Privacy Policy

Effective Date: Jan 1, 2025
Last Updated: Jul 9th, 2025

1. Introduction

This Privacy Policy describes how Joshua Chappell LLC, doing business as Lightbox Digital ("Company," "we," "us," or "our"), collects, uses, discloses, and protects information when you visit our website at https://lightbox-digital.com (the "Website") or use our video and photo production services (the "Services").

2. Information We Collect

2.1 Information You Provide Directly

  • Contact Information: Name, email address, phone number, company name, and mailing address when you request quotes, schedule consultations, or contact us

  • Project Information: Details about your video/photo production needs, project specifications, and creative requirements

  • Communication Records: Messages, emails, and other communications between you and our team

  • Payment Information: Billing details, though payment processing is handled by third-party processors who maintain their own privacy policies

2.2 Information Collected Automatically

  • Website Usage Data: IP address, browser type, device information, pages visited, time spent on pages, referring websites

  • Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance user experience and analyze website performance

  • Location Information: General geographic location based on IP address

2.3 Information from Third Parties

  • Analytics Providers: Website traffic and user behavior data from services like Google Analytics

  • Social Media Platforms: Information when you interact with our social media content or share our content

  • Professional Networks: Business contact information from professional databases or referral sources

3. How We Use Your Information

We use collected information for the following purposes:

3.1 Service Delivery

  • Providing video and photo production services

  • Project planning, scheduling, and communication

  • Delivering final products and project materials

  • Customer support and service improvements

3.2 Business Operations

  • Processing payments and managing contracts

  • Marketing our services and communicating about our offerings

  • Analyzing website performance and user experience

  • Compliance with legal obligations and dispute resolution

3.3 Marketing and Communications

  • Sending newsletters, project updates, and promotional materials (with consent)

  • Showcasing completed work (with explicit client permission)

  • Building industry relationships and generating referrals

4. Legal Basis for Processing (GDPR)

For users in the European Union, our legal basis for processing personal data includes:

  • Contract Performance: Processing necessary to fulfill our service agreements

  • Legitimate Interests: Marketing, business development, and website optimization

  • Consent: Marketing communications and non-essential data processing

  • Legal Compliance: Meeting regulatory and legal requirements

5. Information Sharing and Disclosure

5.1 We May Share Information With:

  • Service Providers: Third-party vendors who assist with business operations (cloud storage, payment processing, analytics)

  • Professional Partners: Subcontractors, freelancers, or partner agencies working on client projects

  • Legal Requirements: When required by law, court order, or to protect our legal rights

5.2 We Do Not:

  • Sell personal information to third parties

  • Share client project details without explicit permission

  • Use personal information for purposes other than those disclosed

6. Data Security

We implement appropriate technical and organizational measures to protect personal information:

  • Encryption: Data transmission and storage encryption

  • Access Controls: Limited access to personal information on a need-to-know basis

  • Regular Updates: Security software and system updates

  • Employee Training: Staff education on data protection practices

7. Data Retention

  • Client Information: Retained for the duration of our business relationship plus 7 years for tax and legal purposes

  • Project Materials: Retained as specified in service agreements, typically 2-5 years

  • Website Data: Analytics data retained for 26 months; contact form data for 3 years unless deleted earlier

  • Marketing Data: Until consent is withdrawn or contact becomes inactive

8. Your Rights and Choices

8.1 General Rights

  • Access: Request copies of your personal information

  • Correction: Update or correct inaccurate information

  • Deletion: Request deletion of your personal information (subject to legal requirements)

  • Portability: Receive your data in a machine-readable format

  • Objection: Object to processing for marketing purposes

8.2 Cookie Controls

  • Browser Settings: Configure cookie preferences in your browser

  • Opt-Out Tools: Use available opt-out mechanisms for analytics services

8.3 Marketing Communications

  • Unsubscribe: Use unsubscribe links in emails or contact us directly

  • Preference Management: Update communication preferences at any time

9. International Data Transfers

If you are located outside the United States, please note that we may transfer your information to the U.S. where our servers and business operations are located. We ensure appropriate safeguards are in place for such transfers.

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete it promptly.

11. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

  • Right to Know: Categories and specific pieces of personal information collected

  • Right to Delete: Request deletion of personal information

  • Right to Opt-Out: Opt-out of sale of personal information (we do not sell personal information)

  • Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us using the information below.

12. Third-Party Services

Our website may use third-party services including:

  • Google Analytics: Website traffic analysis (subject to Google's Privacy Policy)

  • Social Media Plugins: Integration with social platforms

  • Payment Processors: Secure payment handling

  • Cloud Storage: Project file storage and backup

Each third-party service operates under its own privacy policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

  • Posting the updated policy on our website

  • Sending email notification to registered users

  • Including notice in our regular communications

Continued use of our services after changes indicates acceptance of the updated policy.

14. Contact Information

Joshua Chappell LLC (Lightbox Digital)

For privacy-related questions, requests, or concerns:

Email: [INSERT EMAIL ADDRESS]
Phone: [INSERT PHONE NUMBER]
Address: [INSERT BUSINESS ADDRESS]

Data Protection Officer (if applicable): [INSERT DPO CONTACT INFO]

For California residents exercising CCPA rights, please include "California Privacy Request" in your subject line.

Response time for privacy requests: Within 30 days of receipt.

Notice for EU Residents: If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection authority.

Last Updated: [INSERT DATE]