Privacy Policy
What we collect, why we collect it, how we handle data inside your own marketing accounts, and how to make us delete any of it.
Effective July 27, 2026
The short version
We collect what you type into our contact form and standard analytics about how this site is used. We use it to answer your question and to make the site better. We do not sell it, we do not rent it, and we share it only with the service providers listed below who help us run the business.
If you become a client we also handle data inside your own marketing accounts. That is covered separately below, because it is the part most agencies are vague about.
What we collect
Information you give us
When you submit the form we receive your name, business name, email address, phone number, website, the service you selected, your budget range, and anything you write in the message field. If you call, we keep notes so we can pick up where we left off.
Information collected automatically
Pages visited, roughly how long you spend on them, the site or search that sent you, browser and device type, and an approximate location from your IP address. This is aggregate and we do not use it to identify individuals.
Client marketing data
While we run your marketing we work inside accounts that belong to you: advertising platforms, analytics, email lists, social profiles, review platforms, and your CRM. We access that data to do the work you hired us for and for nothing else. We do not combine it with another client's data, we do not use it to build audiences for anyone else, and we do not take a copy with us when an engagement ends.
What we do not collect
- Payment card details. We never take card numbers through this website.
- Social security numbers, government identifiers, or financial account details.
- Sensitive personal information as defined by California law.
- Information about children. This site is not directed at anyone under 16.
How we use it
- To answer your enquiry and follow up on it.
- To prepare an audit, a proposal, or a scope of work if you ask for one.
- To deliver and report on marketing you have engaged us to run.
- To improve the site, including which pages are useful and which are not.
- To meet legal, tax, and accounting obligations.
We do not use your details for automated decision making and we do not build advertising profiles from them. If you have not asked to hear from us, we will not add you to a marketing list.
Who we share it with
A short, honest list. Each of these processes data on our behalf and is bound to use it only for the service it provides us.
- Our sister companies. Orca Creative and Orca IT are part of the same family of companies. If your enquiry belongs with one of them, we pass it internally rather than to a third party.
- Advertising and analytics platforms. Where you have asked us to run campaigns, we operate inside platforms such as Google and Meta using accounts registered in your name.
- Form processing. Submissions reach us through a third party form service which passes the message to our email and does not retain it for its own purposes.
- Email and file storage. Our email and document systems hold correspondence and files.
- Hosting. The servers this site runs on.
- Accounting. Invoicing and bookkeeping records for clients.
We will also disclose information if legally required to, for example in response to a valid subpoena or court order. If that happens and we are permitted to tell you, we will.
We do not sell or share your personal information as those terms are defined under the California Consumer Privacy Act, and we have not done so in the preceding twelve months. There is nothing to opt out of, because we do not do it.
Cookies and tracking
This site uses a small number of cookies. Some are necessary for it to function. Others support analytics so we can see which pages are working. We do not run advertising cookies or third party tracking pixels on this site.
Separately, if we install tracking on your own website as part of an engagement, that tracking belongs to you, sits in your accounts, and is documented in your own privacy policy rather than in ours.
You can block or delete cookies in your browser at any time and this site will keep working. Most browsers also send a Do Not Track or Global Privacy Control signal, and we honor those where our systems receive them.
How long we keep it
- Enquiries that do not become clients. Up to 24 months in case you come back, then deleted.
- Client records. For the length of the engagement and seven years afterward, which is what our tax and accounting obligations require.
- Campaign assets and reporting. Kept while we work together and archived afterward, so you can come back later and still get your files.
- Access to your platforms. Removed within five business days of an engagement ending, and you can revoke it yourself at any moment because the accounts are yours.
- Analytics for this site. Aggregate data on a rolling basis, typically 14 months.
Your rights
Depending on where you live you may have specific legal rights over your information. We extend the following to everyone who contacts us, regardless of where they are, because drawing lines by residency seemed like a strange way to treat people.
- Know. Ask what personal information we hold and where it came from.
- Access. Request a copy of it.
- Correct. Ask us to fix anything inaccurate.
- Delete. Ask us to erase it, subject to records we are legally required to keep.
- Opt out. Tell us to stop contacting you, at any time, for any reason.
- Non discrimination. We will not treat you differently for exercising any of these.
To use any of these, call 800.274.6775 or use the form on this site. We confirm receipt quickly and respond within 45 days, which is the window California law allows, though in practice it is usually the same week.
How we protect it
Access to client accounts is limited to the people working on your marketing. Accounts use strong authentication, devices are encrypted, and we review who has access to what whenever somebody joins or leaves.
We will not claim any system is perfectly secure, because none is. What we will tell you is that if a breach ever affected your information we would notify you directly and promptly rather than burying it in a notice on a website.
Changes to this policy
If we change how we handle information we will update this page and change the effective date at the top. Material changes will be flagged clearly rather than slipped in quietly. This version took effect on July 27, 2026.
How to reach us
Call 800.274.6775 or use the form on this site. A person will answer, and it will be someone who can action your request rather than route it somewhere else.