Privacy Policy
How Curiosity Boost, a Sacramento, California digital agency, collects, uses, shares, and protects your personal information — and the rights you have over it.
Last updated: July 2, 2026
The short version
We only collect the information we actually need — mostly what you type into our contact form — and we use it to reply to you and run our business. We don't sell your data, and we never share it for advertising. If you live in California, you have extra rights to see, correct, or delete your information; just email privacy@curiosityboost.com. The full details are below.
1. Introduction
Welcome to Curiosity Boost ("Company," "we," "us," or "our"), a digital agency based in Sacramento, California. We respect your privacy and are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website curiosityboost.com (the "Website"), request a quote, or engage our services.
This policy applies to information we collect through the Website, in email and other electronic communications, and in the course of providing services to our clients. It does not apply to information collected by any third party, including through any application or content that may link to or be accessible from the Website.
Please read this Privacy Policy carefully. By accessing or using the Website, you acknowledge that you have read and understood this policy. If you do not agree with our practices, please do not use the Website.
2. Information We Collect
2.1 Personal Information You Provide
We collect personal information that you voluntarily provide to us when you:
- Fill out contact forms or request a quote
- Subscribe to a newsletter or marketing list
- Engage our services or enter into a services agreement
- Participate in surveys, promotions, or events
- Contact us by email, phone, or other channels for support
This information may include:
- Name and contact details (email address, phone number, mailing address)
- Company name and job title
- Billing and payment information (processed securely by third-party payment processors — we do not store full card numbers)
- Project requirements, business goals, and other information you share with us
- The content of communications and correspondence with us
2.2 Information Collected Automatically
When you visit our Website, we may automatically collect:
- Device information (browser type, operating system, device type)
- IP address and approximate geographic location
- Pages visited, time spent on pages, and referring URLs
- Interaction data such as clicks and scroll behavior
- Log and diagnostic data generated by our hosting infrastructure
2.3 Categories of Personal Information (CCPA)
Over the preceding 12 months, we may have collected the following categories of personal information, as defined by the California Consumer Privacy Act:
- Identifiers: name, email address, phone number, postal address, IP address.
- Customer records: billing and contact information provided under a services agreement.
- Commercial information: records of services purchased or considered.
- Internet or network activity: browsing and interaction data on the Website.
- Geolocation data: approximate location derived from IP address.
- Professional information: company name and job title.
- Inferences: limited inferences drawn to respond to inquiries and improve the Website.
We do not intentionally collect sensitive personal information (such as government identifiers, precise geolocation, or biometric data) through the Website.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain our Website and services
- Respond to your inquiries, quote requests, comments, and support requests
- Process transactions and send related administrative information
- Send marketing and promotional communications where permitted or with consent
- Analyze usage patterns to improve our Website and services
- Detect, prevent, and address security incidents, fraud, and abuse
- Comply with legal obligations and enforce our agreements
4. Legal Bases for Processing
Where applicable law requires a legal basis for processing your personal information, we rely on one or more of the following: (a) your consent; (b) the performance of a contract with you; (c) our legitimate interests in operating and improving our business, provided those interests are not overridden by your rights; and (d) compliance with a legal obligation. You may withdraw consent at any time where consent is the basis for processing.
7. Third-Party Processors
To operate our Website and services, we rely on a small number of reputable third-party processors, which may include:
- Hosting & infrastructure providers that store and serve the Website.
- Email delivery providers used to send transactional and, where applicable, marketing messages.
- Payment processors that handle billing for clients (we do not store full payment-card details).
- Google reCAPTCHA for spam and abuse prevention on our forms (see Section 12).
Each processor is bound by contractual obligations to safeguard your information and to process it only on our instructions.
8. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. As a general guide:
- Contact and quote inquiries: retained for up to 24 months after your last interaction, then deleted or anonymized.
- Client and billing records: retained for the duration of the engagement and for up to 7 years afterward to meet tax, accounting, and legal requirements.
- Marketing preferences: retained until you unsubscribe or request deletion.
- Server and security logs: retained for a short rolling period for security and diagnostics.
When information is no longer needed, we securely delete or anonymize it.
9. Data Security
We implement appropriate technical and organizational measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using HTTPS/TLS
- Access controls limiting who can view personal information
- Rate limiting and bot-mitigation on our forms
- Regular review of our security practices and dependencies
However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your information, we cannot guarantee its absolute security.
10. Your Privacy Rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request deletion of your information
- Object to or restrict certain processing
- Request data portability
- Withdraw consent at any time (where processing is based on consent)
- Lodge a complaint with a supervisory or data-protection authority
To exercise any of these rights, please contact us using the details in Section 17. We will respond within the timeframe required by applicable law.
11. California Privacy Rights (CCPA/CPRA)
As a California-based business, we take our obligations under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), seriously. If you are a California resident, you have the right to:
- Know what categories of personal information we collect, the sources and purposes of collection, and the categories of third parties with whom we share it;
- Access a copy of the specific pieces of personal information we hold about you;
- Correct inaccurate personal information we maintain;
- Delete personal information we have collected, subject to legal exceptions;
- Opt out of the "sale" or "sharing" (cross-context behavioral advertising) of personal information;
- Limit the use and disclosure of sensitive personal information; and
- Non-discrimination — you will not receive discriminatory treatment for exercising any of these rights.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. Because we do not sell or share personal information, we do not offer a "Do Not Sell or Share My Personal Information" mechanism; there is nothing to opt out of.
11.1 How to Submit a Request
You may submit a request to know, access, correct, or delete by emailing privacy@curiosityboost.com or calling 916-822-9882. We will acknowledge your request and aim to respond within 45 days, with the ability to extend by an additional 45 days where reasonably necessary, in which case we will notify you.
11.2 Verification & Authorized Agents
To protect your information, we will take reasonable steps to verify your identity before fulfilling a request, which may involve matching information you provide against information we already hold. You may use an authorized agent to submit a request on your behalf; we may require the agent to provide proof of authorization and may still verify your identity directly.
11.3 "Shine the Light"
California's "Shine the Light" law permits California residents to request information about disclosures of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing.
12. Security & Anti-Spam Processing (Google reCAPTCHA)
Our contact and quote forms are protected by Google reCAPTCHA v3, which analyzes device and usage signals to distinguish humans from automated abuse. This processing is carried out by Google and is subject to Google's Privacy Policy and Terms of Service. We use reCAPTCHA solely for security and fraud prevention.
13. Do Not Track
Some browsers offer a "Do Not Track" (DNT) signal. Because there is no consistent industry standard for how to respond to DNT signals, our Website does not currently respond to them. As noted above, we do not track you across third-party websites or engage in cross-context behavioral advertising.
14. Children's Privacy
Our Website is intended for a general business audience and is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will promptly delete it. If you believe a child has provided us with personal information, please contact us.
15. International Data Transfers
We are based in the United States, and any information you provide will be processed in the United States. If you access the Website from outside the United States, you understand that your information may be transferred to and processed in a country whose data-protection laws may differ from those of your jurisdiction. Where required, we take steps to ensure appropriate safeguards are in place for such transfers.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where appropriate, provide additional notice. We encourage you to review this policy periodically.
17. Contact Us
If you have questions about this Privacy Policy or our privacy practices, or wish to exercise your rights, please contact us at:
Curiosity Boost
3104 O St
Sacramento, CA 95816
United States
Email: privacy@curiosityboost.com
Phone: 916-822-9882