Privacy Policy
Last updated: November 9, 2026
This Privacy Policy explains what information KNAM Media Group LLC (“KNAM Media”) collects through our website, www.knammedia.com. It explains why we collect it, who helps us process it, how long we keep it, and the choices you have. It also covers the emails and calls that follow when you contact us through the site.
The short version
- We collect what you send us (your name, email, message and any files you upload) so we can answer you and prepare quotes. If you apply for a job, we use your application only to consider you for work with us.
- Files you upload are emailed to us. They are not kept on our web server, and we keep them for 6 months.
- We also collect basic technical information (such as IP address, browser type and pages visited) to run, secure and improve the site.
- We do not sell your personal information, and we do not share it for targeted advertising.
- We have no online store, take no payments on the site, and offer no customer accounts, comments, newsletters or text-message programs.
- You can ask us to show, correct or delete your information at any time by emailing [email protected].
Who we are
KNAM Media is a vehicle wrap, signage and graphics company located at 20 15th St, Brooklyn, NY 11215, USA. In this policy, “we,” “us” and “our” mean KNAM Media. We decide how the information described in this policy is used. Use of our website is also governed by our Terms & Conditions.
Information we collect
Information you give us
- Contact form (in the site footer and at the bottom of our service pages): your name, email address and message.
- Quote request form (on our Contact and About pages): your name, email address, message, any files you choose to upload (for example artwork, logos, or photos of a vehicle, window or wall), and your answer to “How did you hear about us?”
- Job applications (on our Join Our Team page, or by email): your name, email address, message, your answer to “How did you hear about us?”, and any résumé, cover letter or other files you attach. Those files may include your phone number, address, work history, education, skills and references. See Job applicants below.
- Emails and phone calls. If you email or call us, we receive whatever you choose to share, such as your phone number, business name, project details and photos.
How uploaded files reach us. Files you upload through our forms are emailed to our business inbox at [email protected] as attachments. They are not kept on our web server. Files uploaded before we made this change are held in private storage on our server that cannot be reached from the web. All uploaded files follow the same 6-month retention period (see How long we keep information).
Please don’t include sensitive information in forms or uploads, such as Social Security or driver’s license numbers, payment card or bank details, date of birth, or health or disability information. We don’t need it to quote a job or to review a job application.
Information collected automatically
- Server and security logs. When your browser requests a page, our web server and security tools record your IP address, browser and device type (user agent), the referring page, and the date and time. They also record the pages and files requested, including any words you type into our site search.
- Site statistics. We use Google Analytics to understand how visitors use the site. It shows us which pages are viewed, how long visits last, roughly where visitors are located (city or region, estimated from IP address), and what device and browser they use. See Google Analytics below.
- Spam and bot protection. Google reCAPTCHA protects our contact and quote forms. Its script loads on every page, because the contact form is in the site footer. It collects information about your device, browser and interaction with the page to tell people from bots. Those forms also include a hidden “honeypot” field that catches automated spam and collects no personal information. See Google reCAPTCHA below.
- Network security. Our site is delivered through Cloudflare, which processes visitor IP addresses and may set security cookies to block attacks and malicious bots.
- Cookies. See Cookies below for the full list.
Content loaded from Google
Some pages show content that your browser loads directly from Google. When that happens, Google receives your IP address and browser information and may set its own cookies:
- Google Maps, in a map of our location on our Contact page.
- Google reviews, shown in a review slider on our home page. These are public reviews. Reviewer names and profile photos are loaded from Google.
- YouTube videos on a few pages. Depending on the page, the YouTube player loads when the page opens or when you press play. YouTube (owned by Google) then receives your IP address and browser information and may set its own cookies.
What we don’t collect
We don’t collect payment information on the site and we don’t create user accounts. We don’t ask for sensitive personal information such as government ID numbers, financial account details, health information or precise geolocation. If someone sends it to us anyway, we use it only as needed to respond and delete what we don’t need.
How we use your information
| Purpose | Information used | Why we’re allowed to |
|---|---|---|
| Answer you, prepare quotes, and plan and carry out your project | Form entries, uploaded files, emails, call details | You asked us to, before and under a contract |
| Follow up about a quote or a job you asked about | Name, email, project details | Our legitimate interest in serving customers who contacted us |
| Review job applications and contact applicants | Application entries, résumés and attached files, our interview notes | Steps you asked us to take before a possible job offer, and our legitimate interest in hiring |
| Keep the site and our forms safe, and block spam, fraud and attacks | IP address, user agent, request logs, reCAPTCHA signals, Cloudflare security data | Our legitimate interest in security, and our duty to protect the information we hold |
| Understand how the site is used and improve it | Google Analytics site statistics | Our legitimate interest in running a useful website |
| Learn how customers find us | “How did you hear about us?” answers | Our legitimate interest in knowing which marketing works |
| Keep business records, meet legal obligations and handle disputes | Project correspondence and records | Legal obligations, and our legitimate interest in protecting our rights |
We don’t send newsletters or marketing email lists. If we ever start one, it will be opt-in only and every message will include an unsubscribe link.
Who we share information with
We share personal information with the service providers below, which help us run the website and our business, and only as needed for the purposes above. We don’t give them your information so they can market to you. Some of them, such as Google when it shows maps, reviews or videos, also act under their own privacy policies, as explained below the table.
| Provider | What they do for us | Information involved |
|---|---|---|
| Google (Google Workspace / Gmail) | Business email. Contact, quote and job-application form submissions, including any files you upload, are emailed to our inbox at [email protected]. | Form entries, uploaded files (sent as email attachments), job applications and email correspondence |
| Google (Google Analytics, through Google Site Kit) | Website statistics | Analytics cookies, device and browser data, pages viewed, approximate location |
| Google (reCAPTCHA) | Spam and bot protection on our forms | Device, browser and page-interaction data, IP address |
| Google (Maps, reviews, YouTube) | Showing our map, public reviews and videos | IP address and browser data when the content loads |
| Cloudflare, Inc. | Content delivery network, DDoS and bot protection | IP address, request data, security cookies |
| Amazon Web Services (AWS) | Hosts our website and its database, including stored form submissions, on servers in the eastern United States (Virginia). Older uploaded files are held there in private storage that cannot be reached from the web. | Website data, form submissions and those older uploaded files |
| Wordfence (Defiant, Inc.) | Security plugin on our server: firewall, login protection and malware scanning | IP addresses, user agents, requested URLs and timestamps. Some security data, such as IP addresses involved in blocked attacks, may be sent to Wordfence for its threat-intelligence features. |
We may also disclose information:
- When the law requires it, for example in response to a valid subpoena or court order, or to protect the rights, safety or property of our customers, the public or KNAM Media.
- To professional advisers, such as our accountants or lawyers, who are bound by confidentiality.
- If our business is sold or merged. The information would transfer to the new owner, who would have to keep honoring this policy for information collected under it.
Some of these providers (for example Google, through Google Analytics, Maps and YouTube) may collect information about your activity over time and across different websites, under their own privacy policies. You can read how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.
Cookies
Cookies are small text files a website saves in your browser. We use as few as we can. The table below lists the cookies our site may set, or that third-party services on it may set.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Statistics: tells one visitor from another | 2 years |
| _ga_MZ82H9GPFE | Google Analytics | Statistics: tracks the current visit | 2 years |
| _GRECAPTCHA | Google reCAPTCHA | Security: tells people from bots on our forms | About 6 months |
| __cf_bm | Cloudflare | Security: manages bot traffic | 30 minutes |
| cf_clearance | Cloudflare | Security: remembers that your browser passed a security check | 30 minutes |
| YSC, VISITOR_INFO1_LIVE and other YouTube cookies | YouTube (Google) | Set when a video player loads, for example to count views and remember player settings | End of session to about 6 months |
| NID and other Google cookies | Google (Maps) | Set when our map loads, for example to remember preferences and for security | Up to about 6 months |
Our own staff also receive login cookies when they sign in to manage the site. Visitors don’t get these.
If you visit from the EU, EEA, UK or Switzerland, our site tells Google not to store analytics or advertising cookies on your device (Google “consent mode”), so the Google Analytics cookies above are not set. Google may still receive basic, cookieless information about the visit.
Your choices. You can block or delete cookies in your browser settings. Blocking the security cookies may stop our forms from working, and you may be shown extra security checks. Blocking analytics cookies won’t affect how the site works.
Google Analytics
We use Google Analytics 4, through Google Site Kit, for site statistics only. Site Kit also adds a Google tag (GT-TWDJLJ4) that sends data to our Google Analytics property. Google Analytics uses cookies to collect information such as pages visited, time on the site, device and browser type, and approximate location. Google says it uses IP addresses to estimate location but does not log or store them in Google Analytics 4.
We see this information in aggregate reports. We don’t use it to identify you, and we don’t combine it with what you enter in our forms. We don’t use analytics data to sell or share personal information. Google Analytics keeps visitor-level data for up to 14 months.
To stop Google Analytics from collecting data about your visits on any website, install the Google Analytics Opt-out Browser Add-on. You can also block analytics cookies in your browser.
Google reCAPTCHA
This site is protected by reCAPTCHA. Our contact and quote forms use Google reCAPTCHA v3. It runs in the background and checks signals such as your device and browser settings, IP address and how you interact with the page, to decide whether a submission comes from a person or a bot. We use it only for security and spam prevention. Google processes this information on our behalf, as our service provider, only to provide, maintain and protect the reCAPTCHA service.
Do Not Track and Global Privacy Control
Do Not Track. Some browsers can send a “Do Not Track” (DNT) signal. There is no common industry standard for responding to it, so our site doesn’t change its behavior when it receives one. We don’t track visitors across other companies’ websites. As explained above, Google may collect information about your activity over time and across different websites through the Google services used on our site.
Global Privacy Control. Global Privacy Control (GPC) is a browser setting that tells websites not to sell or share your personal information. We don’t sell or share personal information for targeted advertising, so there is nothing for GPC to switch off. If that ever changes, we will update this policy first and honor GPC signals as an opt-out request.
How long we keep information
We keep personal information only as long as we need it for the purposes in this policy, then delete it or make it anonymous.
| Information | How long we keep it |
|---|---|
| Contact and quote requests that don’t become a project | 24 months after our last contact with you |
| Correspondence and records for projects we carry out | The project, then 7 years for tax and accounting purposes |
| Files you upload with a contact or quote request | 6 months. After that we may delete them, and we can’t guarantee they will still be available, so please keep your own copies. |
| Job applications and résumés, including attached files | Up to 1 year after we receive them. If we hire you, your application becomes part of your employment records. |
| Spam and bot submissions | Deleted when identified, and at least monthly |
| Web server and Wordfence security logs | About 30 days. Records of a specific attack may be kept longer while we investigate it. |
| Google Analytics visitor-level and event-level data | Up to 14 months. Aggregate reports are kept longer. |
| Server backup snapshots | About 7 days before they are replaced |
| Cookies | See the cookie table above |
We may keep information longer if the law requires it, or if it’s needed to resolve a dispute or enforce our agreements.
How we protect information
We use administrative, technical and physical safeguards designed to protect the information we hold, appropriate to the size of our business and the sensitivity of the information. These include:
- encrypted (HTTPS) connections between your browser and our site;
- Cloudflare network protection and the Wordfence firewall, with login security for administrator accounts;
- sending files uploaded through our forms to our business email instead of keeping them on the web server;
- limiting access to form submissions, uploaded files and job applications to staff who need them; and
- applying security updates to our website software, and deleting information we no longer need, as set out in the retention table above.
No website or email system is completely secure, so we can’t guarantee absolute security. If a breach of security exposes your private information, we will notify you and the authorities as the law requires. For New York residents, that means notice within 30 days of discovering the breach, unless law enforcement asks us to delay. We will also follow the notice laws of the state where you live.
Your choices and rights
Whatever state or country you live in, you can ask us to:
- tell you what personal information we hold about you and send you a copy;
- correct information that is wrong or out of date;
- delete your information, unless we have to keep it (for example, records of a completed job that we must keep for tax purposes); and
- stop contacting you about a quote or project.
How to make a request: email [email protected] with “Privacy request” in the subject line, or call (347) 389-5626. To protect your information, we will confirm your identity first, usually by checking that the request comes from the email address you used to contact us. You can have an authorized agent make the request for you. We will ask for proof that they are authorized.
We aim to respond within 30 days and will reply no later than 45 days after receiving your request. If we can’t fully meet a request, we will explain why, and you can reply to ask us to reconsider. We won’t treat you differently or charge you more for making a request.
Job applicants
If you apply for a job through our Join Our Team page or by email, your application reaches us by email. We use your application, résumé and any other files you send only for hiring: to review your application, contact you about it, check any references you give us, and keep records of our hiring decisions. We don’t use applicant information for marketing. We share it only with the service providers listed above (for example, our email provider) and with people you have told us we may contact, such as your references.
We keep applications for up to 1 year after we receive them. If we hire you, your application becomes part of your employment records. You can ask us at any time to withdraw your application and delete your information, except records the law requires us to keep.
Please don’t include your Social Security number, date of birth, driver’s license or other ID numbers, bank details, or health or disability information in your application. If we need any of these after making you an offer, for example for tax or work-eligibility forms, we will ask for them separately.
California residents
California Consumer Privacy Act (CCPA). The CCPA, as amended by the CPRA, applies only to for-profit businesses that meet at least one of these tests:
- annual gross revenue above $26,625,000 in the prior calendar year (the figure for 2025 and 2026; California adjusts it for inflation every two years);
- buying, selling or sharing the personal information of 100,000 or more California consumers or households each year; or
- earning 50% or more of annual revenue from selling or sharing personal information.
KNAM Media is a small New York business and does not meet any of these tests, so the CCPA does not currently apply to us. Even so, we want California visitors to know:
- In the past 12 months we have collected these categories of personal information: identifiers (name, email address, phone number, postal address, IP address); the content of your messages and any photos or files you send; records of the services you asked about; professional, employment and education information (from job applicants); internet activity (pages visited, browser and device data); and approximate location estimated from IP address.
- We collected it from you and from your device, for the purposes described in “How we use your information,” and shared it only with the service providers listed in “Who we share information with.”
- We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past 12 months, and we have no actual knowledge of selling or sharing the personal information of anyone under 16.
- We don’t ask for sensitive personal information, and we don’t use or disclose any we receive to infer characteristics about you.
- You can make the requests described in “Your choices and rights,” and we will honor them.
California Online Privacy Protection Act (CalOPPA). This policy describes the categories of personal information we collect, who we share it with, how you can review and correct it, how we respond to Do Not Track signals, whether others may collect information about your activity across websites, how we tell you about changes, and its effective date.
“Shine the Light” (Cal. Civ. Code § 1798.83). We don’t disclose personal information to third parties for their own direct marketing.
Residents of other U.S. states
Several states, including New Jersey and Connecticut, have consumer privacy laws. New Jersey’s law applies to businesses that handle the personal data of at least 100,000 New Jersey consumers a year, or at least 25,000 if they also earn money or discounts from selling personal data. Since July 1, 2026, Connecticut’s law applies to businesses that handle the personal data of at least 35,000 Connecticut consumers, that sell personal data, or that process “sensitive data” such as government ID numbers or health information. Both laws exclude information about job applicants and about people acting for a business.
We don’t believe these laws currently apply to us. We serve far fewer people, we don’t sell personal data, and we ask you not to send us sensitive data. Whether or not they apply, we offer the rights described in “Your choices and rights” to everyone, and we don’t sell personal information or use it for targeted advertising.
Visitors from the EU, EEA, UK and Switzerland
Our services are offered in the New York, New Jersey and Connecticut area, and our website is not directed to people outside the United States. If you visit from Europe or the UK, your information will be processed in the United States, where data protection laws may differ from yours. We do not set Google Analytics cookies for visitors from these countries (see Cookies).
The legal bases we rely on are listed in “How we use your information.” Depending on where you live, you may have the right to access, correct or delete your personal information, to restrict or object to its processing, and to receive it in a portable format. You may also complain to your local data protection authority. To exercise these rights, contact us as described below.
Children’s privacy
Our website and services are for businesses and adults. They are not directed to children under 13, and we don’t knowingly collect personal information from children under 13, consistent with the Children’s Online Privacy Protection Act (COPPA). If you believe a child has sent us personal information, contact us and we will delete it.
Links to other websites
Our site links to other websites, including our profiles on Facebook, X (Twitter), Instagram, Yelp, the Better Business Bureau and Google Business Profile, and, in some blog posts, YouTube and Pinterest. Once you leave our site, the other website’s privacy policy applies, not this one. We’re not responsible for how other sites handle your information.
Changes to this policy
This policy is effective as of November 9, 2026. We may update it when our practices, our service providers or the law change. We will post the updated version on this page and change the “Last updated” date at the top. If we make a material change to how we use personal information we already hold, we will also post a notice on our website before the change takes effect and, where the law requires it, ask for your consent.
Contact us
If you have questions about this policy or want to make a privacy request, contact:
- KNAM Media Group LLC
- Address: 20 15th St, Brooklyn, NY 11215, USA
- Phone: (347) 389-5626
- Email: [email protected]
- Hours: Monday to Friday, 10:00 a.m. to 6:00 p.m.