1. Introduction
Core Order LLC ("Core Order," "we," "our," or "us") is a Florida limited liability company operating as a Growth Architecture Firm. This Privacy Policy describes how Core Order collects, uses, and protects information when visitors interact with the website at coreorder.ai (the "Site").
This policy applies to information Core Order receives from visitors and prospective clients through the Site. It does not apply to information received under separate client engagement agreements; the terms of those agreements govern client information independently.
By using the Site, visitors agree to the practices described in this policy.
2. Information Core Order Collects
Core Order limits data collection to what is necessary to operate the Site and respond to inquiries.
2.1 Information visitors provide
The Site collects information visitors voluntarily submit through forms — including the contact form, and any future forms such as lead magnets, downloadable resources, event registrations, or member sign-ups. Information collected typically includes name, work email address, organization name, role, and the contents of the submission.
Visitors may also voluntarily provide information through other channels, such as direct email to Core Order, scheduling tools, or third-party platforms where Core Order maintains a presence.
2.2 Information collected automatically
When visitors interact with the Site, Core Order collects information about that interaction through analytics, measurement, and attribution tools. The categories of information collected include:
- Pages viewed, navigation paths, and time spent on pages
- Referring sources, search terms (when available), and marketing-campaign attribution parameters
- Device, browser, and operating system information
- Approximate geographic location (typically city or regional level, derived from IP address)
- Engagement events such as form interactions, outbound link clicks, file downloads, and CTA clicks
Core Order currently uses Google Analytics 4 (GA4) as its primary analytics tool. GA4 anonymizes IP addresses before storage, and Core Order does not have advertising features (such as Google Signals, remarketing audiences, or demographic reports) enabled at this time.
Core Order may add additional analytics, measurement, advertising-attribution, and campaign-tracking tools within these categories as the business evolves. The current list of specific tools and service providers is provided in Section 4.
Server logs maintained by Core Order's hosting provider record standard request metadata such as IP address, user agent, and timestamp. These logs are retained for security and operational purposes and are not used for marketing or profiling.
2.3 Cookies and similar technologies
The Site uses cookies and similar technologies (including pixels, web beacons, local storage, and tracking parameters) across three categories:
- Functional cookies and storage — required for core site operation, including page delivery, security, session continuity, and persistence of cookie-consent preferences.
- Analytics cookies — used to measure how visitors use the Site (currently set by Google Analytics 4; see Section 2.2). Additional analytics or measurement tools within this category may be added in the future.
- Advertising and marketing cookies — disclosed in advance and may be set by future tools used for campaign attribution, conversion tracking, advertising effectiveness measurement, and audience-based remarketing (including but not limited to platforms such as Google Ads, Meta, LinkedIn, or similar). No advertising or marketing cookies are active at this time. When such cookies are added, they will be disclosed in the cookie consent banner and reflected in Section 4 (Service Providers).
Visitors from jurisdictions where consent is required (EU, UK, California, and other applicable regions) will see a cookie consent banner on their first visit, with options to accept all, reject all, or manage preferences by category. Rejecting analytics or advertising cookies does not affect access to the Site or its content. Consent state is persisted across visits and may be revisited through a link in the Site footer.
Visitors may also configure their browser to block or delete cookies at any time.
3. How Core Order Uses Information
Information submitted through forms or direct communications is used to:
- Respond to inquiries
- Evaluate whether a Core Order engagement is a fit
- Maintain a record of communications for relationship continuity and follow-up
- Coordinate scheduled interactions such as discovery calls, working sessions, and other meetings
Aggregated and event-level analytics data is used to:
- Understand which parts of the Site are useful to visitors
- Identify technical issues and improve performance
- Inform editorial, structural, and visual improvements to the Site
- Measure the effectiveness of marketing efforts and campaign attribution, when applicable
- Support business reporting and strategic planning
Core Order does not sell, rent, or trade visitor information. Core Order does not use visitor information for automated decision-making with legal or similarly significant effects.
4. Service Providers
Core Order works with service providers across several categories to operate the Site and conduct business. Each provider operates under its own privacy and data-processing terms; Core Order selects providers that align with the privacy posture described in this policy.
Current service providers (as of the Effective Date of this policy):
- Hosting and infrastructure: Vercel
- Web analytics: Google LLC (Google Analytics 4) — see Google's Privacy Policy
- Transactional email delivery: Resend
- Business email and document infrastructure: Google Workspace
Categories of service providers Core Order may use or add in the future:
- Advertising platforms and conversion tracking (such as Google Ads, Meta, LinkedIn Ads)
- Marketing measurement, attribution, and audience-building tools
- Customer relationship management (CRM) and marketing automation platforms
- Customer engagement tools (such as live chat, scheduling, and feedback collection)
- AI and machine-learning tools (such as language models used internally to process inquiries, generate content, or support business operations)
- Survey, research, and feedback platforms
- Event, webinar, and community platforms
When Core Order adds specific service providers within any of these disclosed categories, the change will be reflected in updated versions of this Service Providers section without requiring a formal Privacy Policy revision. Material changes to disclosed categories — or the addition of a fundamentally new category not listed above — will trigger a formal revision per Section 9.
5. Data Retention
Information submitted through forms and related correspondence is retained for as long as the prospective or active engagement remains relevant, and for a reasonable period thereafter for record-keeping and re-engagement purposes. Visitors may request deletion at any time per Section 7.
Server logs are retained per the hosting provider's standard retention periods. Analytics data is retained per the analytics provider's standard retention settings; Core Order configures retention windows to the minimum applicable for the analytics use case. Information collected through service providers added in the future will be retained per those providers' standard practices, subject to Core Order's commitment to delete data on visitor request where applicable.
6. Security
Core Order maintains reasonable administrative, technical, and physical safeguards designed to protect the information visitors provide. No method of transmission or storage over the internet is fully secure, and Core Order cannot guarantee absolute security.
7. Visitor Rights
7.1 General
Regardless of location, any visitor may request that Core Order:
- Confirm what information Core Order holds about them
- Provide a copy of that information
- Correct inaccurate information
- Delete information, subject to legitimate retention requirements
Requests may be sent to privacy@coreorder.ai. Core Order will respond within 30 days.
7.2 California residents (CCPA / CPRA)
California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know what personal information is collected, the right to delete personal information, the right to correct inaccurate personal information, and the right to opt out of the sale or sharing of personal information.
Core Order does not sell or share personal information as those terms are defined under California law.
To exercise California rights, contact privacy@coreorder.ai.
7.3 Residents of other US states with comprehensive privacy laws
Residents of Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws have rights substantively similar to those described above, including access, correction, deletion, and portability of personal information, and the right to opt out of targeted advertising (which Core Order does not engage in).
To exercise these rights, contact privacy@coreorder.ai.
7.4 EU and UK residents (GDPR / UK GDPR)
Where the GDPR or UK GDPR applies, visitors have the rights of access, rectification, erasure, restriction of processing, data portability, and objection to processing. Where Core Order processes data on the basis of consent, visitors may withdraw that consent at any time.
Core Order's lawful bases for processing visitor information are: (a) the visitor's consent (submitted contact-form information), (b) Core Order's legitimate interests in operating the Site and responding to inquiries, and (c) compliance with legal obligations.
Visitors in the EU or UK have the right to lodge a complaint with their national data protection authority.
8. Children
The Site is not directed to children under 18, and Core Order does not knowingly collect information from children under 18.
9. Changes to This Policy
Core Order may update this Privacy Policy from time to time. The "Effective Date" at the top of the policy reflects the most recent material revision.
What triggers a formal Privacy Policy revision:
- Material changes to the categories of information collected
- Material changes to how information is used or disclosed
- Addition of a fundamentally new category of service provider not disclosed in Section 4
- Changes to visitor rights or to how Core Order responds to rights requests
- Changes to data retention, security, or governing law
What does NOT trigger a formal revision:
- Adding a specific vendor within a category already disclosed in Section 4
- Updating the current-service-providers list, the contact information, or the formatting
- Minor clarifications that do not change Core Order's practices
Material changes will be reflected by updating the Effective Date and may be communicated by other means where appropriate. Visitors are encouraged to review this policy periodically.
10. Contact
Questions about this policy or about Core Order's privacy practices may be directed to:
Core Order LLC privacy@coreorder.ai
Core Order LLC is a Florida limited liability company. This Privacy Policy is governed by the laws of the State of Florida, without regard to its conflict of laws principles, except where superseded by applicable law in the visitor's jurisdiction.