Unmelted, LLC ("Unmelted," "we," "us," or "our") is committed to respecting your privacy and protecting the personal information entrusted to us. This Privacy Policy explains what information we collect, how we use and protect it, when we may share it with others, how long we retain it, and the rights and choices available to you.

Unmelted is a technology company based in Bonney Lake, Washington, United States. We specialize in custom software development, website design and development, web hosting, domain management, technical consulting, and related services. We also develop, own, and operate various websites, software applications, and online businesses.

This Privacy Policy applies to our corporate website at www.unmelted.com, associated customer portals, billing systems, and information collected through our direct business relationships.

Other websites, applications, and products owned or operated by Unmelted may have their own privacy policies that govern their respective services.

We strive to maintain privacy practices consistent with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and other applicable privacy regulations.

1. Definitions

The following terms are used throughout this Privacy Policy:

• Personal Data: Any information relating to an identified or identifiable individual, including information that can reasonably be used to identify someone directly or indirectly.
• Customer or Client: An individual, business, or organization that purchases or receives products or services from Unmelted.
• Services: The website development, software development, hosting, domain management, technical consulting, maintenance, and other services we provide.
• Data Controller: An individual or organization that determines the purposes and means of processing Personal Data.
• Data Processor: An individual or organization that processes Personal Data on behalf of a Data Controller.
• Service Provider: An independent company or individual that processes information or performs services on our behalf.
• Usage Data: Information collected automatically when visitors access or interact with our websites, applications, or services.
• Cookies: Small data files stored on your device to support website functionality, maintain sessions, remember preferences, or perform other functions.

2. Information We Collect

The information we collect depends on how you interact with our website and services. Some information is provided voluntarily, while other information may be necessary to fulfill contractual, technical, financial, or legal obligations.

Personal and Contact Information

When you contact us, request a quote, establish a business relationship, or purchase services, we may collect:

• First and last name
• Company or organization name
• Email address
• Telephone number
• Billing or mailing address
• Website addresses and domain names
• Business-related contact information
• Information voluntarily included in correspondence or service requests

Customer Account Information

Customers who create or maintain an account through our website or billing portal may provide or generate additional information, including:

• Account identifiers and authentication credentials
• Account creation and modification dates
• Account preferences and settings
• Login history and authentication activity
• IP addresses associated with account access
• Active and historical subscriptions
• Services associated with their account
• Records of accepted agreements and policies

Authentication credentials are managed using appropriate security measures. Passwords maintained by our authentication systems are stored using cryptographic hashing rather than in readable form.

Billing and Financial Information

When purchasing products or services, paying invoices, or maintaining recurring subscriptions, we may collect:

• Billing name, company, and address
• Invoice and transaction identifiers
• Products and services purchased
• Payment dates and amounts
• Payment status and transaction history
• Subscription details and renewal dates
• Applicable taxes
• Payment method and processor references
• Limited payment method metadata, such as card brand, expiration date, and last four digits, when provided by a payment processor

We may accept payments through Stripe, PayPal, Venmo, Zelle, checks, bank transfers, or other payment methods made available to our customers.

Payment information is handled according to the requirements of the applicable payment method.

Unmelted does not store complete credit card numbers or card verification codes in its own billing database.

For card payments processed through Stripe or another supported payment provider, payment details are securely handled by that provider. We may store payment tokens, payment method identifiers, transaction references, and limited card metadata to support billing, refunds, subscriptions, and other authorized transactions.

Customers may authorize Unmelted to retain a payment method with our payment processor for recurring subscriptions, future invoices, or charges for completed work. In these circumstances, subsequent authorized payments can be processed using the saved payment method without Unmelted obtaining or storing the complete card number.

When accepting payments through PayPal, Venmo, Zelle, or other financial services, the applicable provider or participating financial institution may independently collect and process financial information under its own privacy policy.

Payments made by check may involve the collection or processing of information appearing on the check, including the payer's name and banking information, as necessary to receive and document the payment.

We retain appropriate financial and accounting records to administer services, reconcile transactions, prevent fraud, resolve disputes, and comply with applicable legal obligations.

Project and Service Information

As part of providing web development, hosting, software development, and technical services, we may receive or access:

• Website files and source code
• Database structures and contents
• Hosting and server configurations
• Domain and DNS information
• Technical documentation
• Project requirements and specifications
• Administrative credentials and access tokens
• Support communications and attachments
• Application and server logs
• Backups and restoration files
• Other information necessary to perform contracted services

Some of this information may contain Personal Data belonging to our customers, their employees, their users, or visitors to their websites.

We access and process this information only as reasonably necessary to provide authorized services, fulfill contractual obligations, maintain systems, investigate technical issues, or comply with applicable legal requirements.

Usage and Technical Information

When you visit our website or access our services, our systems may automatically collect:

• IP address
• Browser type and version
• Operating system and device characteristics
• Pages and resources requested
• Referring website or URL
• Date and time of access
• Session identifiers
• Approximate geographic location derived from an IP address
• Application errors and diagnostic information
• Other technical information related to website activity

This information helps us operate our infrastructure, analyze performance, identify problems, improve our services, and protect against unauthorized access, fraud, and abuse.

Communication Records

When you communicate with us through email, contact forms, support requests, telephone, or other channels, we may maintain records of those communications.

These records may contain contact details, message contents, attachments, timestamps, and information necessary to understand and respond to your inquiry.

3. How We Collect Information

We collect information through several methods:

• Directly from you: When you contact us, establish an account, request services, pay invoices, or provide information during a project.
• Automatically through our systems: When you visit our website, authenticate into customer portals, or interact with our services.
• From payment and service providers: When third-party providers send transaction confirmations, subscription updates, or other information necessary to administer our services.
• From our customers: When customers provide information or authorize access to their websites, applications, databases, or infrastructure.
• From publicly available sources: When reasonably necessary to verify business information, respond to inquiries, or provide requested services.

We seek to limit collection to information reasonably necessary for legitimate business purposes.

4. How We Use Information

We may use Personal Data and related information for the following purposes:

1. Providing Services: To develop, host, maintain, support, and manage websites, applications, and other services requested by our customers.
2. Account Management: To establish customer accounts, authenticate users, manage subscriptions, and maintain accurate account records.
3. Billing and Payments: To issue invoices, process payments, charge authorized saved payment methods, administer recurring subscriptions, and maintain accounting records.
4. Customer Support: To respond to requests, troubleshoot technical problems, and assist customers with their services.
5. Service Communications: To send invoices, receipts, renewal reminders, maintenance announcements, service notifications, and important security updates.
6. Business Development: To respond to prospective customers, prepare proposals, provide estimates, and discuss potential projects or services.
7. Website Improvement: To analyze website performance, understand visitor activity, and improve our website and services.
8. Security and Fraud Prevention: To identify suspicious activity, investigate abuse, protect our infrastructure, and prevent unauthorized access or fraudulent transactions.
9. Legal Compliance: To comply with applicable laws, enforce agreements, maintain required records, and resolve disputes.
10. Marketing and Communications: To provide information about our services, products, projects, and other business developments when permitted by law and consistent with your communication preferences.

We do not use customer-hosted website information for unrelated marketing purposes.

5. Our Role as a Data Controller and Data Processor

Depending on the circumstances, Unmelted may act as either a Data Controller or a Data Processor.

When We Act as a Data Controller

Unmelted acts as a Data Controller when we determine how and why Personal Data is collected and processed for our own business operations.

Examples include:

• Operating our corporate website
• Managing customer accounts
• Processing invoices and payments
• Maintaining subscription and billing records
• Responding to business inquiries
• Providing customer support
• Monitoring the security of our infrastructure
• Managing our own marketing and communications

In these circumstances, we are responsible for determining the purposes of processing and implementing appropriate privacy practices.

When We Act as a Data Processor

Unmelted may act as a Data Processor when providing services that involve processing Personal Data on behalf of our customers.

Examples include:

• Hosting websites and applications containing customer or visitor information
• Maintaining databases belonging to customers
• Performing website migrations and backups
• Troubleshooting applications that process Personal Data
• Providing authorized access, maintenance, or technical support
• Managing infrastructure that stores or transmits customer information

In these situations, our customer generally determines the purposes for which the information is collected and used.

We process such information on behalf of the customer in accordance with applicable agreements, documented instructions where required, and relevant legal obligations.

When required by applicable law, we will address data processing responsibilities through appropriate contractual terms or a Data Processing Agreement (DPA), including provisions concerning confidentiality, security, subprocessors, assistance with privacy requests, and the return or deletion of information.

Customer Responsibilities

Customers operating websites or applications through our services remain responsible for determining their own privacy practices and complying with laws applicable to their activities.

This may include providing appropriate privacy notices, obtaining required consents, responding to requests from individuals, and establishing a lawful basis for processing information.

If your Personal Data was collected through a website operated by one of our customers, requests concerning that information should generally be directed to the organization responsible for that website.

We will provide reasonable assistance to our customers with such requests where required by applicable law or agreement.

6. Cookies and Tracking Technologies

Unmelted may use cookies and similar technologies to maintain website functionality, authenticate users, remember preferences, analyze website activity, and support other legitimate business purposes.

Some cookies are necessary for our website and customer portal to operate correctly. Other technologies may be used for analytics, performance measurement, or marketing where permitted by applicable law.

You can generally manage cookies through your browser settings. Where required, we will provide additional choices concerning optional cookies and tracking technologies.

For additional information about the technologies we use, their purposes, and your available choices, please review our Cookie Policy.

7. Website Analytics and Advertising

We may use third-party services to understand how visitors interact with our website, measure performance, improve functionality, and evaluate the effectiveness of advertising campaigns.

These services may include:

PostHog

We may use PostHog to collect and analyze website usage information, including page views, navigation patterns, interactions, session activity, technical characteristics, and related diagnostic information.

Depending on our configuration, analytics information may be associated with device or session identifiers, IP-derived location information, or authenticated customer accounts.

We use this information to understand website activity, troubleshoot problems, and improve our services.

For additional information, see PostHog's Privacy Policy.

Google Ads

We may use Google Ads to promote our services, measure conversions, and evaluate the effectiveness of advertising campaigns.

Where enabled, advertising measurement or remarketing technologies may collect information concerning interactions with our website, such as pages visited, advertising identifiers, or conversion activity.

We may use this information to understand advertising performance or reach individuals who have previously expressed interest in our services.

Certain advertising practices may qualify as the sharing of Personal Data under applicable privacy laws, even when no information is sold for monetary compensation.

When legally required, we will provide appropriate notice, obtain consent, or offer mechanisms to opt out of these activities.

You can manage certain Google advertising preferences through Google's My Ad Center.

For additional information, see Google's Privacy Policy.

Specific cookies and tracking technologies used by these services are addressed in our separate Cookie Policy.

8. IP Addresses and Server Logs

We maintain server logs and other technical records to operate and secure our website and hosting infrastructure.

These records may contain IP addresses, timestamps, requested resources, authentication events, application errors, and related technical information.

We use these records to:

• Diagnose technical problems
• Monitor website and server performance
• Detect unauthorized access attempts
• Prevent spam, fraud, and abusive activity
• Investigate security incidents
• Enforce applicable agreements
• Maintain operational and security records

IP addresses may be associated with customer accounts or financial transactions when necessary for authentication, security, fraud prevention, or documenting important account activity.

We may restrict access from IP addresses associated with suspicious, malicious, or unauthorized activity.

9. Disclosure of Information to Third Parties

We may disclose Personal Data to third parties when reasonably necessary to operate our business, deliver services, process payments, or fulfill legal obligations.

We limit these disclosures to information appropriate for the intended purpose.

Payment Providers

We may use the following providers and payment methods:

• Stripe: For credit card processing, stored payment methods, recurring subscriptions, invoice payments, and related billing services. Stripe Privacy Policy.
• PayPal: For payments made through PayPal and related payment processing services. PayPal Privacy Policy.
• Venmo: For payments made through Venmo, a payment service operated by PayPal.
• Zelle: For supported bank-to-bank payments facilitated through participating financial institutions.
• Checks and Other Payment Methods: We may accept checks, bank transfers, or other agreed payment methods that involve financial institutions or payment service providers.

Each external payment provider may independently collect and process information necessary to complete transactions, prevent fraud, or comply with financial regulations.

The provider's privacy policy governs its own processing activities.

Infrastructure and Hosting Providers

We may share or process information through data centers, network operators, hosting providers, backup systems, domain registrars, and other infrastructure vendors necessary to provide services.

Such providers may have access to information required to operate, secure, or maintain the relevant infrastructure.

Domain Registrars and Registry Operators

When registering, renewing, transferring, or managing domain names, we may provide required registration or contact information to domain registrars, registry operators, and related service providers.

Domain registration information may be subject to applicable registration policies and legal disclosure requirements.

Security and Bot Protection

We use Cloudflare Turnstile to help protect forms on our website, such as the contact, billing, sign-in, and verification forms, from spam and automated abuse.

When one of these forms loads, Cloudflare may receive your IP address and information about your browser and device to help determine whether the request comes from a person. For additional information, see Cloudflare's Privacy Policy.

Communication and Support Providers

We may use email delivery services, communication platforms, and customer support tools to communicate with customers and administer our business.

Analytics and Advertising Providers

Where utilized, providers such as PostHog and Google Ads may process certain website usage, technical, or advertising information as described in this Privacy Policy and our Cookie Policy.

Professional Advisors

We may disclose information to accountants, attorneys, auditors, insurance providers, and other professional advisors when necessary for legitimate business, financial, or legal purposes.

Legal Requirements

We may disclose information when required by law or when reasonably necessary to:

• Respond to valid legal processes or government requests
• Protect our rights, property, and services
• Investigate suspected fraud or unlawful conduct
• Protect the safety or security of individuals or systems
• Establish, exercise, or defend legal claims
• Enforce applicable contracts and policies

We may challenge or limit requests for information where legally appropriate.

10. Sale and Sharing of Personal Information

Unmelted does not sell Personal Data to data brokers or third parties in exchange for monetary compensation.

We do disclose certain information to service providers and business partners when necessary to operate our business and deliver services.

Under some privacy laws, including the CCPA, the terms sale and sharing have specific legal definitions that extend beyond transactions involving monetary compensation.

For example, certain advertising or remarketing activities involving third-party advertising providers may constitute sharing for cross-context behavioral advertising.

If we engage in activities that qualify as the sale or sharing of Personal Data under applicable law, we will provide the required disclosures and mechanisms for exercising applicable opt-out rights.

Where required by applicable law, we will honor recognized opt-out preference signals, including Global Privacy Control (GPC), for processing activities covered by those signals.

Information entrusted to Unmelted through customer hosting, development, or maintenance services is not used for unrelated advertising or data brokerage purposes.

11. Communications and Marketing Preferences

We may communicate with customers and prospective customers for administrative, operational, support, or marketing purposes.

Service Communications

Customers may receive communications necessary to administer their accounts or services, including:

• Invoices and payment receipts
• Subscription and renewal reminders
• Payment failures and billing notices
• Service maintenance announcements
• Hosting or domain expiration notices
• Important security notifications
• Material changes to services or agreements

These communications are generally necessary to maintain the business relationship and may continue even when promotional communications have been declined.

Promotional Communications

We may occasionally send information about new services, products, business developments, or other relevant offerings.

Where required, we will obtain appropriate consent before sending promotional communications.

You may opt out of marketing communications by using an unsubscribe link, where provided, or by contacting us.

Opting out of promotional communications does not prevent essential account, billing, or service notifications.

12. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect Personal Data from unauthorized access, misuse, disclosure, alteration, destruction, or loss.

Our security measures may include:

• Encrypted HTTPS connections
• Secure authentication mechanisms
• Cryptographic password hashing
• Restricted administrative access
• Network and server security controls
• Security monitoring and logging
• System maintenance and security updates
• Backup and recovery procedures
• Access controls for sensitive customer information
• Use of third-party payment processors for sensitive payment card handling

Access to Personal Data is limited to authorized personnel and service providers with a legitimate business need.

We do not maintain complete credit card numbers or card verification codes in our own customer billing database. Saved payment methods are managed through the applicable payment provider.

No method of electronic transmission or storage can be guaranteed completely secure. Although we take reasonable precautions to protect information, we cannot guarantee that unauthorized access, security incidents, or data loss will never occur.

Customers are responsible for protecting their account credentials, using appropriate security practices, and notifying us promptly of suspected unauthorized access.

If a security incident occurs, we will investigate and provide notifications when required by applicable law or contractual obligations.

13. Data Retention and Deletion

We retain Personal Data only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, administer our services, maintain business records, resolve disputes, protect our infrastructure, and satisfy legal obligations.

Retention periods depend on the category of information, its purpose, applicable agreements, and relevant laws.

Customer Account and Billing Information

Customer account information, invoices, payment history, transaction records, and other financial information may be retained throughout the customer relationship and afterward when required for accounting, tax reporting, dispute resolution, contractual enforcement, or other legitimate business purposes.

Cancellation of services does not necessarily result in the immediate deletion of financial or contractual records that we are legally permitted or required to retain.

Website Hosting and Customer Data

When providing website hosting or related services, we maintain backups and other data necessary for disaster recovery, restoration, and service continuity.

Following the cancellation or termination of hosting services, customer website data and associated backups are generally deleted within one year, unless an earlier deletion is requested or a longer retention period is legally required.

This retention window allows customers an opportunity to request retrieval or restoration of information following service termination, subject to technical availability and applicable agreements.

The one-year period is a maximum standard retention window for terminated hosting data, not a guarantee that data will remain available for restoration throughout that period.

Requests for Immediate Deletion

Customers may request the deletion of their hosted website data and associated backups without waiting for the standard retention period.

Upon receiving and verifying an authorized deletion request, we will proceed with deletion without intentionally retaining that hosting data for the remainder of the standard one-year window, subject to applicable legal obligations and necessary technical processing.

Once data and backups have been permanently deleted, recovery may no longer be possible.

Deletion of hosted content does not necessarily include customer account information, billing history, invoices, or other records that must be retained for separate lawful purposes.

Other Information

Support correspondence, development records, technical logs, and other business information are retained according to their operational purpose and applicable requirements.

When information is no longer necessary, we may delete, anonymize, or otherwise securely dispose of it.

Where a verified privacy request establishes a legal obligation to erase Personal Data, we will process that request in accordance with applicable law, including any lawful exceptions and requirements affecting backups.

14. International Data Transfers

Unmelted operates primarily from the United States and may provide services to customers in other countries.

Personal Data may be processed or stored in the United States or other locations where we or our service providers operate.

These jurisdictions may have privacy and data protection laws that differ from those in your country.

Where international transfers are subject to applicable data protection requirements, including GDPR or UK GDPR requirements, we will use appropriate legal mechanisms and safeguards.

These may include adequacy decisions, approved Standard Contractual Clauses, or other legally recognized transfer mechanisms, as applicable.

15. Your Privacy Rights and Choices

Depending on your location and applicable law, you may have rights concerning the Personal Data we maintain about you.

These rights may include:

• Right to Be Informed: Obtain information about how and why your Personal Data is processed.
• Right to Access: Request access to Personal Data we maintain about you.
• Right to Correction: Request correction of inaccurate or incomplete information.
• Right to Deletion: Request deletion of Personal Data, subject to applicable exceptions.
• Right to Data Portability: Request certain information in a structured, commonly used, machine-readable format.
• Right to Object: Object to certain processing activities, including direct marketing.
• Right to Restrict Processing: Request limitations on certain uses of Personal Data.
• Right to Withdraw Consent: Withdraw consent for processing activities that rely on consent.
• Right to Opt Out: Opt out of qualifying sales, sharing, targeted advertising, or other processing activities where applicable law provides that right.
• Right to Non-Discrimination: Exercise applicable privacy rights without unlawful discrimination or retaliation.

Certain rights are subject to exceptions, including when processing or retention is necessary to fulfill a contract, comply with law, protect security, prevent fraud, or establish or defend legal claims.

Exercising Your Rights

To exercise applicable privacy rights, please contact us.

If you have a customer account, you can also download a copy of your personal data or request deletion of your account from the Privacy page in your account.

Please provide sufficient information for us to understand the nature of your request and reasonably verify your identity.

Where permitted, an authorized representative may submit a request on your behalf.

We will respond within the timeframes required by applicable law.

If your request concerns data processed on behalf of another organization through our hosting or development services, we may direct the request to that organization or assist it in fulfilling the request.

16. California Privacy Rights — CCPA and CPRA

California residents may have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, where those laws apply.

We seek to honor applicable California privacy rights and provide transparency about our collection, use, retention, and disclosure of Personal Data.

Categories of Personal Information

The categories of Personal Data we may collect and process through our own corporate website and business operations include:

These categories are collected from customers, visitors, their authorized representatives, service providers, and technical systems as described in this Privacy Policy.

The purposes for collection and processing are described in How We Use Information.

Personal Information Disclosed for Business Purposes

We may disclose relevant categories of Personal Data to payment processors, hosting and infrastructure providers, domain registrars, communication providers, professional advisors, and other service providers as described in Disclosure of Information to Third Parties.

Depending on the services and technologies used, these disclosures may include identifiers, customer records, commercial information, technical information, and other information necessary for the applicable business purpose.

These disclosures support activities such as payment processing, account administration, customer support, infrastructure operations, security, troubleshooting, and service delivery.

Right to Know and Access

California residents may request information concerning the Personal Data collected about them, the sources of that information, our processing purposes, and categories of third parties receiving that information.

Where required, we will also provide access to specific pieces of Personal Data, subject to applicable exceptions.

Right to Deletion

You may request deletion of Personal Data collected about you.

We may retain information when an applicable legal exception permits or requires retention, including for completing transactions, providing services, security, fraud prevention, legal compliance, or other authorized purposes.

Right to Correction

You may request correction of inaccurate Personal Data maintained about you, subject to applicable verification and legal requirements.

Right to Opt Out of Sale or Sharing

We do not sell Personal Data for monetary compensation.

If our use of advertising or marketing technologies constitutes selling or sharing under the CCPA, California residents have the right to opt out of those activities.

Where applicable, we will provide appropriate opt-out controls and honor recognized opt-out preference signals, including Global Privacy Control.

Right to Limit Use of Sensitive Personal Information

Where the CCPA provides a right to limit certain uses or disclosures of sensitive Personal Data, we will honor applicable requests.

Sensitive information used solely for permitted business functions, such as authentication, payment administration, service delivery, security, or fraud prevention, may be subject to statutory exceptions.

Right to Equal Treatment

We will not unlawfully discriminate against California residents for exercising applicable privacy rights.

Submitting Requests

California privacy requests may be submitted through our contact page.

We may request information reasonably necessary to verify your identity or the authority of a representative.

We will generally respond to verifiable requests to know, correct, or delete within 45 calendar days, subject to extensions permitted by applicable law. Requests to opt out are handled under the separate requirements applicable to those requests.

We will explain if a request is denied or cannot be fully completed due to an applicable legal exception.

17. European and United Kingdom Privacy Rights — GDPR

Where the GDPR or United Kingdom GDPR applies, we process Personal Data in accordance with applicable data protection requirements.

Legal Bases for Processing

Our legal bases for processing may include:

Performance of a Contract

Processing necessary to provide requested services, manage customer accounts, administer subscriptions, process payments, or fulfill contractual obligations.

Compliance with Legal Obligations

Processing necessary to satisfy accounting, tax reporting, legal, regulatory, or other obligations imposed by applicable law.

Legitimate Interests

Processing reasonably necessary for legitimate business interests, such as:

• Maintaining and securing our infrastructure
• Preventing fraud and unauthorized access
• Providing customer support
• Troubleshooting technical problems
• Improving our services
• Managing business relationships
• Maintaining operational and security records

We rely on legitimate interests only when appropriate under applicable law and after considering the rights and interests of affected individuals.

Consent

Processing based on valid consent where consent is necessary, such as for certain optional tracking, marketing, or other processing activities.

Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of processing that occurred before withdrawal.

Your GDPR Rights

Where applicable, you may have the right to:

• Access Personal Data concerning you
• Request correction of inaccurate information
• Request erasure of Personal Data
• Restrict certain processing activities
• Object to processing based on legitimate interests
• Object to direct marketing
• Receive certain Personal Data in a portable format
• Withdraw consent
• Avoid certain decisions based solely on automated processing that produce legal or similarly significant effects

These rights are subject to applicable conditions and exceptions.

Responding to GDPR Requests

To exercise your rights, please contact us.

We may request additional information necessary to verify your identity.

Where GDPR applies, we will respond without undue delay and generally within one month of receiving your request, subject to extensions permitted for complex or numerous requests.

If we cannot fulfill a request, we will explain the applicable reason and provide information about available remedies where required.

Complaints

Individuals covered by GDPR or UK GDPR may have the right to lodge a complaint with an appropriate data protection supervisory authority.

We encourage you to contact us first so that we have an opportunity to address your concerns.

Controller and Processor Responsibilities

For Personal Data collected through our own corporate website, customer accounts, billing systems, and direct business operations, Unmelted generally acts as the Data Controller.

When processing Personal Data on behalf of our hosting, development, or other service customers, we may act as a Data Processor.

Where required, our responsibilities as a processor will be established through appropriate contractual arrangements with the customer acting as controller.

18. Children's Privacy

Our corporate website and business services are not directed toward children under the age of 16.

We do not knowingly collect Personal Data directly from children under 16 through our corporate website.

If we discover that Personal Data has been collected directly from a child without appropriate authorization, we will take reasonable steps to address the information, including deletion where required.

If you believe a child has provided Personal Data to us, please contact us.

19. Third-Party Websites and Other Unmelted Properties

Our website may contain links to other websites, software applications, online businesses, and services.

These may include properties owned by Unmelted, projects under development, customer websites, and independent third-party resources.

Other properties operated by Unmelted may collect different types of information depending on their services.

For example, a community website may process public discussion content, while a financial software application may process financial or business records.

This Privacy Policy does not automatically govern every website, application, or business owned or operated by Unmelted.

Where another property maintains a separate Privacy Policy, that policy governs the information collected and processed through that property.

Ownership of multiple properties does not mean that all information collected by those properties is automatically combined or shared.

Information may be transferred between our business systems or properties when appropriate for legitimate business purposes, consistent with applicable privacy disclosures, agreements, and legal requirements.

We encourage visitors to review the applicable privacy policies before using other websites or applications.

We are not responsible for the privacy practices of independent third-party websites outside our control.

20. Business Transfers

If Unmelted becomes involved in a merger, acquisition, corporate restructuring, sale of assets, or similar business transaction, relevant Personal Data may be transferred as part of that transaction.

Any transfer will be subject to applicable legal requirements and reasonable confidentiality and security protections.

Where required, we will notify affected individuals of material changes concerning the handling of their Personal Data.

21. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our business operations, services, technology, legal obligations, or data processing practices.

When changes occur, we will update the "Last Updated" date at the beginning of this document.

If changes materially affect how Personal Data is collected, used, or disclosed, we will provide additional notice or obtain consent where required by applicable law.

We encourage visitors and customers to review this Privacy Policy periodically.

22. Contact Information

If you have questions, concerns, or requests concerning this Privacy Policy or the handling of your Personal Data, please contact us.

Unmelted, LLC
18429 Veterans Memorial Dr E #7522
Bonney Lake, WA 98391
United States

Website: www.unmelted.com
Contact: www.unmelted.com/contact

We will make reasonable efforts to respond to inquiries and address privacy concerns in accordance with applicable law.