Legal
Privacy Policy
This policy explains what information this website collects, why we collect it, who else sees it, and what you can do about it. It applies to online-website-marketing.com and to the marketing services we deliver.
Call (714) 823-3164 or ask a question. Clear recommendations, even if we never work together.
Online Website Marketing collects contact details you submit through forms, basic analytics data about how you use the site, and cookie information. We use it to answer inquiries, deliver services, and improve the site. California and EU residents can request access, correction, or deletion, and can opt out of sharing.
Last updated
This privacy policy is a draft prepared for internal review. It has not been reviewed by counsel, and it should be reviewed and approved by a licensed attorney before you rely on it or publish it as final.
What We Collect
This policy was last updated in August 2026. We collect three kinds of information on this site. The first is information you hand us directly. When you fill out a contact form, request a visibility audit, book a strategy call, or send us an email, we receive your name, business name, email address, phone number, website address, and whatever you type into the message field. If you become a client, we also receive billing contact details and access to the marketing platforms we manage for you. The second kind is information your browser sends on its own. That includes your IP address, browser type, device type, operating system, the pages you view, how long you stay on them, and the page or search that sent you here. The third kind is information stored on your device through cookies and similar technology, described further down this page. We do not collect Social Security numbers, driver license numbers, financial account numbers, precise geolocation, biometric data, or health information through this website. If something you were about to type into a message field belongs in one of those categories, please call us instead at (714) 823-3164.
How We Use It and Why We Are Allowed To
We use what we collect for a short list of purposes. We answer questions and respond to quote requests. We deliver the services a client hired us to deliver. We send invoices and collect payment. We send service updates and, for people who opted in, occasional marketing email. We measure which pages and traffic sources produce inquiries so we can spend our own budget sensibly. We protect the site against spam, fraud, and abuse. For visitors in the United States, we process this information because it is needed to respond to your request, to perform a contract, or because we have a legitimate business interest in operating and improving the site. For visitors in the European Economic Area and the United Kingdom, where the General Data Protection Regulation applies, our legal bases are consent for analytics and marketing cookies, performance of a contract for client work, legitimate interests for security and basic site operation, and legal obligation for tax and accounting records. You can withdraw consent at any time, and that withdrawal does not undo processing that already happened. We do not sell personal information for money, and we do not hand it over so another company can build a profile about you.
Third Parties That Receive Data
We keep the vendor list short on purpose, because every additional service is another place your information lives. The four below are the ones that touch data from this website. Each operates under its own privacy policy and its own data processing terms, and we do not control how they run their systems. Beyond these, we may share information with our accountant, our payment processor, and our legal advisors when the work requires it, and with law enforcement if we receive a valid legal demand. If we ever sell the business or merge, client and prospect records would transfer with it, and we would post notice on this page before that happened. We do not give your contact details to other agencies, lead brokers, or list vendors. We have never done it, and we do not intend to start. Clients also grant us access to their own platform accounts, such as Google Business Profile, Google Ads, and Meta Business Manager. Those accounts stay in the client's name and under the client's ownership, and our access ends when the engagement ends.
- Google Analytics: measures site usage and traffic sources. IP addresses are truncated where supported.
- Google Tag Manager: loads and controls measurement tags. It does not store personal data by itself.
- Vercel: hosts the website and keeps standard server and security logs.
- Resend: delivers form notification emails from the site to our inbox.
How Long We Keep It and How We Protect It
We hold information only as long as it serves the reason we collected it. Contact form submissions from people who never became clients are kept for about 24 months, then deleted, because a stale inquiry has no value to either of us. Client records, contracts, and invoices are kept for seven years after the engagement ends, which is what tax and accounting rules require in California. Email marketing records are kept until you unsubscribe, plus a suppression record afterward so we do not accidentally email you again. Server logs roll off after roughly 30 days. Analytics data follows the retention window set inside Google Analytics, which we keep at 14 months. On security, we use encrypted connections across the whole site, limit account access to the people who need it, require multi factor authentication on the systems that support it, and use a password manager rather than shared credentials. No system is perfectly secure, and we will not claim otherwise. If a breach affects your personal information, we will notify you and the appropriate authorities within the timeframes the law requires, and we will tell you plainly what happened rather than burying it in language nobody reads.
California Privacy Rights: CCPA and CPRA
If you live in California, the California Consumer Privacy Act and the California Privacy Rights Act give you specific rights over the personal information a business holds about you. You have the right to know what categories of personal information we collected, where it came from, why we collected it, and who we disclosed it to. You have the right to request a copy of the specific pieces we hold. You have the right to ask us to delete it, subject to exceptions such as records we must keep for tax purposes. You have the right to correct information that is inaccurate. You have the right to limit the use of sensitive personal information, though as noted above we do not collect it through this site. You have the right to opt out of the sale or sharing of personal information, and we will not treat you differently for using any of these rights. Under the Do Not Sell or Share My Personal Information heading, here is the honest position: we do not sell personal information for money. Advertising and analytics cookies can count as sharing for cross context behavioral advertising under California law. To opt out, decline marketing cookies in the banner, turn on Global Privacy Control in your browser, or email us and ask.
EU Rights, Children, and How to Make a Request
If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation gives you the right to access your data, correct it, erase it, restrict how we process it, object to processing based on legitimate interests, receive a portable copy, and lodge a complaint with your local supervisory authority. Our services target businesses in Southern California, so EU visitors are uncommon here, but those rights apply regardless of how many people use them. This website is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child gave us information, email us and we will delete it. To use any right on this page, email terrysr@online-website-marketing.com with the subject line Privacy Request, or call (714) 823-3164 during business hours, seven days a week, 10:00 AM to 6:00 PM Pacific. Tell us which right you want to use. We will confirm receipt within 10 business days and respond within 45 days, with one 45 day extension if the request is complex. We verify identity before releasing data, usually by matching the email address on file. An authorized agent may submit a request with written permission from you.