Privacy Policy

1. Introduction

This Privacy Policy explains how Luna Imaginative LLC (“Company,” “we,” “us,” or “our”) collects, uses, stores, and protects your personal information when you visit mainstage.agency and interact with our services. We are committed to protecting your privacy and ensuring you have a positive experience on our site.

This policy applies to all visitors and users of our website, contact forms, and services, regardless of where you are located.

2. Who We Are & How to Contact Us

Data Controller: Luna Imaginative LLC
Email: [email protected]

Governing Law:This Privacy Policy is governed by the laws of the State of New Mexico and applicable U.S. federal law, including the California Consumer Privacy Act (CCPA, Cal. Code § 1798.100 et seq.) and the European Union General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

3. What Personal Information We Collect

3.1 Information You Provide Directly

Contact Forms & Lead Capture: When you submit a contact form on mainstage.agency, we collect:

• Name
• Email address
• Phone number (optional)
• Company name (optional)
• Message content
• Any other information you voluntarily provide

Service Inquiries: If you inquire about our agentic OS implementation services, we may collect business information, project requirements and scope, budget parameters, and timeline preferences.

3.2 Information Collected Automatically

Website Usage & Analytics: We use Google Analytics and similar tools to understand how visitors use our site. We collect IP address, browser type and version, operating system, pages visited and time spent, referral source, device type, and general geographic location (city/country level, not precise).

Cookies & Tracking Technologies: We use cookies and similar tracking technologies to remember your preferences, understand site usage patterns, improve user experience, and track marketing campaign performance. See Section 7 for cookie details.

3.3 Third-Party Information

We may receive your information from marketing partners and lead generation platforms, social media platforms (if you interact with our ads), and public databases and business directories.

4. Legal Basis for Processing (GDPR Article 6)

Under GDPR, we process your personal data on the following legal bases:

4.1 Consent (Article 6(1)(a))

• When you submit a contact form, you consent to us using your information to respond to your inquiry
• For marketing communications, we obtain explicit consent

4.2 Legitimate Interest (Article 6(1)(f))

• To understand site usage and improve user experience
• To prevent fraud and maintain website security
• To analyze and optimize our marketing

4.3 Contractual Necessity (Article 6(1)(b))

• To deliver services you have requested or contracted for

4.4 Legal Obligation (Article 6(1)(c))

• To comply with applicable laws and regulations

5. How We Use Your Information

Service Delivery

• Respond to your inquiries and contact form submissions
• Provide information about our agentic OS implementation services
• Deliver services you have contracted with us for
• Process payments and manage your account

Business Operations

• Send transactional emails (confirmations, receipts, updates)
• Manage our business relationships
• Comply with legal and regulatory obligations

Marketing & Outreach

• Send marketing communications (with your consent or in accordance with applicable law)
• Analyze marketing campaign performance
• Personalize your experience

Website Improvement

• Analyze how users interact with our site
• Identify and fix technical issues
• Optimize user experience
• Understand visitor demographics and behavior

Security & Protection

• Detect and prevent fraud
• Maintain website security
• Protect our legal interests

6. Who We Share Your Information With

6.1 Service Providers (Data Processors)

We share information with third-party service providers who help us operate our business:

• Hosting Provider (Cloudflare): Hosts and secures our website
• Email Service Provider: Sends transactional and marketing emails
• Analytics Platform (Google Analytics): Analyzes website usage
• CRM Platform: Manages customer relationships and inquiries
• Payment Processor: Processes payments (if applicable)

These providers are bound by confidentiality agreements and can only use your data as necessary to provide services to us.

6.2 Legal Requirements

We may disclose your information to comply with legal obligations, court orders, or government requests; to enforce our Terms & Conditions; to protect our rights and prevent fraud; or to protect the safety of our users.

6.3 Business Transfers

If we merge with, acquire, or sell assets to another company, your information may be transferred as part of that transaction. We will notify you of any such change.

6.4 Aggregated & De-Identified Data

We may share aggregated and de-identified data with third parties for marketing, analytics, and research purposes. This data cannot be used to identify you.

6.5 No Sale of Personal Information

We do not sellyour personal information to third parties. However, under the CCPA, certain data-sharing arrangements may be considered a “sale.” California residents: see Section 11 for your rights.

7. Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files stored on your device that help us recognize you when you return to our site. We use cookies to keep you logged in (if applicable), remember your preferences, track website analytics, and measure marketing campaign performance.

7.2 Types of Cookies We Use

Essential Cookies: Required for the site to function (e.g., security, session management). These cookies cannot be disabled.

Analytics Cookies: Help us understand how visitors use our site (e.g., Google Analytics). You can disable these in your browser settings.

Marketing Cookies: Used to track the effectiveness of our marketing campaigns and serve targeted ads. You can disable these in your browser settings.

7.3 Managing Cookies

Most browsers allow you to view and delete cookies, block cookies from specific sites, or set your browser to ask before accepting cookies. Instructions for managing cookies are available in your browser’s settings. Note that disabling cookies may affect your experience on our site.

7.4 Do Not Track Signals

Some browsers include a “Do Not Track” feature. We do not currently respond to these signals, but we provide you with the above tools to control tracking.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes.

8.1 Retention Periods

• Contact form submissions: 3 years (for business record-keeping and legal compliance)
• Email communications: 3 years (for dispute resolution and compliance)
• Analytics data: 26 months (Google Analytics default retention)
• Cookies:As specified in each cookie’s settings (typically 1 to 2 years)
• Customer account data: For the duration of the business relationship, plus 3 years for legal/tax compliance

After this period, we delete or de-identify your information. If you request deletion (see Section 9), we will delete your data promptly, except where we are required to retain it for legal reasons.

9. Your Data Rights & How to Exercise Them

9.1 European Union (GDPR) Residents

If you are located in the EU, you have the following rights under the GDPR:

• Right of Access (Article 15): Request a copy of the personal information we hold about you.
• Right to Rectification (Article 16): Request that we correct inaccurate or incomplete information.
• Right to Erasure (Article 17 – “Right to Be Forgotten”): Request deletion of your personal information, except where we have a legal obligation to retain it.
• Right to Restrict Processing (Article 18): Ask us to limit how we use your information while you submit a dispute or request review.
• Right to Data Portability (Article 20): Request your personal information in a structured, commonly-used format and transfer it to another service provider.
• Right to Object (Article 21): Object to our processing of your data for marketing, analytics, or other purposes based on legitimate interest.
• Right to Withdraw Consent: If we are processing your data based on consent, you can withdraw that consent at any time.
• Rights Related to Automated Decision-Making (Article 22): Request human review and explanation if we use automated decision-making.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days (or up to 90 days for complex requests) as required by law.

9.2 California (CCPA) Residents

If you are a California resident, you have the following rights under the CCPA:

• Right to Know (§ 1798.100): Request what personal information we have collected about you.
• Right to Delete (§ 1798.105): Request deletion of personal information we have collected, subject to certain exceptions.
• Right to Correct (§ 1798.120): Request that we correct inaccurate personal information.
• Right to Opt-Out of Data Sales (§ 1798.120): We do not intentionally sell your data, but you may exercise this right at any time.
• Right to Non-Discrimination (§ 1798.125): We will not discriminate against you for exercising your CCPA rights.

To exercise any of these rights, contact us at [email protected]. We will verify your identity and respond within 45 days.

9.3 Other U.S. State Residents

Other U.S. states (e.g., Virginia, Colorado, Connecticut) have similar privacy laws. Contact us for details specific to your jurisdiction.

10. International Data Transfers

Luna Imaginative LLC is a U.S. company. If you are in the EU, your information may be transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCC) approved by the EU, and adequacy decisions where available, to ensure your data is adequately protected in transit and storage.

11. Third-Party Links & Services

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of these sites. Please review their privacy policies before providing your information.

12. Children’s Privacy

Our services are not directed to children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect information from children under 13. If we become aware that a child has submitted information, we will delete it promptly.

13. Data Security

We implement reasonable technical, administrative, and physical safeguards to protect your personal information against unauthorized access, loss, alteration, and disclosure. These safeguards include SSL/TLS encryption for data in transit, secure hosting with Cloudflare, restricted access to personal information on a need-to-know basis, and regular security assessments.

No security system is 100% secure. If a security breach occurs, we will notify affected individuals as required by law.

14. California Consumer Privacy Rights Notice (CCPA § 1798.100)

Categories of Personal Information Collected

• Identifiers (name, email, phone, address)
• Commercial information (inquiries about services, transaction history)
• Internet/electronic activity (IP address, cookies, browsing behavior)
• Geolocation data (city/country level)
• Professional information (company, job title)
• Customer feedback (messages, support inquiries)

Categories of Sources

• Directly from you (contact forms, inquiries)
• Automatically (cookies, analytics)
• From third parties (marketing partners, social media)

Purposes of Use

• Provide services
• Respond to inquiries
• Marketing and customer communications
• Website analytics and improvement
• Fraud prevention and security

15. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by posting the updated policy on our website and updating the “Last Updated” date. Your continued use of our site after updates constitutes your acceptance of the revised policy.

16. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at: [email protected]

EU Residents – Supervisory Authority: You have the right to file a complaint with your local data protection authority.

California Residents – Complaint: You may file a complaint with the California Privacy Protection Agency (CPPA).