Privacy Policy

At a glance

• We collect what you give us (name, work email, company, answers on our forms) and what your browser tells us when you visit (pages viewed, device, approximate location, cookies and similar IDs).
• We use it to send you what you asked for, to run and improve our marketing, to measure our ads, and to show you our ads on other sites and apps, including Meta (Facebook and Instagram), Google (Search, YouTube and partner sites) and LinkedIn.
• We share it with the tools we run on (such as HubSpot, Google, Meta and our AI providers) and with ad platforms. We don't sell your personal information for money. Some of that ad sharing counts as "sharing" or "targeted advertising" under some US state laws, and you can opt out.
• You can unsubscribe from any email, opt out of ad tracking through Your Privacy Choices (one.greenflagdigital.com/legal/privacy-choices, linked from the footer of every one.greenflagdigital.com page where our tags run), a Global Privacy Control signal or an email to us, and ask us to see, correct or delete your data at privacy@greenflagdigital.com.

1. Who we are

Green Flag Digital LLC ("Green Flag Digital", "we", "us") is a marketing agency in San Diego, California. We run greenflagdigital.com, one.greenflagdigital.com (GFD ONE), greenflagaeo.com and the forms, emails and ads that point to them (together, the "Services"). This policy covers personal information we collect through the Services. It doesn't cover client data we process under a client contract; that's governed by the contract. Signed-in use of the GFD ONE client portal is also covered by our Client Portal Privacy Notice.

2. What we collect

Information you give us

• Contact details: name, work email, phone, company, job title.
• Form answers: for example "What do you run?", your website, your goals, and anything you type into a message.
• Information from calls, emails and meetings with us, including meeting notes and recordings if you agree to them.
• Payment details when you buy something. Payments are processed by Stripe; we don't store full card numbers.

Information collected automatically

• Device and usage data: IP address, browser, device type, pages viewed, referring page, time on page, clicks, and approximate location derived from your IP address.
• Cookies, pixels, tags and similar technologies (section 4), including ad click IDs (such as Meta's fbclid and Google's gclid) and email open and click data.

Information from others

• Ad platforms: when you submit a lead form inside Meta, LinkedIn or Google, that platform sends us what you entered. Information you submit through those lead forms is governed by this Privacy Policy, which is linked from each form.
• Business data providers and public sources: we may add business contact and company details (for example job title, company size, industry) from providers such as Apollo and from public sources such as company websites and LinkedIn profiles.
• Partners and referrers who introduce you to us.

3. How we use it

• To deliver what you asked for: guides, templates, Quick Looks, newsletters, proposals and services.
• To communicate with you, including marketing emails you can unsubscribe from at any time.
• Advertising and measurement. We use your information to show you our ads on other sites and apps, to build custom and lookalike audiences (for example by uploading hashed email addresses to Meta, Google or LinkedIn so they can match them to their users), to measure which ads work, and to send conversion events back to ad platforms (for example through the Meta Conversions API and Google enhanced conversions). Email addresses and phone numbers are hashed before we upload them to an ad platform, and we don't use sensitive information to build audiences.
• To understand and improve the Services, including analytics, A/B tests and lead scoring.
• AI tools. We use AI services (such as Anthropic's Claude) to draft and personalize content, summarize conversations, research companies, and produce reports such as Quick Looks from the website and details you submit. A person on our team reviews anything we send you. We use providers' business offerings and settings that keep our data out of model training where available.
• To keep the Services secure, prevent fraud and comply with law.

4. Cookies, pixels and similar technologies

We and our partners use cookies, pixels, tags, SDKs and server-side events on the Services. They include, or may include:

Third parties, including Meta and Google, may use cookies, web beacons, device identifiers and other storage technologies to collect or receive information from our sites and elsewhere on the internet, and use that information to provide measurement services and to show you ads, including ads based on your past visits to our sites. You can opt out at Google My Ad Center, the Network Advertising Initiative, the Digital Advertising Alliance, Your Online Choices in Europe, or through Your Privacy Choices. You can also block or delete cookies in your browser; some features may stop working.

Google Analytics advertising features. We may use Remarketing, Demographics and Interests reporting, and Google Ads integration. We don't merge personally identifiable information with these features without your consent.

Cookie consent in Europe and the UK. If you visit one.greenflagdigital.com from the EU, the EEA or the UK, these tags stay off until you accept them in the cookie notice, and you can reject them with one tap. Your answer is kept in a first-party cookie for six months; change it at any time on Your Privacy Choices.

Global Privacy Control. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of sale and sharing for targeted advertising. On one.greenflagdigital.com, our tracking and ad tags don't load in a browser that sends it. To apply it to you as a person, including in our CRM and on greenflagdigital.com, email us and we'll record it on your contact record. To turn on GPC, use a browser or extension that supports it (see globalprivacycontrol.org).

Do Not Track. Our sites don't respond to browser Do Not Track signals, because there is no common standard for them. We do honor GPC as described above.

5. Who we share it with

• Service providers that run our business for us: CRM and email (HubSpot), hosting and databases (such as Vercel and Supabase), payments (Stripe), scheduling, meeting recording, analytics, data enrichment and AI providers. They may use it only to provide services to us.
• Advertising and measurement partners, such as Meta, Google and LinkedIn, as described in sections 3 and 4.
• Professional advisers and authorities when the law requires it or to protect our rights, users or the public.
• A buyer or successor if we're involved in a merger, acquisition or sale of assets.
• Anyone else with your consent or at your direction.

We don't sell personal information for money. Under some US state laws, letting ad partners collect data through our sites for targeted advertising counts as "selling" or "sharing". You can opt out of that at any time (section 8).

Your Privacy Choices / Do Not Sell or Share My Personal Information. To opt out of the sale or sharing of your personal information for targeted advertising, use Your Privacy Choices (linked from the footer of every one.greenflagdigital.com page where our tags run), send a GPC signal, or email privacy@greenflagdigital.com. The page and GPC work per browser; email us to opt out as a person across every browser, our emails and greenflagdigital.com.

6. How long we keep it

We keep marketing contact data and form answers for up to 3 years after your last interaction; website and ad analytics data for up to 26 months; meeting recordings for up to 12 months; and client, billing and payment records for 7 years for tax and contract purposes. We then delete or anonymize it, unless you ask us to delete it sooner or the law requires us to keep it longer.

7. Security

We use reasonable technical and organizational safeguards, such as access controls, encryption in transit and vendor reviews. No system is perfectly secure.

8. Your rights and choices

Everyone

• Unsubscribe from marketing email using the link in any email.
• Use the ad and cookie opt-outs in section 4.
• Ask us what we hold about you, or to correct or delete it, at privacy@greenflagdigital.com.

California and other US states with privacy laws (where those laws apply to us). Depending on where you live, you may have the right to:

• know what personal information we collect, use, disclose, sell or share, and to get a copy;
• correct or delete it;
• opt out of the sale or sharing of personal information and of targeted advertising, including by sending a GPC signal;
• limit use of sensitive personal information (we don't use sensitive personal information to infer characteristics about you);
• not be discriminated against for using these rights;
• appeal our decision on your request by replying to it.

To make a request, email privacy@greenflagdigital.com with the subject "Privacy request". We'll verify your request by matching it to information we already have, and we'll answer within the time the law requires (usually 45 days). An authorized agent may make a request for you if they provide your signed permission, and we may ask you to confirm your identity with us directly.

In the last 12 months we collected these categories of personal information: identifiers (name, email, IP address, cookie IDs); professional information (company, title); commercial information (purchases); internet activity (pages viewed, ad and email interactions); approximate geolocation; and inferences (lead scores and interests). Sources, purposes and recipients are described in sections 2 to 5. We disclosed identifiers, professional information, commercial information, internet activity and inferences to service providers (CRM, hosting, payments, enrichment, analytics and AI providers) for business purposes. We disclosed identifiers, internet activity and inferences to advertising partners (Meta, Google, LinkedIn) for cross-context behavioral advertising. We don't have actual knowledge that we sell or share the personal information of anyone under 16.

Europe and the UK. We rely on these legal bases: your consent (for non-essential cookies and some marketing, where the law requires consent), our legitimate interests (running and marketing our business to business contacts, measuring ads, keeping the Services secure), contract (delivering what you buy) and legal obligation. You can access, correct, delete, restrict or port your data, object to processing (including direct marketing at any time), and withdraw consent. You can complain to your local data protection authority. Your data is processed in the United States; where required, we use standard contractual clauses or similar safeguards.

9. AI and automated decisions

We use automated tools to score leads and decide which emails or ads to show, but we don't make decisions that have legal or similarly significant effects on you based only on automated processing. Content we publish on our public pages may be read and indexed by search engines and AI systems.

10. Children

The Services are for businesses and professionals. They aren't directed to children under 16, and we don't knowingly collect their personal information. We don't sell or share the personal information of anyone we know to be under 16. If you believe a child has given us information, email us and we'll delete it.

11. Changes

We'll update this policy when our practices change and change the date at the top. If a change is significant, we'll tell you by email or on the site before it takes effect.

12. Contact us

Green Flag Digital LLC, 10089 Willow Creek Rd #200, San Diego, California 92131, United States Email: privacy@greenflagdigital.com