Privacy policy

Who this is about

This policy covers arocwebdesigns.com. It is operated by Aric Sangchat, trading as Aroc, a sole trader, of 19 S. 16th St., Bowling Green, MO 63334, United States. If you want anything below explained or actioned, email [email protected].

What we collect, and only what we collect

The collection described below includes optional marketing tracking.

1. If you use the contact form.You give us your name, your business name, your email, and a description of the problem. Optionally your role, the type of business, a phone or messaging number, your website or profile, your timeline, and how you found us. Apart from the two items in the next sentence, nothing on that form is collected without you typing it. When you send the form we also keep which page you first arrived on during that visit (the page address only, without anything after a “?”) and the name of the website that sent you there, such as www.google.com, so we can tell which pages lead to enquiries. Your browser holds these two items only for the length of the visit, and they leave it only with the form. If your browser sends Global Privacy Control, neither is kept or sent.

2. If you browse the site. Google Analytics 4 (property G-RMB1SXDYXK) records pages viewed, approximate location derived from IP address, device and browser type, and how you arrived. We also record when someone clicks a phone number, an email address or a messaging link — the fact of the click, never the content of what follows.

3. If you use one of the free tools and ask for the result. Some tools ask for an email address before they send you a document or report.

The AI citation audit, the B2B funnel calculator (a PDF roadmap) and the SBA loan broker pipeline calculator (a PDF blueprint) ask for a work email address, and refuse free-mail addresses.

The website quote comparison calculator and the website redesign risk check and launch checklist accept any email address.

For every tool we store the email address, which tool it came from, and the time you agreed to receive the result. We also store:

• for the AI citation audit, the brand name and question you entered and the results. The brand name and question are sent to the AI services named below; your email is not.
• for the funnel calculator, the figures you entered (monthly visitors, current and modelled lead-capture rates, close rate and average deal value) and the monthly gap they produce, so a follow-up can start from your numbers.
• for the quote comparison calculator, the quotes you entered (names, prices, monthly fees and which items you ticked), so the comparison we email you is the one you made.
• for the redesign risk check, your six answers and the result.

The figures you enter into the SBA calculator are used to build your PDF and are not stored. Using any tool without asking for the emailed result stores nothing: the calculation happens in your browser.

Email us and any of the above will be deleted. Asking for a result does not subscribe you to anything, and we may follow up once about that result.

4. If you use the equipment sourcing directory.A company listing is public information about a business. If you ask to claim a listing, we ask for your name, your role and a work email at that company’s domain, and we keep the email and the request. If you ask for a listing to be removed, we take your name, your relationship to the company and what you tell us, and the listing is hidden at once.

5. If you subscribe to new articles.You give us your email address and, if you choose, what your website is for. We store those, where on the site you signed up, the time you signed up and confirmed, the wording you agreed to, and a one-way scrambled version of your IP address as a record of the sign-up (it can’t be turned back into the address). Nothing is sent until you click the link in the confirmation email. After that you get one email when a new article is published, and every email has a one-click unsubscribe link. We record whether an email was delivered and whether the link in it was clicked, in total, to know if the emails are useful. We don’t track you across other websites.

Optional marketing tracking. If you accept marketing cookies, Meta Pixel (ID 1539519307634350) shares page visits, cookie identifiers, IP address and browser information with Meta for advertising measurement and retargeting on Facebook and Instagram. We send only PageView events on public marketing pages. Tools, reports and contact forms are excluded, as are visits with query strings or URL fragments. We do not send form contents, email addresses or phone numbers to Meta through advanced matching. Meta may associate activity with your Meta account. You can reject or withdraw permission using the Marketing cookie settings button on any page. We do not add you to a mailing list without your separate sign-up.

Why

• Contact form: to reply to you, and to look at your business properly before replying. That is the only use.
• Free tools and directory forms: to deliver the document you asked for, to follow up on that request if it is relevant to it, and, for a claim or removal, to act on it. Entering an email to receive a result does not add you to a mailing list.
• Article emails: to send you new articles you asked for, and nothing else. Unsubscribing stops them immediately.
• Analytics and contact tracking: to know whether the site works. Aroc sells measurement, so measuring its own site is not optional — but it is aggregate, and we are not trying to identify you.

Who else touches it

• Resend — delivers the contact form to our inbox, sends the results you ask for from the free tools, and sends confirmation and article emails to subscribers. Your email address and the content of those messages pass through their systems in order to be delivered, as do directory claim and removal requests.
• Supabase — hosts the database that holds the records in sections 1, 3, 4 and 5 above.
• Perplexity, OpenAI and Anthropic — answer the question you enter into the AI citation audit, so the audit can show what each one cites. They receive the brand name and question, not your email address.
• Google — Analytics, and Search Console for how the site performs in search. Search Console shows us search terms and click counts, never individuals.
• Meta — receives optional marketing events only after you accept marketing cookies and while your browser does not send Global Privacy Control. See the Meta Privacy Policy for how Meta uses and retains this information and the choices available in your Meta account.
• Vercel Inc. — hosts this site and keeps standard server logs, including your IP address, in order to deliver the pages to you.

Typefaces are served from this site’s own servers, not fetched from Google when you visit. No data about you reaches a font provider.

Cookies

Google Analytics sets cookies to tell repeat visits from new ones. If you accept marketing cookies, Meta Pixel may set _fbp and _fbc cookies for advertising measurement and retargeting. Withdrawing marketing permission stops further pixel events and clears those first-party cookies. We store your marketing choice in this browser until you change it or clear site data. A separate cookie is set if you unlock an AI citation audit report: a signed, HttpOnly cookie that lets the same browser reopen that one report, limited to that report’s address and expiring after 30 days. Blocking these cookies in your browser costs you nothing here — the site works identically without them.

Separately from cookies, a few pages use your browser’s own storage to remember things for you on this device: your progress on a checklist, that you closed a banner, and (until you send the contact form) the first page you visited. Checklist progress and banner choices never leave your browser. Clearing your browser’s site data removes all of it.

Do Not Track, and Global Privacy Control

Some browsers send a Do Not Tracksignal. There is no agreed standard for what a site should do with it, and most sites quietly ignore it. This one does not act on it either — we are telling you that plainly because California law requires a site to say what it does, not because ignoring it is good.

Global Privacy Control is different and we do honour it: if your browser sends a GPC signal, analytics and Meta Pixel are blocked for your visit, even if you previously accepted marketing cookies. Sharing optional pixel activity with Meta for targeted advertising may be considered sharing personal information under applicable privacy laws. Reject marketing cookies, withdraw permission, or enable GPC to opt out of this tracking.

How long we keep it

Contact form submissions arrive as email and stay in our inbox as long as the conversation is useful. Each one is also saved as a record in a database, together with the two items about how you arrived (section 1 above), and kept until you ask us to delete it. Records from the free tools and directory forms (sections 3 and 4 above) are kept in the same database until you ask us to delete them; there is no other customer database behind this website. Analytics data is retained according to Google’s settings for the property, currently 14 months, which is the maximum the free tier allows.

If you subscribe, your details are kept until you unsubscribe. After that we keep only your email address on a “do not email” list, so you’re never emailed again by mistake. Ask, and we’ll delete that too. A subscription that is never confirmed is deleted after 30 days.

What you can ask for

A copy of what we hold about you, a correction, or deletion. Email [email protected]and we will do it — there is no form and no process, because there is one person and a mailbox. Depending on where you live you may have specific statutory rights — under the GDPR or UK GDPR in Europe, the CCPA in California, or a comparable law elsewhere. We will honour the request regardless of which one applies to you, and regardless of whether we are strictly obliged to. It is one person and a mailbox; there is no advantage in doing otherwise. To stop article emails, use the unsubscribe link in any of them. It works in one click, with no login.

Children

This site is for businesses. It is not directed at children, we do not knowingly collect anything from anyone under 13, and we do not knowingly collect anything from anyone under 16 in territories that set the age there. If you believe a child has sent us something, email us and it will be deleted.

Changes

If this policy changes materially, the date at the top changes with it and the previous version is available on request. Governing law: the laws of the State of Missouri, United States.

Ask about any of this →