Privacy

Policy

Privacy Policy

Effective date: May 15, 2026

This Privacy Policy describes how Michael Afonso LLC, doing business as Good Riot Agency ("Good Riot," "we," "us," or "our"), collects, uses, stores, and shares personal information when you visit goodriot.co (the "Site"), submit a form, or otherwise interact with us. By using the Site, you agree to the practices described in this policy.

1. Who We Are

Good Riot Agency is the trade name of Michael Afonso LLC, a United States limited liability company. We are a digital marketing agency providing SEO, paid media, brand strategy, and creative services to business clients. We operate the Site as the data controller for personal information collected through it. Our contact details are at the bottom of this policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information when you choose to give it to us, including:

  • Contact details (name, email address, phone number, company name) submitted through contact forms or project inquiries.
  • Message content and any other information you include when you contact us.
2.2 Information Collected Automatically

When you visit the Site, limited technical information is collected automatically by our hosting provider for the purpose of serving the Site, preventing abuse, and basic operational logging. This may include:

  • IP address and approximate geographic location.
  • Device and browser type, operating system, and screen size.
  • Pages visited and date and time of access.

We do not currently use Google Analytics, advertising pixels, remarketing tags, session replay tools, or third-party behavioral analytics on the Site.

2.3 Information From Third Parties

If you interact with us through a third-party platform (for example, by messaging us on social media or being introduced by a mutual contact), we may receive information from that platform or person in line with their privacy settings.

3. How We Use Information

We use the personal information we collect to:

  • Respond to inquiries, schedule meetings, and provide the services you request.
  • Send transactional communications related to a project or engagement.
  • Operate, maintain, secure, and improve the Site and our services.
  • Comply with legal obligations and enforce our agreements.

4. Legal Bases for Processing (EEA, UK, and Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information under one or more of the following legal bases: your consent; performance of a contract with you; compliance with a legal obligation; or our legitimate interests in operating, marketing, and securing our business, balanced against your rights.

5. Cookies and Similar Technologies

The Site uses only strictly necessary cookies set by our hosting provider (Webflow) for purposes such as serving content, maintaining session state, and preventing abuse. We do not currently set or allow third-party cookies for analytics, advertising, or remarketing on the Site. You can control or block cookies through your browser settings. Disabling strictly necessary cookies may affect Site functionality.

6. Third-Party Services

The following third parties help us operate the Site. They process limited personal or technical information on our behalf or under their own privacy policies:

We do not sell or rent personal information to third parties.

7. How We Share Information

We share personal information only in the following circumstances:

  • With the service providers listed in Section 6, who process it on our behalf under contractual confidentiality obligations.
  • If required by law, subpoena, court order, or other legal process, or to protect the rights, property, or safety of Good Riot, our clients, or others.
  • In connection with a merger, acquisition, financing, or sale of assets, in which case the information would transfer to the successor entity.
  • With your consent or at your direction.

8. Your Privacy Rights

8.1 All Users

You can contact us at any time to access, correct, or request deletion of information we hold about you. Use the contact details in Section 13.

8.2 California Residents (CCPA / CPRA)

If you are a California resident, you have the right to: know what personal information we collect, use, disclose, and sell or share; request deletion of personal information we have collected from you; request correction of inaccurate personal information; opt out of the sale or sharing of personal information (we do not sell personal information); and not be discriminated against for exercising these rights. To exercise these rights, contact us at hello@goodriot.co.

8.3 EEA, UK, and Swiss Residents (GDPR / UK GDPR)

If you are located in the EEA, UK, or Switzerland, you have the right to: access personal information we hold about you; request correction or deletion; restrict or object to processing; receive a portable copy of your data; and withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with your local data protection authority.

9. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, to comply with legal and tax obligations, to resolve disputes, and to enforce agreements. When personal information is no longer needed, we delete or anonymize it.

10. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. International Data Transfers

We are based in the United States. If you access the Site from outside the United States, your information may be transferred to, stored, and processed in the United States and other countries where we or our service providers operate. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

12. Children's Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" at the top of this page. Material changes will be communicated through a notice on the Site or by email where appropriate.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, or if you want to exercise any of your privacy rights, contact us at:

Michael Afonso LLC dba Good Riot Agency
Email: hello@goodriot.co
Website: https://goodriot.co