Privacy Policy
Last Updated: May 28, 20261. Introduction
Josh Vamos Audio Post-Production ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit joshvamos.com and use our contact form.
- We only collect personal data you voluntarily provide via our contact form
- We use Google Analytics and Microsoft Clarity for website analytics — off by default, requires your consent
- We use Meta, LinkedIn, Impact.com, and B&H/Bormerco for marketing and affiliate tracking — off by default, requires your consent
- Some posts contain affiliate links — see §11 and our Affiliate Disclosure
- We track behavioral metrics on form submissions to prioritize inquiries (no keystroke logging, no heatmaps)
- We never sell your data; California residents can opt out of "sharing" via §7.2
- You can change consent at any time via the Cookie Settings link in the Legal menu
2. Information We Collect
2.1 Contact Form Data (Voluntarily Provided)
When you submit our contact form, we collect:
- Personal Information: Name, email address
- Project Information: Project type, budget status, timeline, inquiry message
- Behavioral Analytics: Time spent on form, field interaction patterns, revision counts, completion order, device viewport, referrer source
2.2 Automatic Data Collection (Cookies & Analytics)
We use Google Analytics 4 to understand how visitors use our website:
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
| _ga | Distinguishes unique users | 2 years | Analytics |
| _ga_MWDN1W915Z | Maintains session state | 2 years | Analytics |
| _gid | Distinguishes users (short-term) | 24 hours | Analytics |
What Analytics Track: Page views, session duration, geographic location (city-level), device type, referrer source, form submission events, lead quality metrics.
3. How We Use Your Information
3.1 Contact Form Submissions
- Respond to Inquiries: Contact you about your project request
- Lead Prioritization: Use behavioral analytics to prioritize urgent/high-quality leads
- Service Improvement: Analyze form completion patterns to improve user experience
3.2 Website Analytics
- Traffic Analysis: Understand which pages are most visited
- User Behavior: Identify how visitors navigate the site
- Performance Optimization: Improve site speed and usability
- Marketing Effectiveness: Measure which referrer sources bring quality leads
4. Behavioral Analytics & Lead Scoring
Our contact form includes a lead scoring system to help us prioritize responses. This system analyzes:
- Time spent on the form (page load to submission)
- Number of revisions made to each field
- Order in which fields were completed
- Whether optional fields were filled
- Device viewport size and referrer source
- Keystroke logging or character-by-character input
- Mouse movement tracking or heatmaps
- Content of messages during typing (only final submission)
- Personally identifiable behavior patterns
Purpose: This data helps us identify urgent inquiries and respond faster to serious project requests. High-priority leads (confirmed budget + urgent timeline) receive responses within 4 hours.
5. How We Share Your Information
5.1 Service Providers
We use the following third-party services. Where a service falls under our cookie consent system, the relevant Klaro category is noted (see §7.1).
- SendGrid (Twilio): Email delivery for contact form submissions
Data shared: Name, email, message content, behavioral metrics
Klaro category: Essential (contact form delivery)
Privacy: Twilio Privacy Policy - Google Analytics 4: Website analytics and user behavior tracking
Data shared: Anonymous usage data, page views, events
Klaro category: Analytics (off by default; requires consent)
Privacy: Google Privacy Policy - Microsoft Clarity: Session replay and behavioral heatmaps (masked content)
Data shared: Anonymized session interaction data
Klaro category: Analytics (off by default; requires consent)
Privacy: Microsoft Privacy Statement - Meta Pixel: Conversion tracking for Meta advertising platforms
Data shared: Page views, conversion events
Klaro category: Marketing (off by default; requires consent)
Privacy: Meta Privacy Policy - LinkedIn Insight Tag: Conversion tracking for LinkedIn advertising
Data shared: Page views, conversion events
Klaro category: Marketing (off by default; requires consent)
Privacy: LinkedIn Privacy Policy - Impact.com (Impact Tech, Inc.): Affiliate tracking for software and SaaS partner brands
Data shared: Affiliate link clicks, conversion attribution data
Klaro category: Marketing (off by default; requires consent)
Privacy: Impact.com Privacy Policy - MyAffiliateProgram (Bormerco LLC) — B&H Photo: Affiliate tracking for B&H Photo Video Pro Audio
Data shared: Affiliate link clicks, conversion attribution data
Klaro category: Marketing (off by default; requires consent)
Privacy: B&H Privacy & Security Policy - Cloudflare: CDN, DNS, and Web Application Firewall (WAF)
Data shared: IP address, request metadata (security and performance)
Klaro category: Essential (security infrastructure)
Privacy: Cloudflare Privacy Policy - HostGator: Web hosting provider
Data shared: All website data (standard hosting)
Klaro category: Essential (hosting infrastructure)
Privacy: HostGator Privacy Policy
5.2 We Never
- Sell your personal information to third parties
- Share your data with advertisers
- Use your email for unsolicited marketing
- Store credit card or payment information (we don't process payments)
6. Data Retention
- Contact Form Submissions: Stored in email (Gmail retention policy applies — indefinite until deleted)
- Google Analytics Data: Retained for 26 months (GA4 default)
- Behavioral Analytics: Included in email notifications, not stored in a separate database
You may request deletion of your contact form submission data at any time by emailing [email protected].
7. Your Rights & Choices
7.1 Cookie Consent (Klaro)
This site uses the open-source Klaro consent management platform. Cookies and trackers are grouped into three categories:
| Category | Default State | What's Included |
|---|---|---|
| Essential | Always on (no consent required) | Klaro itself, session cookies, CSRF tokens, Cloudflare security, HostGator hosting |
| Analytics | Off by default — requires opt-in | Google Analytics 4, Microsoft Clarity |
| Marketing | Off by default — requires opt-in | Meta Pixel, LinkedIn Insight Tag, Impact.com affiliate tracking, B&H / Bormerco affiliate tracking |
You can accept or decline each category independently. Refusing is as easy as accepting — the "Reject All" and "Accept All" buttons are equally prominent. Declining Marketing cookies will:
- Disable all affiliate tracking (no commission will be attributed to joshvamos.com if you make a purchase via an affiliate link)
- Disable Meta and LinkedIn conversion pixels
- Not affect contact form functionality
- Not prevent you from using the website or reading any content
You can change your consent at any time via the Cookie Settings link in the Legal menu at the bottom of every page, or via the Legal column in the site footer. Withdrawing consent immediately stops the affected trackers — no page reload required.
7.2 Do Not Sell or Share My Personal Information (CCPA / CPRA)
Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), affiliate tracking and certain advertising cookies may constitute a "sale" or "sharing" of personal information.
To exercise your right to opt out of the sale or sharing of your personal information:
- Open the Cookie Settings from the Legal menu and disable the Marketing category, OR
- Email us at [email protected] with the subject line "Do Not Sell or Share My Personal Information" — we will honor the request within 15 business days and confirm in writing.
We will not discriminate against you for exercising this right. Service quality, access to content, and pricing will not change based on your opt-out status.
7.3 Browser Settings
You can also manage cookies through your browser settings:
- Chrome: Settings → Privacy and Security → Cookies
- Firefox: Settings → Privacy & Security → Cookies
- Safari: Preferences → Privacy → Cookies
- Edge: Settings → Cookies and site permissions
Browser-level Do Not Track (DNT) and Global Privacy Control (GPC) signals are respected by this site where technically supported by the underlying tracker.
7.4 Data Access & Deletion (GDPR / CCPA / PIPEDA Rights)
Under GDPR (EU/UK), CCPA (California), PIPEDA (Canada), and Quebec's Loi 25, you have the right to:
- Access: Request a copy of data we hold about you
- Correction: Request correction of inaccurate data
- Deletion / Right to be Forgotten: Request deletion of your personal data
- Restriction: Request that we limit how we process your data
- Portability: Request a machine-readable export of your data
- Objection: Object to processing based on legitimate interests
- Withdrawal of Consent: Withdraw consent for any non-essential processing, as easily as it was given
- Non-Discrimination (CCPA): Receive equal service regardless of whether you exercise your privacy rights
To exercise these rights, contact us at [email protected]. We acknowledge requests within 48 hours and substantively respond within 30 days (extendable by an additional 30 days where reasonably necessary, with notice).
8. Data Security
We implement security measures to protect your information:
- HTTPS Encryption: All data transmitted over secure SSL/TLS
- API Key Protection: SendGrid credentials stored in secure config files (excluded from version control)
- Spam Prevention: Honeypot fields to prevent bot submissions
- Input Sanitization: All form data sanitized to prevent injection attacks
However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
9. Children's Privacy
Our website is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child, please contact us immediately.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own. All identified processors are based in the United States:
- SendGrid / Twilio (US): Email processing servers
- Google Analytics 4 (Global, US-headquartered): Analytics data processed in Google's global infrastructure
- Microsoft Clarity (US): Session replay and heatmap data
- Meta (US): Pixel conversion data
- LinkedIn (US): Insight Tag conversion data
- Impact Tech, Inc. (US): Affiliate tracking — Santa Barbara, California
- Bormerco LLC / MyAffiliateProgram (US): B&H Photo affiliate tracking
- Cloudflare (US): CDN, DNS, and WAF
- HostGator (US): Web hosting
These transfers are protected by appropriate safeguards including (as applicable to each processor): EU Standard Contractual Clauses (SCCs), UK International Data Transfer Agreement (IDTA), and the EU-U.S. Data Privacy Framework where the processor is certified. For Canadian residents, these cross-border transfers are disclosed in compliance with PIPEDA accountability requirements and Quebec's Loi 25.
11. Affiliate Links & Material Connections
Some posts on this site — typically gear reviews, software walkthroughs, and workflow articles — contain affiliate links. If you click an affiliate link and make a purchase, Josh Vamos may earn a small commission at no additional cost to you.
11.1 Affiliate networks we participate in
This site participates in the following affiliate programs:
- Impact.com — operated by Impact Tech, Inc. (Santa Barbara, CA, USA). Provides affiliate tracking for a range of software and SaaS brands. Privacy policy: impact.com/privacy-policy
- B&H Photo Video Pro Audio — administered by MyAffiliateProgram, owned by Bormerco LLC, on behalf of B & H Foto & Electronics Corp. (New York, NY, USA). Privacy policy: bhphotovideo.com privacy & security policy
Note: B&H Photo's affiliate program is not administered through Impact.com or Avantlink. The correct platform is MyAffiliateProgram, operated by Bormerco LLC. If you encountered an earlier version of this page suggesting otherwise, this section corrects that.
11.2 What data the networks receive
When you click an affiliate link and the Marketing cookie category is enabled (see §7.1), the affiliate network may receive:
- The link you clicked and the time of the click
- Your IP address and approximate geographic location
- Your browser, device type, and operating system
- The referring page on joshvamos.com
- If you complete a purchase: order ID, order value, and product category (but not your name, billing address, or payment details — those stay with the retailer)
joshvamos.com does not receive your personal information from these networks. We receive aggregated reports showing which links generated clicks and commissions.
11.3 Where this applies
Every post containing affiliate links carries a clearly visible disclosure block at the top, before any affiliate link appears. Every affiliate link is tagged with rel="sponsored noopener" per Google's webmaster guidelines and FTC endorsement-guide requirements.
11.4 What this means in practice
- Reviews reflect actual use of the product — we do not recommend gear we have not personally worked with.
- Affiliate income does not influence the verdict of a review. Items that disappointed in use will be flagged as such.
- Most gear featured was purchased at full retail; in the rare case a unit was provided for review, that will be explicitly stated in the article.
- Clicking an affiliate link may set a tracking cookie that the affiliate network uses to attribute a sale back to this site. You can decline this via our cookie consent banner before clicking through, or by adjusting your browser cookie settings.
This disclosure is provided in compliance with the U.S. Federal Trade Commission's guidance on endorsement disclosures (16 CFR Part 255), EU and UK consumer protection equivalents, the Canadian Competition Bureau's guidance on influencer marketing, and Australian Consumer Law requirements.
For the complete affiliate disclosure with full detail on how recommendations are made, see our Affiliate Disclosure page.
12. Privacy Officer (Quebec Law 25 / PIPEDA)
In compliance with Quebec's Loi 25 (modernizing personal information protection) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), the designated Privacy Officer for this site is:
Email: [email protected] (alias of [email protected])
Responsible for receiving and responding to access, deletion, correction, withdrawal-of-consent, and complaint requests.
If you are a Quebec resident, you have the right under Loi 25 to:
- Request access to personal information held about you
- Request correction or deletion
- Withdraw consent for data processing at any time, as easily as it was given
- Be informed of cross-border transfers (this site transfers analytics + affiliate tracking data to the United States via Google, Meta, LinkedIn, Microsoft Clarity, Impact.com, and Bormerco LLC / MyAffiliateProgram — full list in §5 and §10)
- File a complaint with the Commission d'accès à l'information du Québec if your request is not handled to your satisfaction
Response time commitment: 30 days, with the right to extend by an additional 30 days if reasonably necessary, with notice to you.
13. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Significant changes will be highlighted via:
- Updated cookie consent banner
- Notice on the contact form
- Email notification (for existing contacts who consented)
14. Contact Us
If you have questions about this Privacy Policy or our data practices:
Email: [email protected]
Website: www.joshvamos.com
We will respond to privacy inquiries within 48 hours.
15. Legal Basis for Processing (GDPR)
For EU/UK visitors, our legal bases for processing your data are:
- Consent: You voluntarily submit the contact form (Article 6(1)(a))
- Legitimate Interests: Website analytics to improve services (Article 6(1)(f))
- Contract Performance: Processing inquiries for potential service agreements (Article 6(1)(b))