Legal

Privacy Policy

Effective July 23, 2026

This Privacy Policy explains how Birmingham Marketing Guy (“Birmingham Marketing Guy,” “we,” “us,” or “our”) collects, uses, discloses, and protects information about visitors to and users of birminghammarketingguy.com (the “Site”). It also describes your choices about how we handle your information and the rights you have under U.S. state privacy laws, the European Union’s General Data Protection Regulation (GDPR), and the United Kingdom’s data protection framework.

By using the Site, you acknowledge you have read this Policy. If you do not agree with our practices, do not use the Site.

Who We Are

Birmingham Marketing Guy is a small-business marketing consulting practice. For any privacy question, request, or complaint, contact us at [email protected]. We are the “data controller” under GDPR and the “business” that collects your information under California terminology.

Information We Collect

Information you provide directly

  • Identifiers and contact details. Your name, email address, phone number, business name, business website, and any information you include when you submit a form, schedule a call, or email us.
  • Content of communications. The substance of messages you send us, notes we make during calls or engagements, and any files you share.
  • Payment and billing details. If you become a client, we may collect billing address, tax identifier, and payment method details. Payment processing is handled by third-party processors; we do not store full card numbers on our own systems.

Information collected automatically

  • Device and connection data. IP address, browser type and version, operating system, referring URL, pages viewed, time and duration of visits, links clicked, and general geographic location inferred from IP.
  • Cookie and similar technology data. See the Cookie Policy for a full list of cookies used on the Site.
  • Analytics and advertising measurement. When you have granted the corresponding consent, aggregate signals are transmitted to Google Analytics 4 for measurement.
  • Chat interactions. If you use the on-page chat widget, the widget provider processes the content of the conversation and metadata about it.

How We Use Information

  • To respond to your inquiries, schedule meetings, and provide the services you request.
  • To operate, maintain, secure, and improve the Site and our services.
  • To measure Site performance using consented analytics.
  • To send you information related to a conversation you started or that you have opted into.
  • To detect, investigate, and prevent fraud and security incidents.
  • To comply with legal, tax, accounting, and regulatory obligations.

Legal Basis (EEA and UK)

If you are in the European Economic Area or United Kingdom, we process your personal data on the following legal bases: consent (non-essential cookies and marketing communications you opted into), contractual necessity (to provide services you requested), legitimate interests (operating and securing the Site), and legal obligation.

How We Share Information

  • Service providers. Vendors that operate infrastructure and tools on our behalf, listed below.
  • Professional advisors. Lawyers, accountants, insurers, and auditors when necessary.
  • Legal and safety. When required by subpoena, court order, or applicable law, or to enforce our rights.
  • Business transfers. In connection with a merger, acquisition, or asset sale, subject to the same privacy commitments.
  • With your direction. When you ask us to share your information.

We do not sell personal information for money. When you have granted Marketing consent, limited identifiers may be shared with advertising platforms for measurement. Under California’s expanded “sale” and “sharing” definitions, those disclosures may qualify as such; opt out on our Do Not Sell or Share My Personal Information page.

Third-Party Services

  • Google Analytics 4 (Google LLC). Aggregate site analytics.
  • Google Cloud Platform (Google LLC). Hosting via Cloud Run.
  • Cloudflare, Inc. DNS resolution.
  • Cadrey (Cadrey AI, Inc.). On-page chat widget.
  • OneCal. Consultation booking.

Cookies

We use cookies and similar technologies (pixels, local storage). A full description is on our Cookie Policy. Necessary cookies are always on. For visitors in the European Economic Area, the United Kingdom, Switzerland, or where a Global Privacy Control signal is present, Analytics and Marketing cookies are off by default and only run after you affirmatively opt in. For visitors elsewhere, including the United States, Analytics and Marketing cookies run under an opt-out model.

Data Retention

  • Inquiry records: up to 24 months from last contact.
  • Client records: for the duration of the engagement plus 7 years for tax, accounting, and legal compliance.
  • Analytics data: Google Analytics 4 configured with 14-month event retention.
  • Server and security logs: up to 90 days.

Data Security

We use administrative, technical, and physical safeguards. Traffic to and from the Site is encrypted with TLS. Access to backend systems is restricted and logged. No system is perfectly secure, but we take practical steps to make an incident unlikely and to contain it quickly.

Your Rights

  • Right to know or access the personal information we hold about you and its uses.
  • Right to correct inaccurate information.
  • Right to delete personal information, subject to legal exceptions.
  • Right to portability of your information in machine-readable format.
  • Right to opt out of sale or sharing via the Do Not Sell or Share page or by rejecting Marketing cookies.
  • Right to non-discrimination for exercising these rights.
  • Right to withdraw consent at any time.
  • Right to lodge a complaint with your applicable data protection authority.

Email [email protected] with the subject “Privacy Request.” We verify identity before responding. Standard timeline is 45 days; complex requests may take up to 90 days.

Notice to California Residents

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA”), you have the rights above. In the last 12 months we have collected identifiers, commercial information, internet activity, geolocation (from IP), and audio or electronic information (chat transcripts and voicemails). We do not collect biometric information, precise geolocation, government identifiers, or protected classification characteristics.

Notice to Other U.S. State Residents

Residents of Colorado, Connecticut, Utah, Virginia, Texas, Oregon, and other states with comprehensive privacy laws have similar rights. Use the same email address for requests.

Notice to EEA and UK Residents

You have the rights described above under GDPR and equivalent UK law. You may withdraw consent at any time without affecting the lawfulness of prior processing. You may lodge a complaint with your local supervisory authority. When information is transferred to service providers in the United States, we rely on Standard Contractual Clauses or, where applicable, the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.

Children

The Site is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe your child has provided personal information, contact [email protected] and we will delete it.

Do Not Track

We do not currently respond to Do Not Track signals because no consistent standard has emerged. You can still control tracking through our cookie banner, the Do Not Sell or Share page, and your browser settings. We do honor Global Privacy Control as an opt-out signal.

Changes to This Policy

We may update this Policy from time to time. The “Effective” date at the top will change. Material changes will be highlighted on the Site for at least 30 days.

Contact

Email [email protected]. See also our Cookie Policy, Do Not Sell or Share, Terms, and Accessibility.