Privacy & Cookie Policy

AJ Projects · Last updated: October 11, 2026

This policy explains what information AJ Projects Partners LLC ("AJ Projects," "we," "us") collects when you visit theajprojects.com, how long we keep it, how we use it, and the choices you have, including exactly how to ask us to delete it.

1. Who we are

AJ Projects Partners LLC, a Texas limited liability company, doing business as AJ Projects, of 5830 Granite Pkwy, Suite 100, Plano, TX 75024, is the controller of the personal data described in this policy. You can reach us about anything on this page at concierge@theajprojects.com.

2. Information we collect

We do not run advertising trackers on this site. We do run product analytics and a business-visitor identification service, both described in Section 3. We do not collect special categories of data (such as health, biometric, or financial account information) through it. We do not knowingly collect personal information from anyone under 16; if you believe a child has given us information, email us and we will delete it.

3. Cookies and similar technologies

Company identification, before you choose. When you arrive, we run a business-visitor identification service (RB2B) that uses your network address to work out which organization you are visiting from. We use it to understand which companies our work reaches. This runs on arrival, before you interact with the consent banner.

LinkedIn Insight Tag, on every page view. We run the LinkedIn Insight Tag (partner ID 9993876) on every page of this site apart from our post-workshop kit. It records that a page was viewed and, where LinkedIn can match your browser to a LinkedIn member, allows LinkedIn to report which of our campaigns led to visits and inquiries. It sets LinkedIn's own cookies. This tag is not controlled by the consent banner and runs regardless of the choice you make here. LinkedIn requires the tag to be installed in the page itself and to load on every page view as a condition of using its advertising platform, and AJ Projects Partners follows that instruction to meet those platform requirements. This exception applies to the LinkedIn Insight Tag and to the Meta Pixel described next, and to nothing else on this site; every other tool described here stays under your control through the banner. To limit what LinkedIn does with the data, use LinkedIn's own controls at linkedin.com/psettings/guest-controls, which work whether or not you hold a LinkedIn account.

Meta Pixel, on our home page. We run the Meta Pixel (ID 2107360313194813) on the home page of this site only, and on no other page. We use it to measure which of our Facebook and Instagram advertisements bring people here. It records that the home page was viewed and, where Meta can match your browser to a Facebook or Instagram account, lets Meta report that a person who saw one of our advertisements visited us. It sets Meta's own cookies. This pixel is not controlled by the consent banner and runs regardless of the choice you make here. Meta requires the pixel to be installed in the page itself, in the page head, as a condition of using its advertising platform, and AJ Projects Partners follows that instruction to meet those platform requirements. The pixel reports page views only; we do not send Meta your name, email address, phone number, or any detail you type into a form. To limit what Meta does with the data, use Meta's own controls at accountscenter.facebook.com/ad_preferences, and your browser or device advertising settings, which work whether or not you hold a Facebook or Instagram account.

Product analytics, only if you accept. If you choose Allow Visibility, we also load PostHog, which records how pages are used, pages viewed, links clicked, and, where you submit our contact form, the details you enter, so we can connect your inquiry to your earlier visits. PostHog does not run unless you accept.

What the banner does. The banner has a single action, Allow Visibility, and a link to this policy. Choosing Allow Visibility turns on product analytics and advertising measurement. There is no decline button and no per-category control. If you do not choose Allow Visibility, analytics and advertising measurement do not start, and the banner stays on screen.

What runs before you choose anything. Security, delivering your form and remembering your choice are always on; they do no tracking. Company identification (RB2B) starts on arrival, before you choose. The LinkedIn Insight Tag and the Meta Pixel also run on arrival and are not governed by the banner at all, as described above.

How to stop it. The banner itself offers no way to decline. The way to stop analytics and advertising measurement on this site is a Global Privacy Control signal, which several browsers and extensions send automatically. GPC stops everything our consent layer controls immediately, including company identification, and overrides any earlier acceptance. We treat GPC as a valid opt-out, not a preference, and nothing in the banner can override it. You can also clear this site's data in your browser, which removes the stored choice. There are two exceptions, the LinkedIn Insight Tag and the Meta Pixel: neither a GPC signal nor anything else on this site stops them, because neither is loaded by our consent layer. Use LinkedIn's guest controls and Meta's ad preferences, both linked above, to limit them.

Changing your mind. You can reopen the preferences panel at any time and your new choice replaces the old one.

Storage. We store your choices in your browser's local storage under aj_consent_v2, with aj_consent_v1 kept in step for compatibility. They hold only your category selections and the date. PostHog and RB2B set their own identifiers when they run, the LinkedIn Insight Tag sets LinkedIn's own cookies on every visit, and the Meta Pixel sets Meta's own cookies on every visit to our home page.

If we add or remove a tool in this section, we will update this page and the "Last updated" date above before the change goes live.

4. How we use your information

Our lawful bases under GDPR are contract and legitimate interests (responding to and following up on inquiries you initiate), and legal obligation (records we are required to keep).

5. How we share it

We share personal data only with service providers who process it on our behalf under contract, and only as needed:

We may also disclose information where we are legally required to, or to establish or defend a legal claim. If our business is ever sold or reorganized, personal data may transfer as part of that transaction, and this policy will continue to apply until you are told otherwise.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

6. How long we keep your data

We keep personal data only as long as we need it for the purpose we collected it for, or as long as the law requires. Our standard retention period is 90 days from your last interaction with us. Two categories differ, encrypted backups clear faster, and financial records must be kept longer because the law requires it:

DataHow long we keep it
Contact-form submissions90 days from your last interaction with us
CRM contact and inquiry records (GoHighLevel)90 days from your last interaction, then deleted or de-identified
Email correspondence90 days
Website server and security logs90 days
Client project data handled under a services agreement90 days after the engagement ends, or the period set in that agreement; whichever is shorter
Contracts, invoices, and tax and accounting records7 years, as required by law
Encrypted backupsPurged on a rolling 35-day cycle

If you ask us to delete your data sooner, we will, except where we are legally required to keep it. Section 8 explains how to ask and what happens next.

7. Your privacy rights

If you are in the EEA, the UK, or Switzerland (GDPR): you have the right to access your data, correct it, delete it, restrict or object to how we use it, and receive it in a portable format. Where we rely on legitimate interests, you can object at any time.

If you are in California (CCPA/CPRA): you have the right to know what we collect and why, to delete it, to correct it, to opt out of sale or sharing, and to limit the use of sensitive personal information. We do not sell or share personal information, and we do not collect sensitive personal information through this site, so there is nothing to opt out of or limit, but the right to know, delete, and correct applies fully, and you can exercise it below.

Everyone: we will not discriminate against you for exercising any of these rights, and we never charge for a privacy request.

8. How to make a privacy request, including deletion

Email concierge@theajprojects.com with the subject line "Privacy Request." Tell us two things:

Here is what happens next:

9. Where your data goes

AJ Projects is based in the United States, and our service providers process data in the United States. If you are in the EEA, the UK, or Switzerland, your personal data will be transferred to and processed in the United States. We rely on the European Commission's Standard Contractual Clauses, with the UK International Data Transfer Addendum where applicable, as the transfer mechanism, together with supplementary technical and organizational measures. You can request a copy of the relevant safeguards at concierge@theajprojects.com.

10. Data we handle for our clients

When we deliver services, we may process data on behalf of a client, for example their CRM records, operational data, or documents. For that data, our client is the controller and AJ Projects is the processor: we process it only on the client's documented instructions, under a written services agreement and, where required, a Data Processing Addendum. This policy does not govern that processing.

If you believe a client of ours holds your data, please contact that organization directly. If you contact us instead, we will forward your request to them and confirm to you that we have done so.

11. Security and incidents

We use reasonable technical and organizational measures to protect personal data, including encryption in transit, access controls, multi-factor authentication on our business systems, and least-privilege access to our CRM and email. No system is perfectly secure, and we cannot guarantee absolute security.

If a breach affects your personal data and the law requires notification, we will notify you and the relevant regulator within the required timeframes, under GDPR, that means notifying the supervisory authority without undue delay and within 72 hours where feasible.

12. Governing law

This policy, and any dispute arising out of it, is governed by the laws of the State of Texas, without regard to its conflict-of-laws principles, and the state and federal courts located in Collin County, Texas have exclusive jurisdiction. This does not affect any right you have under the mandatory law of your country of residence to bring a claim, or to complain to a supervisory authority, where you live.

13. Changes to this policy

We may update this policy. When we do, we revise the "Last updated" date at the top. If a change materially affects how we handle personal data we already hold, we will give notice on this page before it takes effect.

14. Contact

AJ Projects Partners LLC, concierge@theajprojects.com. Questions about this policy or your data are welcome.