Privacy Policy

Effective date: 27 July 2026
Last updated: 27 July 2026

1. Who we are

Windshore Media is a boutique content, creative and brand strategy agency. We were established in 2018 and we are based in Torrance, California, United States.

This policy explains what happens to information about you when you visit windshoremedia.com, why we handle it the way we do, and what choices and rights you have. It covers this website only.

windshoremedia.com is a single-page marketing site. There is no online store, no user registration, no visitor accounts, no newsletter signup and no contact form. The only way to reach us from the site is the email link to hello@windshoremedia.com.

2. What information we collect

Information you choose to send us

If you use the email link on the site and write to us, we receive whatever you include in that message — usually your name, your email address and the content of your enquiry. We use it to reply to you and to keep an ordinary business record of the conversation. We do not add you to any mailing list.

Information collected automatically

We use Google Analytics 4 (measurement ID G-WDKPP7VKQH), loaded through Google’s gtag.js script, to understand how the site is used. Google’s enhanced measurement feature is switched on, so Analytics records:

• page views
• scroll depth
• outbound clicks (clicks on links that lead away from the site)
• site search
• form interactions
• video engagement
• file downloads

Because the site has no search box, no forms and no embedded video player of its own, several of those event types have little or nothing to record here — they are simply switched on by default in Google Analytics.

Alongside those events, Analytics collects standard technical information such as your approximate location (country, region, city), device type, browser, operating system, language, screen size, and the referring website or search that brought you here.

Your IP address is processed by Google Analytics in order to estimate that approximate location. Google does not log or store full IP addresses in Google Analytics 4.

Hosting and server logs

Our hosting provider keeps standard server logs for security and diagnostics. These typically contain IP addresses, requested URLs, timestamps, response codes and browser user-agent strings. We do not use server logs for marketing or profiling.

Google Search Console

The site is connected to Google Search Console, which reports on how the site performs in Google Search. It shows us aggregated, anonymous data such as search queries, impressions and clicks. It does not set cookies on your browser and it does not identify individual visitors.

Administrator security logging

The site runs a WordPress security plugin that records failed login attempts and account lockouts. This concerns people attempting to sign in to the site’s administration area. It is not triggered by ordinary visitors reading the site.

What we do not collect

• We sell nothing on this site, so we never collect payment card or billing details.
• We offer no visitor accounts or registration, so there are no visitor usernames or passwords.
• We run no newsletter and no contact form, so we build no subscriber list.
• We do not collect special category data such as health, biometric, racial, religious or political information.
• We do not run advertising, retargeting or social media tracking pixels, and we do not build advertising profiles.

3. Cookies and similar technologies

Cookies are small text files that a website asks your browser to store.

Google Analytics sets two first-party cookies on this site:

• _ga — used to distinguish one visitor from another.
• _ga_<container-id> — used to keep track of the current session.

WordPress also sets cookies, but only for people who log in to the site’s administration area. Ordinary visitors are never issued WordPress cookies.

We use no advertising cookies, no social media cookies and no third-party retargeting cookies. Section 9 explains how to switch analytics off.

4. How we use the information

• To see which parts of the site people read and how far they scroll, so we can improve the content and the layout.
• To understand where our visitors come from — broadly which countries, and which referring sites or searches.
• To keep the site available, secure and working properly.
• To reply to you if you email us.

We do not use this information to make automated decisions about you, and we do not use it to build individual profiles.

5. Legal bases for processing (GDPR)

If you are in the United Kingdom or the European Economic Area, we rely on the following legal bases under the UK GDPR and the EU GDPR:

• Legitimate interests (Article 6(1)(f)) — for keeping the site secure, maintaining server logs, and understanding how the site performs in aggregate. Our interest is in running and improving a small business website. We have weighed that against your privacy and we keep the data to a minimum.
• Consent (Article 6(1)(a)) — where your jurisdiction requires consent for analytics cookies. You can withdraw consent at any time using the methods in section 9, and withdrawing it does not affect anything done beforehand.
• Legitimate interests, or steps taken at your request before entering into a contract — when we read and reply to an email you have sent us.

6. Sharing and third-party processors

Google is the only third-party processor involved in this website, through Google Analytics and Google Search Console.

Inside our Google Analytics account, all four optional Google data-sharing settings are switched off. Your data is therefore not shared with Google for products and services improvement, for benchmarking, for technical support, or with Google account specialists.

We do not sell personal information. We do not share personal information for cross-context behavioural advertising. We do not pass it to data brokers, advertisers or marketing networks.

We may disclose information where we are legally obliged to do so — for example in response to a valid legal request — or where it is genuinely necessary to protect our rights or the security of the site.

Links to other websites

The site links out to our portfolio at portfolio.windshoremedia.com and to image galleries hosted on Adobe Lightroom. Once you follow one of those links you are on a different service, with its own privacy policy and its own cookies. We are not responsible for the practices of sites we link to, and we encourage you to read their policies.

7. How long we keep information

• Google Analytics event data: retained for 14 months, after which Google deletes it automatically. Aggregated reporting totals may remain available for longer.
• Analytics cookies: these expire in your browser on Google’s schedule, and you can delete them yourself at any time.
• Server logs: kept by our hosting provider for a short period for security and diagnostics, then rotated and deleted.
• Security logs: failed-login and lockout records are kept only for as long as they are useful in protecting the site.
• Emails you send us: kept for as long as we need them to deal with your enquiry and for our ordinary business records.

8. Your rights

If you are in the UK or the EEA (GDPR)

• Access — ask us to confirm what personal data we hold about you and to give you a copy.
• Rectification — ask us to correct information that is inaccurate or incomplete.
• Erasure — ask us to delete personal data we hold about you.
• Restriction — ask us to limit how we use your data while a question about it is resolved.
• Portability — ask for data you provided to us in a structured, commonly used, machine-readable format.
• Objection — object to processing we carry out on the basis of legitimate interests, including analytics.

You also have the right to complain to your local data protection authority.

If you are in California (CCPA/CPRA)

• The right to know what personal information we have collected about you, where it came from, why we collected it and who we disclosed it to.
• The right to delete personal information we hold about you.
• The right to correct inaccurate personal information.
• The right to opt out of the sale or sharing of personal information.
• The right not to be discriminated against for exercising any of these rights.

Windshore Media does not sell personal information and does not share personal information for cross-context behavioural advertising — and has not done so in the preceding twelve months. There is therefore nothing to opt out of, but the analytics controls in section 9 are available to you regardless.

Making a request

Email hello@windshoremedia.com and tell us what you would like us to do. Because this site has no visitor accounts, the information we hold is usually limited to analytics data that is not linked to your name, so we may need to ask you for details that help us locate anything relating to you. We aim to respond within 30 days for GDPR requests and within 45 days for CCPA/CPRA requests. You may use an authorised agent, and we may need to verify their authority.

9. How to opt out of analytics

• Google Analytics Opt-out Browser Add-on — install it from tools.google.com/dlpage/gaoptout to stop Google Analytics collecting data from your browser on any website.
• Your browser’s cookie controls — every major browser lets you block or delete cookies, either for all sites or for this one. Blocking or deleting the _ga cookies stops Analytics recognising your browser.
• Global Privacy Control (GPC) — if your browser or a browser extension sends a GPC signal, we treat it as a valid request to opt out of any sale or sharing of your personal information. As set out above, we do not sell or share personal information in any event.

Opting out of analytics does not stop you using the site. Nothing on the site depends on Analytics running.

10. Children’s privacy

This site is a business-to-business marketing site and is not directed at children. We do not knowingly collect personal information from children under 13, or under 16 where local law sets that higher age. If you believe a child has sent us personal information, email hello@windshoremedia.com and we will delete it.

11. International transfers

Windshore Media is based in the United States and this site is hosted in the United States. Google Analytics data is processed on Google’s infrastructure, primarily in the United States. If you visit from outside the United States, information about your visit will be transferred to and processed in the United States, where data protection law may differ from the law where you live.

For transfers of personal data out of the UK and the EEA, Google states that it relies on the European Commission’s Standard Contractual Clauses together with its certification under the EU–US Data Privacy Framework.

12. Changes to this policy

We may update this policy when our practices change or when the law requires it. If we make a change, we will update the “Last updated” date at the top of this page. If a change is significant, we will make that clear on the page. We encourage you to check back from time to time.

13. How to contact us

If you have a question about this policy, or you want to exercise any of the rights described above, please get in touch.

Windshore Media
Torrance, California, United States
Email: hello@windshoremedia.com