Privacy policy

One form on this site collects business contact details so I can write back with an audit. No phone number is ever requested. Nothing is sold, rented, or shared with advertisers. There is no analytics tracker following you around this site.

• What you type into the audit form: business name, website, city or service area, industry, typical job value, current ad spend band, where your work comes from, your name, your email, and any notes.
• Two optional checkboxes: whether you want a test inquiry submitted through your own form, and your acknowledgement that replies come by email.
• If you buy a plan: your name, email, and billing address, collected and stored by Stripe. Card numbers are handled entirely by Stripe and never reach this site or any system I control.
• Standard server logs kept by the hosting provider, which include IP address and request time.

No phone number field exists anywhere on this site. No health information, government ID, or financial account detail is requested or wanted — please do not send any.

• To write and send you the audit you asked for.
• To answer your questions and, if you become a client, to do the work.
• To take payment, if you buy a plan.
• To keep the site up and to investigate abuse of the form.

Your details are not used to send marketing you did not ask for. If I ever start a mailing list it will be opt-in and separate from this form.

Only the services needed to run the business, and only the minimum each one needs:

• Vercel — hosting and server logs.
• An automation service (n8n) that routes your form submission to my inbox and lead records.
• Stripe — payment processing and billing records, for clients only.
• Email providers used to send and receive the reply.

Nothing is sold. Nothing is shared with advertising networks. If a government body compels disclosure by valid legal process, I have to comply, and I will tell you unless legally barred from doing so.

If you arrive here from an ad, the ad platform may know you clicked it. Conversion tracking, where enabled, records that a form was submitted — not who submitted it or what they typed. If you become a client, any pixel installed on your site is installed under your account and governed by your own privacy policy, not this one.

Audit submissions are kept for up to 24 months so I can pick up a conversation where it left off. Client records and billing records are kept as long as required for tax and accounting purposes — generally seven years in the US. Ask for deletion at any time and anything not legally required to be retained is removed.

Email greighlin@hitch-marketing.com and ask for a copy of what is held about you, a correction, or deletion. No special form, no account required. Requests are answered within 30 days and usually much faster.

California residents have specific rights under the CCPA/CPRA, including the right to know, delete, correct, and to not be discriminated against for exercising them. Personal information is never sold or shared for cross-context behavioral advertising, so there is no opt-out to offer — but the same email address handles any request.

This is a business-to-business service and is not directed at anyone under 18. No information is knowingly collected from children.

Data travels over HTTPS, payment details never touch this site, and access to lead records is limited to me. That said, no system is perfectly secure. If a breach affects your information I will tell you directly and promptly.

Material changes to this policy will be reflected in the date at the top of this page. Questions go to greighlin@hitch-marketing.com — the only contact channel, by design.

The other two pages in this set are the terms of service, which covers what you are buying and how to cancel, and the refund policy, which covers what gets money back.