Privacy Policy

Lyons Web Solutions LLC (“Lyons Web Solutions”, “we”, “us”, or “our”) operates this website and provides website design, managed WordPress hosting and email, ecommerce operations, and SEO services to our clients.

This policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. Our contact details are at the end.

Scope: the two roles we play

We handle personal information in two different capacities, and it matters which one applies to you.

As a controller. When you visit this website, contact us, request a quote, or hold an account with us as a client, we decide how your information is used. That is what this policy covers.

As a service provider. When we host, build, or operate a website, online store, email, or domain for a client, including one we take over from a previous provider on the client’s behalf, we process personal information belonging to that client’s customers and visitors, on that client’s instructions and for their purposes only. In that situation the client decides how the information is used, the client’s own privacy policy governs it, and our handling of it is governed by our agreement with them rather than by this policy.

If you are a customer of a business whose website or store we host or manage, and you want to exercise privacy rights over your information, please contact that business directly. We will assist them in responding to you.

Information we collect

Information you give us. When you complete a form on this site, email us, call or text us, or send us a message, we collect the information you provide. That typically includes your name, email address, telephone number, business name, and whatever you tell us about your project or your question.

Client account and billing information. If you become a client, we hold the records needed to run the relationship: billing contact and address, the services you subscribe to, invoices, and payment history. Payment card details are entered directly with our payment processor. We do not receive or store full payment card numbers.

Information we receive when you use client services. If we host your site, manage your store, or handle your email or domain, we necessarily have administrative access to that environment, which includes whatever personal information your site holds. See “Scope” above for how we treat it.

Published business contact details. We may collect contact details a business publishes, such as its email address or phone number, to tell it about our services.

Technical information. We collect standard log and analytics data when you visit this site, described below.

How we use information

• To answer your inquiry and prepare a quote or proposal.
• To provide, maintain, secure, and support the services you have engaged us for.
• To bill you and keep accurate financial records.
• To communicate with you about your services, including maintenance, incidents, and renewals.
• To secure and improve this website.
• To contact businesses about services that may help them. You can ask us to stop at any time.
• To comply with our legal and tax obligations.

We do not sell personal information, and we do not use it to build advertising profiles.

Log data

Like most websites, ours records information your browser sends when you visit (“Log Data”). This may include your IP address, browser type and version, the pages you visit, the date and time of your visit, and time spent on those pages. This data is used for security, troubleshooting, and understanding site usage.

Cookies and analytics

Cookies are small data files stored on your device by the sites you visit. You can set your browser to refuse cookies or to alert you when one is sent; some parts of this site may not work correctly if you do.

What this site uses. We use Google Analytics 4, connected through the Google Site Kit plugin, to understand how visitors find and use the site. Analytics sets cookies and collects the technical information described under Log Data. We also use Google Search Console to monitor how the site performs in search results; it sets no cookies on this site.

Spam protection and fonts. Our contact form uses Google reCAPTCHA to block automated submissions. It sets a Google cookie and sends signals about your browser to Google. The fonts on this site are served by Google Fonts, which receives your IP address when they load. Google’s handling of that data is governed by Google’s privacy policy and terms.

What this site does not do. We do not display third-party advertising on this website. We do not use website or analytics data for advertising, remarketing, or cross-context behavioral advertising, and we do not disclose it to anyone for those purposes.

This site sets only essential, spam-protection and analytics cookies, so we do not present a cookie consent banner. If that changes, this policy and the site will change with it.

Service providers

Our principal vendors are listed below. Each has access only to what it needs to perform its function for us, and each is bound by its own contractual and legal obligations:

• Incsub, LLC (WPMU DEV) — website hosting, backups, security, email mailboxes, domain registration, and the client billing portal.
• Stripe, Inc. — payment processing. Payments are handled under Stripe’s own terms and privacy policy.
• Google LLC — our email, calendar and document platform (Google Workspace), website analytics and search performance data, spam protection on our contact form (reCAPTCHA), and web fonts.
• AI assistants — we use AI tools (currently Anthropic’s Claude) to help draft, analyze and manage our work. They may process correspondence and site content on our instructions, under the provider’s terms.

We will update this list as our vendors change.

How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law.

We disclose personal information only:

• to the service providers listed above, so they can perform services for us;
• to our professional advisors, such as our accountant or an attorney, where reasonably necessary;
• where required by law, subpoena, or other valid legal process;
• to protect our rights, property, or safety, or those of our clients or the public; and
• in connection with a merger, acquisition, or sale of the business, in which case we will notify affected clients.

How long we keep information

We keep personal information only as long as we need it for the purpose we collected it.

• Inquiries that do not become engagements are kept for as long as we may need them to follow up or to answer a later question, and are deleted on request.
• Client records are kept for the duration of the relationship, and financial and contractual records for at least seven years afterward, as required for tax and legal purposes.
• Website analytics data is retained according to the retention period configured in Google Analytics.
• Data held on client sites is retained according to our agreement with that client, and is returned or deleted at the end of the engagement. Copies of email or other data that we make only to move them are deleted once the move is complete, unless the client asks us to keep them.

Security

We maintain safeguards appropriate to the information we hold, including encryption in transit (TLS), a web application firewall, malware scanning, access controls and multi-factor authentication on administrative accounts, and off-site backups.

No method of transmission or storage is completely secure. While we use commercially reasonable means to protect personal information, we cannot guarantee absolute security.

Your privacy rights

Privacy rights in the United States vary by state. Rather than apply them selectively, we extend the following rights to every US resident, regardless of where you live:

• Access — to confirm whether we hold personal information about you and obtain a copy.
• Correction — to have inaccurate information corrected.
• Deletion — to have your personal information deleted, subject to records we are legally required to keep.
• Portability — to receive your information in a portable format.
• Opt out — of any sale of personal information, sharing for cross-context behavioral advertising, or profiling with legal effects. As stated above, we do none of these.

How to make a request. Email us at info@lyonswebsolutions.com with “Privacy Request” in the subject line, or write to the postal address below. We may need to verify your identity before we act, and we will only ask for what is reasonably necessary to do so. An authorized agent may submit a request on your behalf with written permission.

Our response. We will respond within 45 days. If we need more time, we will tell you within that period and may take up to 45 additional days.

If we decline. You may appeal by replying to our decision or writing to us with “Privacy Appeal” in the subject line. We will respond to an appeal within 45 days and explain our reasoning. If we deny your appeal, you may contact the Maryland Office of the Attorney General, or the Attorney General of your own state, to submit a complaint.

No discrimination. We will not deny you service, charge you a different price, or provide a lesser quality of service because you exercised any of these rights.

Security incidents

If a security incident compromises your personal information, we will notify you and the relevant authorities as required by Maryland’s Personal Information Protection Act and any other applicable law.

Where we hold personal information on behalf of a client, we will notify that client promptly on discovering an incident affecting their data, and within the time required by law, so that they can meet their own notification obligations.

Email and text messages

Email. We send clients service and account messages relating to work in progress, maintenance, incidents, and billing. Any promotional email we send says it is promotional, includes our postal address, and gives you a simple way to opt out, such as replying “stop”. Unsubscribing from marketing email does not stop essential service messages about work we are performing for you.

Text messages. We respond to clients by text because it is faster, using the number you gave us for that purpose. These are service messages about your account and your site. Message and data rates may apply. You can opt out at any time by replying STOP, or by telling us in any other reasonable way. We do not send promotional text messages without your prior express written consent.

Links to other sites

This site may link to sites we do not operate. If you follow a link to a third-party site, that site’s own privacy policy governs your information there. We have no control over, and accept no responsibility for, the content or privacy practices of third-party sites.

Children’s privacy

This website and our services are directed to businesses, not to children. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it promptly. If we become aware that we have collected personal information from a child under 13, we will delete it.

Compliance with laws

We will disclose personal information where required to do so by law, subpoena, or other valid legal process.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page.

If we make a material change that affects how we handle client information, we will give our clients notice by email at least 30 days before it takes effect, where practicable.

Contact us

Questions, privacy requests, and appeals can be directed to:

Lyons Web Solutions LLC
13362 Clarksville Pike
Highland, MD 20777

Email: info@lyonswebsolutions.com
Telephone: (443) 772-6592

You can also reach us through our contact page.