Privacy and Data Usage Policy

Introduction
R+M, Inc. (“R+M,” “we,” “our,” or “us”) is committed to protecting your privacy. This Privacy & Data Usage Policy outlines the personal data we collect, how we use and protect it, your rights under applicable laws, and how you can exercise those rights. This policy applies to data collected via our website, email lists, and client engagements.

By using our services, you consent to the terms of this policy.

Scope
This policy applies to all users who interact with R+M through our website, social media channels, client services, email marketing, or other means. It also applies to all employees, contractors, and partners involved in managing this data.

Information We Collect
We collect both non-personally identifiable and personally identifiable information (“Personal Data”):

• From Clients:
• Name, email address, phone number, job title, company name
• Business and home mailing addresses
• Project-related communications
• Publicly available data provided by or on behalf of clients
  

• From Website Users & Subscribers:
• Email address and preferences
• Browser type, IP address, device information (via cookies)
• Engagement metrics such as opens and clicks from email tools (e.g., Mailchimp)

Legal Basis for Processing (GDPR)
We process your data based on the following legal bases:

• Your consent
• Performance of a contract
• Our legitimate interests (e.g., business operations, communications)
• Compliance with legal obligations

How We Use Your Information
We use your information to:

• Provide contracted services and communicate with clients
• Improve our website and marketing communications
• Comply with legal obligations and enforce our rights
• Send email updates, newsletters, or invitations with your consent

Data Sharing and Third Parties
We do not sell your data. We share data only:

• With service providers under contract (e.g., Mailchimp, CRM, and project management platforms)
• When required by law (e.g., subpoenas, legal investigations)
• To protect our legal rights, safety, and operations

All vendors we engage are required to comply with data protection standards and confidentiality requirements.

Cookies & Tracking Technologies
We use cookies and similar technologies to:

• Analyze website usage and improve user experience
• Remember user preferences and session data
• Track engagement in email marketing campaigns

You can manage cookie preferences through your browser settings. Restricting cookies may impact functionality.

Email List Privacy
When you subscribe to our email list:

• We collect your name, email address, and engagement data
• We use this information to personalize content and measure effectiveness
• You may unsubscribe at any time via a link in our emails or by contacting holler@rmagency.com

Data Retention
We follow our internal Record Retention and Destruction Policy:

• Client records are retained for five years after project completion
• Contracts and financial data are retained for seven years
• Compliance documents are retained for ten years
• Records are securely destroyed after the retention period

International Data Transfers
Our data processing occurs in the United States. If you are located outside the U.S., by using our services, you consent to your data being transferred to and processed in the U.S., where privacy laws may differ.

Security Measures
We implement administrative, technical, and physical safeguards to protect your data:

• Secure servers and encrypted storage
• Access restricted to authorized personnel
• Ongoing employee training
• No method of transmission is 100% secure, but we use best efforts to protect your information

Children’s Data
R+M does not knowingly collect data from individuals under the age of 18. If such data is discovered, we will delete it promptly.

Your Rights
Depending on your location, you may have the right to:

• Access your data
• Correct inaccurate information
• Request deletion of your data
• Opt out of marketing communications
• Request a portable copy of your data
• Withdraw consent for processing

To exercise your rights under CCPA or GDPR, email holler@rmagency.com with the subject line “Data Access Request.”

Policy Updates
We may revise this policy periodically. Material changes will be communicated via our website or email. Continued use of our services after updates constitutes acceptance of the revised policy.

Contact R+M, Inc. 3915 Beryl Road, Suite 130 Raleigh, NC 27607 Email: holler@rmagency.com