OC Light and Magic

Privacy Policy

Last updated October 3, 2026


This policy explains what information OC Light and Magic collects, why, how long we keep it, and what you can do about it. It covers this website and the work we do for clients.

Your privacy

What we collect

When you book a call

Our “Book my call” button takes you to our booking page on Cal.com, where you pick a time. To book, you give us your name, email address and phone number, so we know who we’re talking to and how to reach you. If the booking page asks you anything else, such as your trade, your city or your current website, your answers help us prepare before we talk. Anything beyond your name, email and phone is up to you.

Cal.com runs the booking page for us and sends your booking to us and a confirmation to you. This website itself doesn’t store anything you enter. Cal.com’s privacy policy is at cal.com/privacy.

When you visit the site

Like every website, our web host automatically records basic technical details when your browser loads a page: your IP address, browser type, the page requested and the time. These logs are used to keep the site running and secure, and are kept only as long as our host retains them.

We don’t use analytics on this site today. If we add a visit counter, it will be a cookieless one that reports totals only, and we’ll update this page first. See our Cookie Policy.

When you become a client

If you hire us, we also keep:

Card payments are processed by Stripe. We never see or store your full card number. Stripe’s privacy policy is at stripe.com/privacy.

What we don’t collect

We don’t collect Social Security numbers, driver’s license numbers, financial account logins, precise location, health information or any other sensitive personal information. Please don’t send it to us.

How we use it

We don’t use your information for anything unrelated to these purposes without asking you first. We don’t add you to a mailing list.

Who we share it with

We don’t sell your personal information. We don’t share it for cross-context behavioral advertising. We have not done either in the past 12 months.

We only share it with companies that help us run the business, and only what they need:

How long we keep it

Booking requests that don’t become a project are deleted 24 months after our last conversation. If you become a client, we keep your contract, invoices, payment records, written approvals and draft links for 7 years after the project ends, for tax and legal records. The photos and content you send us to build your site are kept until the project ends plus the file retention period in your contract, and then deleted. Hosting logs are kept only as long as our web host retains them.

You can ask us to delete your information sooner. See below.

Your rights

Anyone can ask us to:

California residents. Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, you also have the right to know what categories of information we collect, where it comes from, why we use it and who we share it with (all listed on this page); to opt out of the sale or sharing of your information (we don’t sell or share it); to limit the use of sensitive personal information (we don’t collect it); and to not be treated differently for using any of these rights. We honor these rights for everyone, whether or not the law requires it of a business our size.

You can also have an authorized agent make a request for you. We’ll ask the agent for your signed permission and may confirm the request with you directly.

California “Shine the Light.” We don’t share personal information with other companies for their own marketing.

Categories of personal information (California)

How to see, correct or delete your information

You don’t need to give a reason, and it’s free. Pick whichever is easiest:

Tell us your name and the phone number or email address you used to contact us. That’s all we need.

  1. We confirm we got it within 10 business days.
  2. We check it’s really you, usually by replying to the email address or phone number you contacted us from. We only ask for what we need to match your request to our records.
  3. We complete your request within 45 days. For deletion, that means removing your information from our email, notes and files, and asking any company that holds it for us to delete it too. If we need more time, up to another 45 days, we’ll tell you why.
  4. We tell you when it’s done, and list anything we had to keep and why.

If you were a client, we’re required to keep some records for tax and legal reasons: your contract, invoices, payment records, and the written approvals and draft links that show what was delivered. We keep only those, for 7 years after the project ends, and use them for nothing else. We’ll also keep a short note that you asked us to delete your information, so we don’t contact you again by mistake.

If you booked a call, the confirmation email Cal.com sent you stays in your own inbox. You can delete that yourself.

Do Not Track and Global Privacy Control

We don’t track visitors across websites, so there’s nothing for these signals to switch off. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of sale and sharing, which we don’t do anyway.

Children

This website is for businesses. It isn’t meant for children, and we don’t knowingly collect information from anyone under 16. If you think a child has sent us information, contact us and we’ll delete it.

Security

We keep your information in password-protected accounts and limit who can see it. No system is perfectly secure. If a breach affects your information, we’ll tell you as the law requires.

Links to other sites

Example sites, payment pages and other links may take you to websites we don’t run. Their own privacy policies apply there.

Changes

If we change this policy, we’ll update the date at the top. If a change affects how we use information you’ve already given us, we’ll tell you before it takes effect.