Stevelemus.com
PRIVACY POLICY

01Introduction and Scope

This Privacy Policy ("Policy") governs the collection, use, processing, storage, disclosure, and protection of personally identifiable information and related data by Conceptos Design LLC ("Company," "we," "us," or "our"), a Nevada limited liability company with its principal place of business at 1515 Plumas St, Reno, NV 89509, in connection with your access to and use of https://stevelemus.com/ (the "Website").

This Policy is intended to inform you, as a visitor, user, or client ("you" or "user"), of the Company's data practices and your rights with respect to your personal information. By accessing or using the Website, you acknowledge that you have read, understood, and agree to the terms of this Policy. If you do not agree to this Policy in its entirety, you are directed to discontinue use of the Website immediately.

02Corporate Entities and Data Responsibilities

The Website is operated by Conceptos Design LLC, which serves as the data controller for all personal information collected through the Website and in connection with service engagements. Conceptos Design LLC is responsible for determining the purposes and means of processing personal data obtained through the Website.

Steve Lemus LLC, a Nevada limited liability company, serves as the authorized administrative paying agent of Conceptos Design LLC for purposes of processing and remitting client payments. In that limited capacity, Steve Lemus LLC may receive or process payment-related information, including transaction records and associated billing data, solely to facilitate payment processing on behalf of Conceptos Design LLC. Steve Lemus LLC does not independently collect, use, or control personal information beyond what is strictly necessary to fulfill its role as administrative paying agent. All data governance, retention, and disclosure obligations with respect to personal information collected through this Website remain with Conceptos Design LLC as data controller.

All payment transactions initiated through this Website are processed through Stripe, Inc., a third-party payment processor. Stripe's collection and handling of payment card data and financial information is governed exclusively by Stripe's own Privacy Policy and applicable Payment Card Industry Data Security Standards (PCI DSS). Conceptos Design LLC does not store, retain, or have access to full payment card numbers or other sensitive financial authentication data submitted through Stripe's payment infrastructure.

03Information We Collect

3.1 Personally Identifiable Information

Personally identifiable information ("Personal Information") refers to information that identifies or can reasonably be used to identify a specific individual. The Company collects Personal Information that you voluntarily and affirmatively provide to us through the Website. Categories of Personal Information that may be collected include, without limitation:

• Full legal name
• Mailing address and billing address
• Email address
• Telephone number
• Business name and professional title
• Payment and transaction information, as processed through Stripe, Inc.
• Communications and correspondence submitted through the Website or by email

By submitting Personal Information through this Website, you consent to the Company's collection, use, and processing of that information as described in this Policy. If you provide Personal Information to the Company, you may subsequently elect to have that information deleted from the Company's records, or restricted from use for purposes other than the specific service requested, by following the opt-out procedures set forth in Section 10 of this Policy.

3.2 Website Use Information

The Company automatically collects certain non-personally identifiable information relating to your use of the Website ("Website Use Information"), including without limitation:

• Internet Protocol (IP) address
• Browser type, version, and operating system
• Referring URL and exit pages
• Pages accessed, links clicked, and features used
• Date and time of access
• Session duration and navigation patterns

Website Use Information is used to administer and improve the Website and, in aggregated anonymized form, to conduct statistical analyses of user behavior and characteristics.

3.3 Cookies and Tracking Technologies

The Company uses cookies, web beacons, pixel tags, log files, and similar tracking technologies to optimize and personalize your experience, to monitor site traffic patterns, and to support Website security and functionality. The Company may share, sell, or license cookie data and related tracking information to authorized third-party advertisers and analytics providers. You may configure your browser to refuse cookies; however, doing so may affect the functionality of certain Website features. The Company does not currently respond to browser "Do Not Track" signals.

04Use of Collected Information

The Company uses the information collected through the Website for the following purposes:

• To provide, administer, and fulfill the services and products requested by you
• To process and administer payments through Steve Lemus LLC, as administrative paying agent, via Stripe, Inc.
• To communicate with you regarding your service engagements, account status, and support inquiries
• To send you marketing communications, product and service updates, and promotional materials, where you have consented or where permitted by applicable law
• To operate, maintain, secure, and improve the Website and the Company's service offerings
• To conduct statistical analysis and research on aggregated, anonymized user data
• To enforce the Company's Terms and Conditions and other applicable agreements
• To comply with applicable legal obligations, respond to lawful government requests, and protect the rights and interests of the Company and third parties

05Information Sharing and Disclosure

The Company does not sell, rent, or otherwise transfer your Personal Information to unaffiliated third parties except as expressly described in this Policy or with your prior consent.

5.1 Service Providers and Administrative Agents

The Company may disclose your information to authorized third-party service providers and administrative agents, including Steve Lemus LLC in its capacity as administrative paying agent, and Stripe, Inc. as payment processor. Such third parties are authorized to use your information only to the extent necessary to perform their designated functions and are contractually obligated to maintain the confidentiality and security of your information.

5.2 Marketing and Advertising Partners

The Company may share, license, or sell information collected through the Website to third parties for marketing purposes, including participation in third-party online marketing programs. You may opt out of such sharing as described in Section 10 of this Policy.

5.3 Legal Obligations and Protection of Rights

The Company reserves the right to disclose your information to the fullest extent permitted by applicable law in any of the following circumstances: (a) the Website is being or has been used to commit an unlawful act; (b) the information is subpoenaed or required in a legal proceeding; (c) you have violated or breached an agreement with the Company; (d) you have submitted fraudulent or invalid information; (e) the Company believes you may have caused harm to the Company or others; (f) the Company is acquired, merged, or transferred to another entity; or (g) the Company otherwise determines disclosure is necessary or appropriate. The Company may also disclose your email address to third parties for suppression purposes in compliance with the CAN-SPAM Act of 2003, as amended.

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or substantially all assets involving the Company or Steve Lemus LLC, your Personal Information may be transferred to the successor entity. We will provide notice of any such transfer and any material changes to data practices by updating this Policy and notifying you by email where required by applicable law.

06Data Retention

The Company retains Personal Information for as long as reasonably necessary to fulfill the purposes for which it was collected, including to provide services, maintain business records, comply with legal obligations, resolve disputes, and enforce the Company's agreements. When Personal Information is no longer required for these purposes, the Company will take reasonable steps to delete, anonymize, or de-identify such information in accordance with applicable law. Website Use Information and aggregated analytics data may be retained indefinitely in anonymized form.

07Security of Information

The Company implements and maintains reasonable and appropriate physical, technical, electronic, and administrative safeguards designed to protect Personal Information against unauthorized access, disclosure, alteration, or destruction. Such measures include, without limitation, network monitoring, intrusion detection protocols, and industry-standard Secure Socket Layer (SSL) encryption for the transmission of sensitive information.

No method of transmission over the internet or electronic storage is completely secure. The Company cannot guarantee the absolute security of any information transmitted to or stored by the Company. By electing to communicate with the Company through unsecured channels, you assume the associated risks, and the Company requests that you refrain from transmitting sensitive or confidential information through such means.

08California Consumer Privacy Act (CCPA) Disclosures

The following disclosures apply to residents of the State of California pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA").

8.1 Right to Know

You have the right to request that the Company disclose: (a) the categories and specific pieces of Personal Information collected about you; (b) the categories of sources from which it was collected; (c) the business or commercial purpose for collection, sale, or disclosure; and (d) the categories of third parties to whom it was disclosed.

8.2 Right to Delete

You have the right to request deletion of Personal Information the Company has collected from you, subject to certain exceptions under applicable law, including where retention is necessary to complete a transaction, detect security incidents, comply with a legal obligation, or for other legitimate internal business purposes.

8.3 Right to Correct

You have the right to request correction of inaccurate Personal Information that the Company maintains about you, taking into account the nature of the information and the purposes for which it is processed.

8.4 Right to Opt Out of Sale or Sharing

The Company may sell or share Personal Information with third parties for cross-context behavioral advertising purposes as described in this Policy. You have the right to opt out at any time by contacting the Company at s@stevelemus.com with the subject line "CCPA Opt-Out Request."

8.5 Right to Non-Discrimination

The Company shall not discriminate against you for exercising any of your rights under the CCPA, including by denying services, charging different prices, or providing a different level or quality of service.

8.6 Exercising Your CCPA Rights

To submit a verifiable consumer request, please contact the Company at s@stevelemus.com. The Company will respond within the timeframes required by applicable law and may require identity verification before processing your request.

09General Data Protection Regulation (GDPR) Disclosures

The following disclosures apply to individuals located in the European Economic Area ("EEA"), the United Kingdom, or Switzerland. The Company processes EEA User data as a data controller within the meaning of the General Data Protection Regulation (EU) 2016/679 ("GDPR").

9.1 Legal Basis for Processing

The Company processes Personal Information of EEA Users on the following legal bases: (a) performance of a contract to which you are a party; (b) compliance with a legal obligation; (c) the legitimate interests of the Company or a third party, where not overridden by your fundamental rights; and (d) your consent, where required. Where processing is based on consent, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

9.2 Rights of EEA Users

Subject to applicable data protection law, EEA Users have the following rights with respect to their Personal Information:

• Right of access: to obtain confirmation of whether the Company processes your Personal Information and to receive a copy thereof
• Right to rectification: to request correction of inaccurate or incomplete Personal Information
• Right to erasure: to request deletion of your Personal Information under certain circumstances
• Right to restriction of processing: to request that the Company restrict processing under certain conditions
• Right to data portability: to receive your Personal Information in a structured, machine-readable format and transmit it to another controller
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes
• Right not to be subject to automated decision-making: to not be subject to decisions based solely on automated processing that produces legal or similarly significant effects

To exercise any of the foregoing rights, please submit a written request to s@stevelemus.com. EEA Users also have the right to lodge a complaint with the relevant supervisory authority in their jurisdiction.

9.3 International Data Transfers

The Company is located in the United States. If you are an EEA User, your Personal Information will be transferred to and processed in the United States, which may not provide the same level of data protection as the laws of your jurisdiction. The Company takes reasonable steps to ensure such transfers comply with applicable data protection law and that appropriate safeguards are in place.

10Opt-Out Procedures and Access to Your Information

You may opt out of receiving marketing or promotional communications from the Company at any time by: (a) following the unsubscribe instructions included in any marketing email; or (b) submitting a written opt-out request to s@stevelemus.com with the subject line "Opt-Out Request." Opting out of marketing communications does not affect the Company's right to send service-related or transactional communications necessary to administer your account or engagement.

If you wish to access, review, correct, update, or request deletion of Personal Information the Company holds about you, please submit a written request to s@stevelemus.com. The Company will use reasonable efforts to process such requests in a timely manner and may require identity verification before doing so.

11Children's Privacy

This Website is not directed to children under the age of thirteen (13). In compliance with the Children's Online Privacy Protection Act (COPPA), neither the Website nor its advertising is designed or intended to attract children under the age of thirteen. If the Company becomes aware that it has inadvertently collected Personal Information from a child under the age of thirteen without verifiable parental consent, it will take prompt steps to delete such information. If you believe this has occurred, please contact us immediately at s@stevelemus.com.

12Third-Party Websites and Links

This Website may contain hyperlinks to third-party websites, including websites with which the Company has no affiliation. The Company has no control over, and assumes no responsibility for, the content, privacy practices, or data handling of any third-party website. The inclusion of a hyperlink does not constitute an endorsement by the Company. The Company strongly encourages users to review the privacy policies and terms of use of each third-party website they visit.

13Nevada Privacy Rights

Pursuant to Nevada Revised Statutes Chapter 603A, Nevada residents have the right to submit a verified request directing the Company not to sell their covered information to third parties. To submit such a request, please email s@stevelemus.com with the subject line "Nevada Privacy Rights Request." The Company will respond within the timeframe required under applicable Nevada law.

14Changes to This Privacy Policy

The Company reserves the right to amend, supplement, or otherwise modify this Privacy Policy at any time in its sole discretion. All modifications will be posted to this page with an updated "Last Updated" date. Where required by applicable law, the Company will provide advance notice of material changes, including by email notification. Your continued use of the Website following the posting of any modification constitutes your acceptance of the modified Policy.

15Contact Information

All inquiries, requests, and correspondence regarding this Privacy Policy, including requests to exercise your applicable privacy rights, should be directed to: