Skip to content
Beadwork Dk Blue NEW

Privacy Policy

Scope

Cayuse Commercial Services, LLC (Cayuse, we, us, or our) takes your privacy seriously. This Privacy Policy explains how we collect, use, and protect Personal Data submitted and collected through cayusecommercialservices.com and cayusedigital.com, and any related commercial websites we operate (collectively, the Site). Emails we send use the cayusecs.com domain, which redirects to cayusecommercialservices.com. This Privacy Policy covers our commercial business only and does not cover any separate Cayuse business lines. The Site is intended for users in the United States.

a. Personal Data. Personal Data (also called “personal information” under some state laws) means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household.

b. Controller (Not Processor).

  • This Privacy Policy describes our role as a controller of Personal Data, meaning we determine the purposes and means of processing the Personal Data described here.
  • This Privacy Policy does not apply to Personal Data we process as a processor or service provider on behalf of our customers under a separate written agreement. Processing in that capacity is governed by the applicable customer agreement and data processing addendum.

Data Collection

We collect Personal Data only as reasonably necessary and proportionate to provide and maintain the Site and the services described in this Privacy Policy. The categories of Personal Data we may collect, and the sources, are described below.

a. Interest in Services. If you submit a contact form on the Site, or (when available) request a gated content download, we collect the information you provide on the form, typically your name, work email address, company name, and any other information you choose to enter.

b. Commercial Information. When you interact with the Site, we may collect commercial information about how you found us, such as lead source and the marketing campaign, channel, or referring page that brought you to the Site.

c. Websites. When you interact with the Site or our emails, we automatically collect information about your device and your activity, including Internet Protocol (IP) address, device and browser information, referrer information, pages and content viewed, links clicked, dates and times, and similar usage data — some of which may qualify as Personal Data.

d. Log Files. If you use and interact with the Site, we automatically collect information about your device and your activity through log files and similar technologies, some of which may qualify as Personal Data.

Children's Privacy

The Site is not directed to children under 16, and we do not knowingly collect Personal Data from anyone under 16. If you believe a child has provided us with Personal Data, please contact us at the address in the Privacy Concerns subsection below and we will delete it.

Data Collection Tools

We use information-gathering tools such as cookies, web beacons, pixels, and similar technologies to automatically collect information that may include Personal Data when you navigate the Site or interact with our emails.

a. Automatically When You Visit Our Sites.

i. We collect a first-party operational identifier (UUID) used to associate Site interactions and conversion events for our internal attribution and reporting, together with landing-page and referral metadata (source, medium, campaign), conversion-related interactions, operational timestamps, attribution version metadata, pages and content viewed, and approximate geographic region (such as a city or region derived from your IP address).

ii. This information is used to analyze trends, provide and improve the Site, measure marketing attribution and conversion, and maintain Site security and operations.

b. Cookies, Web Beacons, and Similar Technologies. We use cookies, web beacons, pixels, tags, JavaScript, and similar technologies, alone or in combination, to gather information about how the Site is used and how visitors interact with our emails. See the next section for our cookie practices.

c. Advertising and Company-Identification Scripts.

i. Google Ads. The Site uses a Google Ads tag to measure whether visits and form submissions result from our ads. We have configured Google Ads with restricted data processing, we do not use retargeting or ad personalization, we do not upload customer data to Google, and we do not collect leads through Google ad forms.

ii. ZoomInfo WebSights. The Site uses a ZoomInfo WebSights script to identify the companies that visit the Site and the pages they view. ZoomInfo provides us with company-level information only (such as company name and state); we do not receive the identity of individual visitors. We use this information for market analysis and to prioritize sales outreach. The script collects information from your device (such as IP address and device and browsing information), and ZoomInfo also uses that information for its own business purposes, as described in the Disclosure and Sharing section below.

d. De-Identified and Aggregated Data. We may aggregate or de-identify information so that it cannot reasonably be linked to a particular individual. We may use and share this aggregated or de-identified information for any business purpose.

Cookies

a. Required Cookies — Basic Website Functionality.

i. Examples include session cookies needed to transmit the Site, authentication cookies, and security cookies.

ii. These cookies are essential for the Site to function. There is no option to opt out.

b. Functional / Analytics Cookies.

i. Examples include cookies used to analyze Site traffic and to understand how Site features are used.

ii. We use Google Analytics 4 to help us understand how the Site is used and to measure marketing attribution and conversion. We configure Google Analytics with privacy-protective settings.

iii. You can choose to opt out of functional or analytics cookies through the cookie controls described below.

c. Advertising / Sale-and-Share Technologies. These technologies share information with third parties that use it for their own purposes, which some state privacy laws treat as a “sale” or “share” of Personal Data. The Site uses the ZoomInfo WebSights script in this way, as described in the Data Collection Tools and Disclosure and Sharing sections. Because these technologies do not rely only on cookies, blocking cookies alone does not stop them. To opt out, use the “Do Not Sell or Share My Personal Information” link on the Site or send a Global Privacy Control signal, as described below. When we detect a valid opt-out or GPC signal, we stop these technologies for that browser and device.

d. Universal Opt-Out / Global Privacy Control. We honor opt-out preference signals communicated through your browser, including the Global Privacy Control (GPC). When we detect a valid signal, we treat it as a request to opt you out of the sale or sharing of your Personal Data for that browser and device, and as a request to opt out of targeted advertising where applicable.

e. Cookie Controls. You may use your browser settings to manage or block cookies on the Site. Blocking some cookies may affect Site functionality. Browser settings do not stop technologies that do not rely only on cookies; to opt out of the sale or sharing of your Personal Data, use the controls described in the paragraphs above.

How We Use Your Personal Data

We use Personal Data only as reasonably necessary and proportionate for the purposes identified below.

a. Respond to Inquiries and Deliver Requested Content. To answer your contact-form submission, deliver gated content you have requested, follow up where appropriate, and otherwise carry out related service-delivery activities.

b. Attribution Analysis and Conversion Measurement. To analyze which marketing channels, campaigns, and referring pages brought you to the Site and to measure conversion activity.

c. Operational Reporting and Website Performance Analysis. To produce internal operational reports and analyze how the Site is used so we can improve content, navigation, and reliability.

d. Security and Fraud Prevention. To detect, investigate, and prevent abuse, fraud, and security incidents affecting the Site or its users.

e. Compliance with Law. To meet our legal, regulatory, audit, and dispute-resolution obligations.

We use Personal Data only for the purposes described in this Privacy Policy. If we need to use Personal Data for a materially different purpose in the future, we will update this Privacy Policy and, where required by law, provide notice or obtain your consent.

Disclosure and Sharing

Sale and Sharing of Personal Data. We do not sell Personal Data for money. Some state privacy laws define a “sale” more broadly to include disclosing Personal Data to a third party for monetary or other valuable consideration. Our use of the ZoomInfo WebSights script discloses visitor information (such as IP address and device and browsing information) to ZoomInfo, which may use that information for its own purposes, and some state privacy laws — including the California Consumer Privacy Act — treat this kind of disclosure as a “sale” or “share” of Personal Data. You can opt out at any time by using the “Do Not Sell or Share My Personal Information” link on the Site or through a browser opt-out preference signal such as the Global Privacy Control, as described in the Cookies section above. We do not knowingly sell or share the Personal Data of anyone under 16.

a. Service Providers. With service providers that perform services on our behalf, including: (i) HubSpot, which hosts cayusecommercialservices.com and provides our customer relationship management, forms, email, and marketing platform; (ii) WPEngine, which hosts cayusedigital.com; (iii) Google Analytics 4, which provides analytics and attribution measurement; (iv) Google Ads, which provides ad conversion measurement under restricted data processing settings; and (v) other service providers, such as email and customer-engagement platforms, attribution platforms, and IT and security providers. Each service provider is contractually bound to handle Personal Data only as we direct.

b. Affiliates. With our corporate affiliates, which may access and use Personal Data to help us operate, support, and improve our commercial business, consistent with this Privacy Policy.

c. ZoomInfo. With ZoomInfo, which receives visitor information collected through its WebSights script as described above. ZoomInfo is not a service provider, because it may use this information for its own purposes. This disclosure is covered by the Sale and Sharing paragraph above and by the opt-out rights described in this Privacy Policy.

d. Change in Ownership. With a successor in a merger, acquisition, financing, reorganization, or sale of all or part of our business. Any successor must continue to handle Personal Data in a manner consistent with this Privacy Policy or notify you of changes.

e. De-Identified and Aggregated Data. We may share de-identified and aggregated data publicly or with third parties for any business purpose.

f. Professional Advisers. With our outside professional advisers and consultants, such as legal counsel, accountants, auditors, insurers, and other consultants, where reasonably necessary for legal, compliance, audit, insurance, or other legitimate business purposes.

g. Legal Requirements. When we are required by law to disclose Personal Data, or when disclosure is reasonably necessary to protect our rights, the rights of others, or to enforce our terms.

Rights Relating to Your Personal Data

a. Rights. Subject to applicable law, you may have the right to:

i. know what Personal Data we have collected about you, the categories of sources, the business or commercial purposes for collecting it, and the categories of recipients with whom we have shared it;

ii. access a copy of your Personal Data, in a portable and, to the extent technically feasible, readily usable format;

iii. correct inaccurate Personal Data;

iv. delete your Personal Data, subject to limited exceptions;

v. opt out of the sale of your Personal Data, the sharing of your Personal Data for cross-context behavioral advertising, and the use of your Personal Data for targeted advertising or for profiling that produces legal or similarly significant effects about you;

vi. receive a list of the specific third parties to which we have disclosed your Personal Data, where required by applicable law;

vii. appeal a decision we make on your request, where required by applicable law;

viii. designate an authorized agent to submit a request on your behalf, subject to verification; and

ix. exercise these rights without retaliation or discrimination.

b. Retention. We keep Personal Data only as long as we need it for the purposes described in this Privacy Policy. To decide how long that is, we consider how long our relationship with you or your company lasts, how long the data stays useful for attribution, analytics, security, and reporting, and any longer period we are required or permitted to keep it for legal, tax, audit, or dispute-resolution reasons. When we no longer need Personal Data, we delete or de-identify it.

c. Marketing. If you no longer wish to receive marketing emails, you can unsubscribe at any time by clicking the unsubscribe link at the bottom of any marketing email or by contacting us. Once you unsubscribe, you will no longer receive marketing emails from us. We may continue to communicate with you about service, security, billing, or legal matters.

d. Universal Opt-Out / Global Privacy Control. We honor opt-out preference signals communicated through your browser, including the Global Privacy Control (GPC), as described in the Cookies section above.

e. Authorized Agent. You may use an authorized agent to submit a request on your behalf. We may require that you verify your identity, that the agent provide proof of authorization, or both, before we act on the request.

f. Appeal. If we decline your request in whole or in part, you may appeal that decision by contacting us using the information in the Privacy Concerns subsection. We will respond to your appeal within the timeframe required by applicable law and, where required, inform you of any right to contact your state's attorney general or other regulator.

g. How to Exercise Your Rights. To exercise any of these rights, contact us by email or mail using the information in the Privacy Concerns subsection. We will verify your identity before acting on a request. We will respond to verifiable requests within the timeframes required by applicable law (typically 45 days, with an extension where permitted).

Your Rights Under State Privacy Laws

a. California Residents.

i. If you are a California resident and any Personal Data we collect about you is “personal information” as defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the CCPA), the rights identified in this Privacy Policy apply to you in the manner provided by the CCPA.

ii. As described in the Disclosure and Sharing section, our use of ZoomInfo WebSights may constitute a “sale” or “share” of personal information under the CCPA. You may opt out using the “Do Not Sell or Share My Personal Information” link on the Site or through an opt-out preference signal such as the Global Privacy Control.

iii. We will not retaliate or discriminate against you for exercising your rights under the CCPA.

iv. Our response to a verified request will cover the 12-month period preceding the request, except where applicable law requires a longer period.

v. We honor opt-out preference signals communicated through your browser, including the Global Privacy Control.

vi. If we use Personal Data for automated decision-making technology that produces legal or similarly significant effects about you, we will provide the disclosures and opt-out rights required by the CCPA's automated decision-making technology regulations.

b. Residents of Other U.S. States. If your state of residence has a comprehensive consumer privacy law that applies to us, you may exercise the rights described in this Privacy Policy to the extent that law requires us to honor them. The procedures for submitting a request, identity verification, response timeframes, and appeals are described above.

International Transfers

We operate from the United States, and the Personal Data we collect through the Site is stored in the United States. We may permit authorized personnel located in other countries to access Personal Data for the limited purposes described in this Privacy Policy. As of the Last Revised date, this includes a contractor based in Canada with limited access to Site-related Personal Data for purposes described in this Privacy Policy. We require any recipient of Personal Data outside the United States to handle it under contractual safeguards consistent with this Privacy Policy and applicable law.

Other Terms

a. Industry-Standard Security. We use administrative, technical, and physical safeguards designed to protect Personal Data, including access controls, encryption of Personal Data in transit, activity logging, and security review of our service providers. No system is perfectly secure, and we cannot guarantee that Personal Data will never be accessed or disclosed without authorization.

b. No Contractual Rights. This Privacy Policy is not a contract and does not create any contractual rights or obligations.

c. Links to Third-Party Sites. The Site may contain links to other sites and services that are owned and controlled by others. Those third-party websites have their own privacy policies, and we are not responsible for their practices. You should review those policies before providing Personal Data.

d. Revisions to This Privacy Policy. We may change this Privacy Policy from time to time. The Last Revised date at the bottom of this Privacy Policy shows when it was last updated. If we make material changes, we will post a notice on the Site for a reasonable period and, where required by law, give you additional notice.

e. Privacy Concerns. To exercise your rights regarding your Personal Data or if you have questions about this Privacy Policy or our privacy practices, you may contact us at: Cayuse Commercial Services, 72632 Coyote Road, Pendleton, OR, 97801, Attn: Privacy. Email: privacy@cayusecs.com. Phone: 541-278-8200.

Last Revised: 7/7/2026