude API by Anthropic - your email address is not shared with Anthropic
• You can unsubscribe at any time by clicking the unsubscribe link in any newsletter email
• We store your subscription preferences and email delivery history

4. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With service providers who assist in our operations (AWS, Microsoft, email services)
• When required by law or to respond to legal process
• To protect our rights, privacy, safety, or property
• With your explicit consent

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• SSL/TLS encryption for data transmission
• Secure storage on AWS infrastructure
• Regular security audits and updates
• Limited access to personal information on a need-to-know basis

6. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Opt-out: Unsubscribe from marketing communications
• Data Portability: Request your data in a machine-readable format

7. Cookie Policy

We use essential cookies to ensure our website functions properly. These cookies do not collect personal information and are necessary for:

• Maintaining session state
• Remembering your preferences
• Ensuring website security

You can disable cookies in your browser settings, but this may affect website functionality.

8. Data Retention

We retain your personal information for different periods depending on the purpose:

• Newsletter Subscribers: Until you unsubscribe, then 30 days for suppression list purposes
• Contact Form Submissions: Up to 2 years for business record purposes
• Newsletter Archive: Indefinitely for business records and content reference
• Project Communications: Duration of project plus 3 years for warranty/legal purposes

You can request deletion of your data at any time by contacting privacy@castanedanetworks.com

9. Third-Party Services

Our website uses the following third-party services:

• AWS (Amazon Web Services) — Hosting, database storage, and transactional email delivery
• Claude API by Anthropic — AI-powered content generation for newsletters. Subscriber email addresses are not shared with Anthropic
• Microsoft Bookings — Appointment scheduling for client consultations
• Google reCAPTCHA — Spam and abuse protection on our contact form. Google may collect hardware and software information (such as device and application data) and send it to Google for analysis. Use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service
• Social media platforms — Linked from our site for sharing and engagement; we do not embed social tracking pixels on our pages

These services have their own privacy policies, and we encourage you to review them.

10. Children's Privacy

Our website and services are not directed to children under the age of 13, and we do not knowingly collect personal information from anyone under 13. This is consistent with the Children's Online Privacy Protection Act ("COPPA"). If you believe a child under 13 has provided us with personal information, please contact privacy@castanedanetworks.com and we will delete the information.

Our services are intended for business use by adults. We do not knowingly market to individuals under 18.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), grants you the following rights:

• Right to Know: Request the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties with whom we share it
• Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions
• Right to Correct: Request correction of inaccurate personal information we maintain about you
• Right to Opt-Out of Sale or Sharing: Direct us not to sell or share your personal information for cross-context behavioral advertising. We do not sell or share your personal information — see our Do Not Sell or Share page
• Right to Limit Use of Sensitive Personal Information: Limit our use of sensitive personal information to that which is necessary to perform the services you requested. We do not use sensitive personal information for purposes that would trigger this right
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights

11.1 Notice at Collection

At or before the point of collection, we disclose the categories of personal information we collect, the purposes for which we use it, whether it is sold or shared (we do not), and how long we retain each category. We collect the following categories of personal information as defined by CCPA/CPRA:

• Identifiers: name, email address, phone number, IP address (used to respond to inquiries, deliver newsletters, and operate the site)
• Commercial information: project requirements, budget range, services of interest (used to prepare proposals)
• Internet or network activity: pages visited, browser type, referring URLs (used to operate and improve the site)
• Professional or employment information: company name, role (used to qualify business inquiries)

Retention periods for each category are described in Section 8 above. We do not collect sensitive personal information as defined by CPRA.

11.2 Sale and Sharing of Personal Information

In the preceding 12 months, we have not sold and have not shared (for cross-context behavioral advertising) any personal information. We do not have actual knowledge of selling or sharing the personal information of consumers under 16 years of age.

11.3 Global Privacy Control (GPC)

We honor opt-out preference signals sent through the Global Privacy Control (GPC). When we detect a GPC signal from your browser, we treat it as a valid request to opt out of the sale or sharing of personal information, even though we do not currently sell or share it.

11.4 How to Exercise Your Rights

You can exercise any of these rights by emailing privacy@castanedanetworks.com or calling (213) 522-9136. We will verify your identity using information already on file and respond within 45 days, as required by law. You may also designate an authorized agent to act on your behalf with written permission.

12. International Data Transfers

Your information may be transferred to and processed in the United States. By using our services, you consent to the transfer of information to countries outside of your country of residence.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" above.