Privacy policy

Who we are

IronPlane, LLC is a Magento and Adobe Commerce agency based in Portland, Maine. We are the company responsible for the personal data described in this policy. Our mailing address is PO Box 5019, Portland, Maine 04101. For anything about your data, email privacy@ironplane.com.

Snowdog sp. z o.o. in Poznań, Poland, is our wholly owned subsidiary, and our teams work together. Snowdog runs snow.dog under its own privacy policy. If you apply for a job with us, our recruitment privacy notice applies instead of this policy.

What we collect

• When you fill in a form on our site (contact, free assessment, careers): your name, email address, company, phone number if you give it, and your message.
• When you email, call or meet us: your contact details, your role and company, and what we discuss.
• When you become a client: the contact and billing details we need to run the contract and invoice you. Invoices are sent through QuickBooks; if you pay by card, Intuit processes the card details and we don't see or store your full card number.
• When you browse the site: technical data such as the pages you view, how you arrived, your device and browser, and your approximate location, through the tools listed under Cookies and tracking.

We also get business contact details, such as your name, role, company and work email, from business data providers like Apollo, so we can reach people at companies that may need our services. You can ask us to stop at any time.

We don't ask for sensitive data such as health or financial account details, and please don't send it in a form.

Cookies and tracking

We use a small set of tools: one to keep our forms free of spam, one for analytics, and one that tells our sales team which companies visit. Visitors in the EU, the UK and Switzerland see a cookie banner, and analytics and marketing tools load only after they accept them; they can change their choice at any time through Cookie preferences. Everyone else can turn these tools off by blocking cookies in their browser or with Google's Analytics opt-out browser add-on.

Essential

• Google reCAPTCHA, inside our forms: checks that a form is sent by a person, not a bot. Google sets its cookies when the form loads.
• Webflow, our website host: serves the site and keeps standard server logs, such as IP address and browser, for security and reliability. It sets no cookies for visitors.

Analytics

• Google Analytics 4, provided by Google: shows us how the site is used, such as pages viewed, how people arrived and which forms get sent. The _ga and _ga_ZJ2GEQM8GT cookies last up to 2 years. Google Analytics keeps this data for 14 months.

Marketing

• Pipedrive Web Visitors, powered by Leadfeeder: identifies the companies whose networks visit our site, so our sales team can follow up with businesses that show interest. It identifies companies, not individual people. The _lfa cookie lasts up to 2 years, with _lfa_expiry in local storage.

We don't run advertising, remarketing or social media pixels on ironplane.com. If we add one, we'll list it here first. Videos from YouTube embedded in our blog posts can set YouTube's own cookies when you play them.

How we use your data

• To answer your enquiry, run the free assessment and prepare a proposal.
• To deliver the work under our contract with you or your company, and to invoice for it.
• To follow up on your enquiry and keep in touch about our services. You can ask us to stop at any time.
• To understand how the site is used and which companies show interest, so we can improve it and follow up.
• To keep the site and our forms secure and free of spam.
• To keep the records the law requires, and to establish or defend legal claims.

Who sees it

The people at IronPlane who need it, and colleagues at Snowdog sp. z o.o., our subsidiary in Poland, who work on the same accounts and share our CRM.

Our service providers process data for us under contract: Pipedrive (CRM, web forms and Web Visitors), Apollo (business contact data and sales email), Google (Analytics and reCAPTCHA), Intuit QuickBooks (invoicing and card payments), Webflow (website hosting), Finsweet (the Consent Pro cookie banner), and our email and file storage providers.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising. We give it to public authorities only when the law requires us to. If IronPlane is merged, sold or reorganized, your data may pass to the new owner under this policy.

How long we keep it

• Enquiries and sales conversations: 3 years after our last contact, unless you become a client.
• Client contacts and project records: for as long as we work together, then until the period for bringing legal claims has ended.
• Accounting records: 7 years.
• Analytics data: 14 months in Google Analytics. Cookie lifetimes are listed above.
• If you ask us to delete your data, we do so sooner, unless we need it to meet a legal obligation or defend a claim.

Security

We limit access to the people who need it, use providers with established security programs, and encrypt data in transit on our site. No system is perfectly secure; if we learn of a breach that affects you, we'll tell you as the law requires.

Children

Our site and services are for businesses. They aren't meant for anyone under 16, and we don't knowingly collect data from them. If you believe we have, email privacy@ironplane.com and we'll delete it.

Your choices and rights

Everyone

You can turn off analytics and marketing tools by blocking cookies in your browser; visitors in the EU, the UK and Switzerland can also use Cookie preferences. You can ask us to stop following up about our services, and we will. You can ask what data we hold about you, and ask us to correct or delete it, by emailing privacy@ironplane.com.

US residents

Depending on the state you live in, you may have the right to know what personal data we collect and how we use it, to get a copy of it, to correct it, to delete it, and to opt out of its sale, of targeted advertising and of profiling. We don't sell personal data or use it for targeted advertising. To use any of these rights, email privacy@ironplane.com. We'll confirm your request, may ask for details to verify who you are, and will reply within the time the law sets. You can name an authorized agent to ask for you. If we turn down your request, you can appeal by replying to our answer. We won't treat you differently for using your rights.

California residents can also ask, under California Civil Code section 1798.83, whether we have shared their personal data with third parties for those third parties' direct marketing. We haven't. Email privacy@ironplane.com or write to the address above.

Visitors from the EU, the UK and Switzerland

We use your data to answer your enquiry and work with you (steps you asked us to take before a contract, or the contract itself), on the basis of our legitimate interest in running and growing our business, or with your consent where the law requires it, for example for analytics and marketing cookies. You can access, correct, delete, restrict or move your data, object to our use of it, and withdraw consent at any time. Your data is processed in the United States; where our providers transfer it, they rely on standard contractual clauses or the EU-US Data Privacy Framework. You can also complain to your local data protection authority.

Contact and changes

Questions about this policy or your data: privacy@ironplane.com, or IronPlane, LLC, PO Box 5019, Portland, Maine 04101.

We update this policy when our tools or practices change, and the date below shows the current version. If a change matters to how we use your data, we'll say so on this page before it takes effect.

Last updated 26 October 2026.