Privacy Policy

This policy describes how WestCar Media, LLC handles information through westcarmedia.com and its hosted client portal. External publications, social platforms, payment services, and other sites have their own privacy practices.

Information you provide

The contact form collects your name, email, optional organization and phone number, inquiry type, message, source page, and submission time so we can review and respond. An inquiry does not subscribe you to marketing. The newsletter collects your email, optional name and organization, signup source, consent, and subscription status. Signup requires a separate, unchecked consent choice; you can unsubscribe at any time.

Client portal and business email

Client and administrator accounts use email addresses and passwords. Passwords are stored as salted hashes. Email changes use expiring verification codes stored as keyed hashes. Administrators use an authenticator app; its secret is encrypted and recovery codes are stored as hashes. A first-party session cookie keeps a signed-in user connected for up to one hour.

The portal stores client-facing goals, deadlines and status updates; approval decisions; invoice and payment records; and portal messages. Account settings let clients change their password and verified email and choose optional service-alert preferences. Security and verification notices are required. Authorized administrators may also send one-to-one business emails to addresses they select. Sent email records can include the recipient, sender, subject, message, attachment filenames, delivery status, provider reference, and timestamp. These records are available to authorized administrators; they are not shown in a client’s portal. Direct email is not a newsletter subscription.

Transactional verification and service alerts are sent through Resend when email delivery is connected. Portal records are used for client service, business operations, security, and recordkeeping.

Payments

Online payment processing may be provided by Stripe when checkout is activated. The payer is redirected to Stripe Checkout, where Stripe processes payment details under its own privacy terms. WestCar Media does not store full card numbers or security codes. The portal stores invoice allocations, payment amounts, timestamps, and provider references needed to reconcile payments.

Website delivery and security

Hosting infrastructure processes technical information needed to deliver and protect the site, which may include IP addresses, request times, browser or device details, and security logs. Form-abuse controls use a short-lived, cryptographically transformed network identifier rather than keeping raw IP addresses in inquiry or subscriber records. These rate-limit records expire after 10 minutes and are removed during subsequent requests.

Cookies, local storage, and analytics

We use local storage to remember privacy choices and your light or dark theme preference on this device. A first-party wc_analytics cookie remembers your analytics choice for up to six months. Essential hosting or security technologies may also be used to deliver the site.

Analytics is off unless you enable it. When enabled, we count page visits, broad traffic-source categories, engagement with selected sections, successful forms, and outbound link clicks in daily aggregates. These counts do not contain names, email addresses, persistent visitor IDs, full referring URLs, or cross-site profiles. Supported Global Privacy Control signals keep optional analytics off. We do not use advertising pixels or marketing cookies.

You can Cookie Preferences at any time or clear browser storage. Disabling analytics does not block the contact or newsletter forms. The site does not embed third-party social feeds or video players; external links are governed by the destination’s privacy practices.

How information is used and shared

We use information to respond to requests, manage business communications and voluntary subscriptions, deliver portal services, honor opt-outs, protect the site, and maintain business records. Authorized personnel and service providers may process information for these purposes. The site uses Sites hosting and Cloudflare infrastructure, including a private database. Resend delivers email. Stripe receives payment details directly through its Checkout page when online payments are active. We may disclose information when required by law, to protect rights or security, or as part of a business transfer with appropriate safeguards. We do not sell website contact or subscriber information or share it for cross-context behavioral advertising.

Retention and security

Inquiry records are removed after 24 months and aggregate analytics after 13 months during subsequent processing. Direct email records are removed after 24 months during subsequent email processing. Subscription information is kept while active; after unsubscribe, optional name and organization fields are cleared while the minimum email and suppression history needed to honor the choice is retained. Client, decision, invoice, payment-reference, and portal-message records are retained for client service, financial, legal, and recordkeeping needs, with access limited to authorized personnel. Hosting logs and backups follow provider schedules.

We use encrypted HTTPS connections, server-side validation, access-controlled database storage, and abuse controls. No security system can guarantee absolute protection.

Your choices and privacy requests

You may unsubscribe online or contact us through the inquiry form. You may ask to access, correct, or delete information you provided. We may verify a request and retain limited information to meet legal obligations or honor suppression choices. If California privacy laws, including the CCPA, apply to WestCar Media and your request, you may have additional rights to know, correct, delete, opt out of sale or sharing, limit certain uses of sensitive information, and receive non-discriminatory treatment. We honor supported Global Privacy Control signals for optional analytics.

Children and updates

This business website is not directed to children under 13, and we do not knowingly collect their information. Contact us if you believe a child has submitted personal information. We may update this policy as the website and services change; the effective date will be updated when we do.

Contact

WestCar Media, LLC · Los Angeles / Burbank, California
Contact