Effective Date: April 30, 2026
Last Updated: April 30, 2026
Catholic Bros, operated by Bright Cloud Media, LLC (“Catholic Bros,” “we,” “us,” or “our”), is committed to protecting the privacy of visitors to www.catholicbros.com (the “Site”) and recipients of our newsletter and other communications. This Privacy Policy explains what personal information we collect, how we use and share it, your rights and choices, and how to contact us.
This Privacy Policy applies to personal information we collect through the Site, our newsletter and email communications, and our other online services (collectively, the “Services”). It does not apply to third-party websites, applications, or services that we do not own or control.
By using the Services or providing personal information to us, you acknowledge that you have read this Privacy Policy. If you reside in a jurisdiction that requires consent to the processing of personal information for one or more purposes, we will obtain that consent in the manner required by applicable law.
1. Who We Are and How to Contact Us
The data controller (or “business,” as defined under applicable U.S. state law) responsible for your personal information is:
Bright Cloud Media, LLC
1971 E. Beltline Ave NE.
Ste 106 #581
Grand Rapids, MI 49525
Email: dan@catholicbros.com
For privacy-related questions or to exercise your rights under this Policy, email dan@catholicbros.com with the subject line “Privacy Request.”
2. Categories of Personal Information We Collect
We collect personal information in the following categories:
(a) Information You Provide Directly. We collect information you provide when you subscribe to our newsletter, contact us, complete a form, download a free resource, or otherwise interact with the Services. This may include your name, email address, and any information included in messages you send to us.
(b) Information Collected Automatically. When you visit the Site, we and our service providers may automatically collect information about your device and your interactions with the Site, including IP address, browser type, operating system, referring URL, pages viewed, time spent on pages, links clicked, approximate geographic location (derived from IP), and unique identifiers such as cookie identifiers. See our Cookie Policy for more information about cookies and similar technologies.
(c) Information from Third Parties. We may receive information from third-party service providers we use to operate the Services, including our email service provider (ConvertKit, also known as Kit), our analytics provider (Google Analytics), and affiliate networks (such as Mediavine and Amazon Associates).
3. Sources of Personal Information
We collect personal information from (i) you directly, (ii) automatically through your use of the Services, and (iii) third-party service providers and affiliate networks as described above.
4. How We Use Personal Information
We use personal information for the following purposes:
• To operate, maintain, and improve the Services;
• To send you our newsletter, devotional content, and related communications you have subscribed to;
• To respond to your inquiries and provide customer support;
• To understand how visitors use the Site and to measure the effectiveness of our content;
• To monitor and protect the security and integrity of the Services and to detect, prevent, and respond to fraud, abuse, and unlawful activity;
• To comply with applicable law and legal obligations, including responding to lawful requests from public authorities;
• To enforce our Terms of Service and other agreements; and
• For any other purpose disclosed at the time of collection or with your consent.
5. Legal Bases for Processing (EEA, UK, and Switzerland)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the General Data Protection Regulation (GDPR), UK GDPR, and Swiss Federal Act on Data Protection (FADP):
• Consent (Art. 6(1)(a)): for sending marketing communications, including our newsletter, and for setting non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.
• Performance of a contract (Art. 6(1)(b)): to provide free downloads or other resources you have requested.
• Legitimate interests (Art. 6(1)(f)): to operate, secure, and improve the Services, to detect and prevent fraud and abuse, and to understand aggregated usage. We assess these legitimate interests against your rights and freedoms before processing.
• Compliance with legal obligations (Art. 6(1)(c)): where processing is required to comply with applicable law.
6. Cookies and Similar Technologies
We and our service providers use cookies, pixels, web beacons, and similar technologies on the Site. Some are strictly necessary for the Site to function; others (analytics, functional, and marketing/affiliate cookies) require your consent in jurisdictions where consent is required (including the EEA and UK). For details about each cookie, its purpose, and its duration, please see our Cookie Policy at www.catholicbros.com/cookie-policy.
7. How We Share Personal Information
We do not sell personal information for monetary consideration. We share personal information only as follows:
(a) Service Providers (Processors). We share personal information with vendors and contractors that perform services on our behalf, including:
• ConvertKit (Kit) — email marketing and newsletter delivery;
• Google Analytics (Google LLC) — website analytics;
• Amazon Associates Program — affiliate link tracking;
• Mediavine — affiliate link tracking;
• WordPress hosting and content management providers — hosting and Site operation;
• Cookie consent management — recording and honoring your cookie preferences.
These service providers are contractually limited to processing personal information on our instructions for the purposes described in this Policy.
(b) Affiliate Partners. When you click an affiliate link on the Site, the affiliate partner (such as Amazon) may collect information about your click, your subsequent purchases, and your device. Their practices are governed by their own privacy notices.
(c) Legal and Safety Disclosures. We may disclose personal information when we believe in good faith that disclosure is necessary to (i) comply with applicable law or legal process, (ii) enforce our Terms of Service or other agreements, (iii) protect the rights, property, or safety of Bright Cloud Media, LLC, our users, or others, or (iv) detect, prevent, or address fraud, security, or technical issues.
(d) Business Transfers. If we are involved in a merger, acquisition, financing, reorganization, sale of assets, or bankruptcy, personal information may be transferred or disclosed as part of that transaction, subject to applicable law.
(e) With Your Consent. We may share personal information for any other purpose with your consent.
8. “Sale” or “Sharing” of Personal Information for Cross-Context Behavioral Advertising (California and Other U.S. States)
We do not sell personal information for monetary consideration. However, certain U.S. state privacy laws (including the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”)) define “sale” and “share” broadly to include disclosures of personal information to third parties, including for cross-context behavioral advertising.
Our use of analytics cookies (such as Google Analytics) and similar technologies may, in some configurations, qualify as a “sale” or “sharing” under these laws. You may opt out of such activities by:
• Adjusting your cookie preferences in our consent banner;
• Enabling the Global Privacy Control (GPC) in your browser, which we honor for visitors located in jurisdictions that require us to recognize opt-out preference signals; or
• Emailing us at dan@catholicbros.com with the subject “Do Not Sell or Share My Personal Information.”
We do not knowingly sell or share personal information of consumers under the age of 18.
9. International Data Transfers
We are based in the United States, and our service providers may also be located in the United States or other countries. When we transfer personal information from the EEA, the United Kingdom, or Switzerland to a country that has not been deemed to provide an adequate level of data protection, we rely on appropriate safeguards under applicable law, including:
• Standard Contractual Clauses (SCCs) approved by the European Commission, with the UK Addendum or Swiss equivalent where applicable; and
• EU-U.S. Data Privacy Framework (DPF) and its UK Extension, where our service provider is certified.
You may request a copy of the safeguards we use by emailing us at dan@catholicbros.com.
10. Retention
We retain personal information for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal, accounting, and reporting obligations. Specifically:
• Newsletter subscribers: until you unsubscribe or request deletion, plus a reasonable period for record-keeping and to honor your opt-out;
• Contact form submissions: generally up to 24 months after the last interaction, unless a longer period is required by law or to address a dispute;
• Analytics data: retained for the period set in our Google Analytics configuration (currently up to 14 months in identifiable form), then aggregated or deleted; and
• Cookie data: for the duration listed in our Cookie Policy.
11. Your Rights and Choices
Depending on your jurisdiction, you may have certain rights with respect to your personal information.
(a) EEA, UK, and Switzerland. Under the GDPR, UK GDPR, and FADP, you have the right to:
• access your personal information;
• request rectification of inaccurate or incomplete personal information;
• request erasure of your personal information (“right to be forgotten”);
• restrict or object to our processing;
• request portability of your personal information;
• withdraw consent at any time, where processing is based on consent; and
• lodge a complaint with your local supervisory authority. A list of EU supervisory authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en. UK residents may contact the Information Commissioner’s Office (https://ico.org.uk).
(b) California (CCPA/CPRA), Virginia, Colorado, Connecticut, Utah, Texas, and Other U.S. States. You may have the right to:
• know what personal information we have collected, used, disclosed, and (where applicable) “sold” or “shared”;
• correct inaccurate personal information;
• delete your personal information;
• opt out of the “sale” or “sharing” of personal information and of targeted/cross-context behavioral advertising;
• limit the use and disclosure of sensitive personal information (we do not knowingly use sensitive personal information for purposes that require this right);
• not be subject to discrimination for exercising your rights; and
• appoint an authorized agent to exercise rights on your behalf.
California “Shine the Light”: California residents may request a notice describing what categories of personal information we share with third parties for those third parties’ direct marketing purposes. To make a request, email dan@catholicbros.com with the subject “Shine the Light.”
(c) Canada (PIPEDA and Quebec Law 25). You may request access to and correction of your personal information and withdraw consent to processing, subject to legal and contractual limitations. Quebec residents may also have the right to data portability and to receive information about automated decision-making.
(d) Other Jurisdictions. Residents of Brazil (LGPD), Australia (Australian Privacy Principles), and other jurisdictions may have rights similar to those described above. We will honor rights to the extent required by applicable law.
Submitting a Request. To exercise any of these rights, email dan@catholicbros.com with the subject “Privacy Request” and a description of your request. We may need to verify your identity before responding. We will respond within the time period required by applicable law.
12. Newsletter and Email Communications
(a) How We Collect Email Addresses. We collect email addresses through opt-in subscription forms on the Site. By submitting your email address, you consent to receive our newsletter and related communications.
(b) Lawful Basis (EEA/UK). We rely on your consent under Art. 6(1)(a) GDPR and applicable national law for sending marketing emails to subscribers in the EEA, UK, and Switzerland.
(c) Double Opt-In. Where required or appropriate, we use a double opt-in process: after you submit your email address, we send a confirmation email and only add you to our subscriber list once you click the confirmation link.
(d) Identification of Sender; Postal Address. Each email we send identifies Bright Cloud Media, LLC as the sender, includes our physical postal address Bright Cloud Media, LLC, 1971 E. Beltline Ave NE, Ste 106 #581, Grand Rapids, MI 49525, and contains a clear unsubscribe link.
(e) Unsubscribe. You may unsubscribe at any time by clicking the “unsubscribe” link in any email or by emailing dan@catholicbros.com with the subject “Unsubscribe.” We honor unsubscribe requests promptly and, in any event, within ten (10) business days, consistent with the U.S. CAN-SPAM Act, Canada’s Anti-Spam Legislation (CASL), and applicable foreign law.
(f) Service Provider. We use ConvertKit (Kit) to manage our subscriber list and send emails. Personal information collected through the newsletter is processed by ConvertKit on our behalf in accordance with its privacy practices.
(g) Records of Consent. We retain records of your consent (including the date, time, and source of subscription) for as long as required to demonstrate compliance with applicable law.
13. Children’s Privacy
The Services are not directed to children under the age of 18 (or the equivalent age of digital consent in your jurisdiction, which may be as high as 16 under GDPR member state law). We do not knowingly collect personal information from children under 18 (or the applicable age). If you are under that age, please do not use the Services or provide any personal information.
By using the Services, you represent that you are at least 18 years old (or the applicable age in your jurisdiction) or are using the Services with the consent and supervision of a parent or legal guardian.
If you believe a child under 18 has provided us with personal information, please contact us at dan@catholicbros.com and we will take steps to delete that information.
14. Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, alteration, and disclosure. However, no method of transmission over the Internet or electronic storage is fully secure, and we cannot guarantee absolute security.
15. Third-Party Links
The Site may contain links to third-party websites, services, or content. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy notices of any third parties before providing them with personal information.
16. Do Not Track and Opt-Out Preference Signals
Some browsers transmit “Do Not Track” (DNT) signals. There is no industry consensus on how to respond to DNT signals, and we do not currently respond to DNT signals. However, we recognize and honor opt-out preference signals such as the Global Privacy Control (GPC) for visitors located in jurisdictions where applicable law requires us to do so.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The “Last Updated” date at the top reflects the date of the most recent revision. If we make material changes, we will provide additional notice (such as a banner on the Site or an email to subscribers) as required by applicable law. Your continued use of the Services after the effective date of any update constitutes acceptance of the revised Policy to the extent permitted by law.
18. Contact Us
For questions about this Privacy Policy or to exercise your rights, please contact:
Bright Cloud Media, LLC
1971 E. Beltline Ave NE.
Ste 106 #581
Grand Rapids, MI 49525
Email: dan@catholicbros.com
Subject Line: “Privacy Request”