Privacy Policy

Last updated October 9, 2026

Brava Group LLC ("Brava," "we," "us") is a small strategy, printing and promotional products company based in Adairsville, Georgia. This policy explains what personal information we collect, how we use and share it, and the choices you have. This version takes effect on October 9, 2026. Our Terms of Use cover your use of this website, and our Terms of Sale cover quotes and orders.

The short version

• We use your information to answer your requests, quote and produce your orders, and run our business.
• We do not sell your personal information, and we do not use it for targeted advertising.
• This website does not set cookies and does not use analytics or tracking pixels.
• You can ask us to show you, correct or delete your information by emailing hello@orderbrava.com.

Who this policy covers

This policy applies to personal information about people who visit this website at bravaorder.com or orderbrava.com, send us a request or inquiry, buy from us or work with us on behalf of an organization, or contact us by email, text or phone. It also covers information about other people that customers give us to complete an order, such as a list of kit recipients.

Two situations work differently:

• Research we do for clients. When a client hires us for interviews, focus groups, surveys or other research, the personal information we collect from participants is handled under our agreement with that client and the client's instructions. See "Research participants" below.
• Our online product catalog. Our online catalog at shop.orderbrava.com runs on ESP+, a platform provided by ASI (the Advertising Specialty Institute). That site has its own privacy policy, posted there, which applies to your use of that site and describes the cookies and analytics tools that may be used on it. Once a request or order from that site reaches us, we handle it as this policy describes.

Information we collect

Information you give us. This website has no accounts. When you use the forms on our Printing, Promotional items or Strategy pages, or contact us by email, text or phone, you may give us:

• Contact details: your name, organization, email address and phone number
• Request and order details: such as the product, quantity, size, materials, budget, timing, needed-by date, shipping ZIP code or address, the artwork help you need, the topic or decision you want help with, and any notes you write
• Files and links: logos, artwork, photos and other files you upload or attach, and links to files you share through services such as Dropbox, Google Drive or WeTransfer
• Billing details: billing contacts, invoice and purchase order information, and the payment details described below
• Your messages: what you write or tell us in emails, texts and calls with us

Each form asks for your name and email address so we can reply, plus the basics of your request: the product and quantity on our Printing form, or the decision you are facing on our Strategy form. Everything else is up to you.

Information about other people. Some orders need information about people other than the buyer, such as names and addresses for kits shipped to each recipient, a mailing list for postcards, or names and photos for ID badges. If you send us this kind of information, please send only what the order needs, and make sure you have the right to share it. We use it only to complete and support that order. We share it only with the partners doing that work, such as the supplier packing the kits, the mailing service or the shipping carrier, and with the service providers described below that store or process our records.

Payment information. If you pay by card, Stripe processes your payment. Brava does not see or store your full card number. If you pay by ACH, wire or check, we receive the details that come with the payment, such as the payer's name, the amount and the invoice number.

Information collected automatically. When you load a page, our hosting provider, Vercel, processes standard technical information such as your IP address, browser type, the page you requested and the time of the request. It uses this to deliver the site and protect it from abuse. When you send one of our forms, your browser sends your entries and files directly to Google, which also receives standard technical information such as your IP address. Each form submission includes the address of the page you sent it from. We do not use any of this to identify or profile visitors.

Information from others. We may receive information about you from colleagues at your organization who place or manage orders; from suppliers, printers and shipping carriers (such as production and tracking updates); from Stripe and our bank when a payment is made; and, for research projects, from the client that hired us.

How we use information

• To answer your questions and requests
• To prepare quotes, mockups and proofs, and to produce, ship and support your orders
• To send invoices and receipts, process payments, and keep our accounting, tax and sales tax records
• To prepare proposals for strategy, research and design work, and to carry out projects you hire us for
• To keep you updated about your quote, proof, order or project
• To protect our website, our business and our customers from spam, fraud and misuse
• To meet our legal obligations and enforce our agreements

We will use personal information for a new purpose only after telling you and, where the law requires, getting your consent.

Your logos and artwork

We use the logos, artwork and photos you send only to quote, mock up, proof and produce your orders, including reorders. We do not use them for anything else, such as our own marketing or portfolio, without your permission.

How we share information

We share personal information only as needed to do the work you ask for and to run our business, and we share only what each recipient needs for its part:

• Technology providers. Google provides our email, file storage and spreadsheets (Google Workspace) and the business phone line we use for calls and texts (Google Voice). Google receives and stores the requests and files sent through our website forms. Vercel hosts this website.
• Payment providers. Stripe processes card payments. Mercury, our business banking provider, and its partner bank handle ACH and wire payments.
• Ordering platform. We use ESP+, a promotional products platform from ASI, to find products, prepare quotes, mockups and orders, and accept card payments through Stripe.
• Suppliers, decorators and print partners. The companies that make, decorate, print, pack, mail and ship your products receive the order details, artwork and shipping information they need. Some ship directly to you or to your recipients.
• Shipping carriers, which receive the names and addresses they need to deliver orders.
• Your organization. If you work with us on behalf of an organization, we share quotes, proofs, order details and invoices with the people there who manage the order, such as its purchasing or accounts payable team.
• AI tool providers, which receive the information we enter into the tools described under "AI tools" below.
• Professional advisers, such as lawyers and accountants, who must keep it confidential.
• Legal requests and safety. We may disclose information when the law requires it, such as in response to a valid subpoena or court order, or when needed to protect our rights, our customers or others.
• Business changes. If Brava is involved in a merger, sale or reorganization, information may be transferred as part of that deal. Before your information becomes subject to a different privacy policy, we will give notice as described under "Changes to this policy."
• With your permission, in any other case.

We do not sell your information

We do not sell or rent personal information, and we have not done so in the past 12 months. There are no third parties to whom we have sold it or may sell it. We also do not:

• share personal information for cross-context behavioral advertising or targeted advertising
• sell or share sensitive personal information
• give personal information to other companies for their own direct marketing
• use profiling or automated decision-making to make decisions that have legal or similarly significant effects on anyone

If this ever changes, we will update this policy first and give you a way to opt out, or ask for your consent where the law requires it.

Cookies and similar technologies

This website does not set cookies and does not save anything in your browser's local storage. It does not use analytics, advertising cookies, tracking pixels, session recording or chat widgets. Our fonts and images come from our own site, not from outside services.

Our forms send your entries and any files directly to Google, which stores them in our Google Workspace account and emails us a notice. Our forms do not use cookies. If we ever turn that service off, our forms will instead open your own email app with your request filled in, for you to send to us yourself.

Do Not Track. We do not track visitors over time or across other websites, so this website works the same way whether or not your browser sends a Do Not Track signal. We do not allow other companies to collect personal information about your online activity across websites through this website.

Global Privacy Control. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale and sharing of your personal information and of targeted advertising. We already do none of these, so you do not need to do anything else.

Before we add cookies, analytics, embedded maps or videos, chat tools, ad pixels or any similar technology that is not strictly necessary, we will update this policy and ask for your consent where the law requires it.

Email and text messages

Email. We email you about your requests, quotes, proofs, orders, invoices and projects. For standard print jobs, we may prepare your price automatically from our price list and email it to you. We do not send newsletters or marketing emails today. If we start, every marketing email will identify Brava and include our postal address and a working unsubscribe link, and we will honor unsubscribe requests within 10 business days. Emails about an open order or invoice are part of doing business with us and are not affected by unsubscribing from marketing.

Text messages. When you text us, we reply by text, and if you ask, we may text you updates about your quote, proof or order. We will not send you marketing texts unless you separately agree to receive them, and agreeing is never a condition of buying from us. Message frequency varies. Message and data rates may apply. Reply STOP at any time to stop texts from us, or tell us in any other reasonable way, and we will honor it. For help, reply HELP or email hello@orderbrava.com.

We do not share or sell mobile phone numbers, text messaging opt-in data or consent with third parties or affiliates for their marketing or promotional purposes.

AI tools

We use AI-assisted tools, including general-purpose AI assistants and the design tools built into our ordering platform, to help us draft emails, quotes and documents, organize orders and create product mockups with your logo. We may also use them to help summarize research. A person at Brava reviews the results before we send them or rely on them. When we use these tools, the companies that provide them receive the information we enter. We do not use AI or other automated tools to make decisions that have legal or similarly significant effects on anyone.

Research participants

When a client hires us for research, such as interviews, focus groups, surveys or fieldwork, we collect participants' answers on that client's behalf. We use what participants share only for that project, and we give the results to the client as our agreement with the client describes, which may include the full set of responses. We ask permission before recording an interview or focus group. We do not sell participant information or use it for our own marketing.

If you took part in research we ran for a client, you can contact us or the organization that invited you. We will work with that organization to answer your question or request.

Health and other sensitive information

Outside of research projects (described above), we do not ask for sensitive information, such as health or medical information, Social Security or other government ID numbers, financial account passwords or biometric data. Please do not send it through our forms, by email or by text. Please also never send a full card number by email or text.

Most of our printing and promotional products work does not need patient information. If you are a healthcare organization, please do not send us protected health information (PHI), such as a list of patients for a mailing, unless we have first signed a written agreement that covers it, such as a business associate agreement. Research we do for healthcare clients may touch on health topics. When it does, we collect only what the project needs and handle it under that client's agreement.

How long we keep information

We keep personal information only as long as we need it for the purposes in this policy, and then we delete it. How long that is depends on the kind of information:

• Orders, invoices, payments and tax records: as long as tax, accounting and other legal rules require.
• Requests that do not become orders: as long as they are useful for answering follow-up questions or preparing a related quote.
• Logos and artwork: while we are working with you, and afterward so we can match reorders, unless you ask us to delete them.
• Recipient and mailing lists: only as long as needed to complete and support the order, such as resolving a delivery problem.
• Emails and texts: as business records, for as long as they relate to an open or recent order or project, or as the law requires.
• Research data: as our agreement with the client says.
• Website technical data: processed by Vercel and Google under their own retention practices. We do not keep separate copies.

We may keep information longer when the law requires it or when we need it to resolve a dispute.

How we protect information

We use reasonable administrative, technical and physical safeguards suited to the size of our business and the information we hold. Our website uses HTTPS encryption. We store requests, files and order records with established providers such as Google, and we limit access to the people at Brava who need it. No method of storage or transmission is completely secure, so we cannot promise perfect security.

If a security breach affects your personal information, we will notify you, and the authorities where required, as the law requires.

Your privacy rights

Many states give their residents privacy rights, but those laws often apply only to larger businesses or leave out people acting on behalf of a business. Brava offers the rights below to everyone in the United States, whether or not a particular law applies to us:

• Know and access: ask what personal information we have about you, where it came from, why we use it and who we share it with, including the names of the companies we have shared it with
• Copy: get a copy of your information in a commonly used electronic format
• Correct: ask us to fix information that is wrong
• Delete: ask us to delete your information
• Opt out: opt out of the sale or sharing of your information, targeted advertising and profiling (we do none of these today)
• Withdraw consent: take back any consent you gave us, such as consent to marketing texts
• Equal treatment: we will not deny you service, charge you a different price or give you a different level of service because you used these rights

How to make a request. Email hello@orderbrava.com with "Privacy request" in the subject line and tell us what you would like us to do. To protect your information, we will confirm your identity before we give you access to it, correct it or delete it, usually by asking you to reply from the email address we have on file or to confirm details about your orders. We may ask for more proof for more sensitive requests. You do not need to prove your identity to opt out. An authorized agent may make a request for you with your signed, written permission, and we may confirm the request directly with you.

Timing and cost. We will confirm that we received your request within 10 business days and respond within 45 days. If we need more time, we will tell you why within those 45 days, and we may take up to 45 more days. Requests are free. If requests are clearly unfounded, excessive or repetitive, we may decline them or charge a reasonable fee where the law allows, and we will explain why.

Limits. We may keep information we are required to keep, such as tax and order records, or information we need to finish an order, prevent fraud or meet a legal obligation. If we cannot fully honor a request, we will tell you why.

Appeals. If we decline your request, you may appeal by replying to our decision with "Appeal" in the subject line. We will review it and tell you our decision and the reasons in writing within 45 days. If you disagree with the result, you may contact your state attorney general.

State-specific notes

California. We provide this notice voluntarily, whether or not the California Consumer Privacy Act applies to us. In the past 12 months we have collected these categories of personal information:

• Identifiers, such as name, email address, phone number, postal address and IP address
• Customer records, such as billing details and payment information
• Commercial information, such as quotes, orders and purchase history
• Internet activity, such as the pages you requested and the page you sent a form from
• Professional information, such as your organization
• Visual information, such as logos, artwork and photos you send us

We collect this information from you, from your organization, from your browser and from our service providers, as described above. We use it for the purposes in "How we use information," disclose it to the categories of recipients in "How we share information," and keep it as described in "How long we keep information." We have not sold it or shared it for cross-context behavioral advertising, and we do not collect or use sensitive personal information to infer characteristics about anyone.

California "Shine the Light." We do not disclose personal information to third parties for their own direct marketing purposes.

Nevada. We do not sell covered information as Nevada law defines it. Nevada residents may still send an opt-out request to hello@orderbrava.com with "Nevada opt-out" in the subject line, and we will honor it.

Children

Our website and services are for organizations and adults. Some products we sell are meant for children, such as giveaways, but we sell them to organizations, not to children. Our site is not directed to children under 13, and we do not knowingly collect personal information from anyone under 16. We never sell minors' information or use it for targeted advertising. If you believe a child has sent us personal information, email hello@orderbrava.com and we will delete it.

People outside the United States

Brava is based in the United States, and our services are meant for customers in the United States. If you contact us from another country, your information will be processed in the United States, and possibly in other countries where our service providers operate.

Changes to this policy

When we change this policy, we will post the new version on this page with a new "Last updated" date. If a change is material, we will also email the customers we are actively working with before it takes effect. We will not use personal information we already have in a materially different way without telling you first and, where the law requires, getting your consent. We keep earlier versions of this policy and will send you one on request.

Accessibility

If you need this policy in another format because of a disability, email hello@orderbrava.com and we will provide it in a way that works for you.

Contact us

Questions or requests about privacy? Email hello@orderbrava.com.

Brava Group LLC, Adairsville, Georgia