Privacy Policy

Boards of Growth is a digital marketing consultancy that provides SEO, paid media, analytics, conversion optimization, website, and growth strategy services. This Privacy Policy explains how we collect, use, store, share, and protect information through our website, client relationships, and the tools, platforms, and systems our clients authorize us to access.

By using our website, you acknowledge the practices described in this Privacy Policy. For privacy-related questions or requests, contact us at:

[email protected]

1. Scope of This Policy

This Privacy Policy applies to:

• Visitors to the Boards of Growth website.
• Prospective clients who contact us, book calls, submit forms, or communicate with us.
• Clients who authorize us to access advertising, analytics, website, CRM, call tracking, reporting, or other business systems.
• Information we process in connection with providing our services.

This Policy does not replace any signed proposal, statement of work, master services agreement, data processing agreement, business associate agreement, confidentiality agreement, or other written agreement between Boards of Growth and a client. If a signed agreement applies, that agreement controls where it conflicts with this Policy.

This Policy does not govern how our clients collect, use, store, or share information through their own websites, platforms, forms, CRM systems, call tracking systems, treatment systems, or other properties. Those practices are governed by each client’s own privacy notices, policies, agreements, and legal obligations.

2. Information We Collect

We may collect information directly from you, automatically through our website, or through tools and accounts that clients authorize us to access.

Information You Provide to Us

We may collect information such as:

• Name.
• Email address.
• Phone number.
• Company name.
• Website URL.
• Job title.
• Business information.
• Project details.
• Messages, form submissions, and correspondence.
• Billing, proposal, contract, and payment-related information.
• Any other information you choose to provide.

Website, Analytics, and Device Information

When you visit our website, we may collect information such as:

• IP address.
• Browser type.
• Device type.
• Operating system.
• Referring pages.
• Pages viewed.
• Time spent on the website.
• Clicks, scrolls, form interactions, and other website activity.
• Approximate location based on device or network information.
• Cookie identifiers, advertising identifiers, and similar tracking data.

We may collect this information using analytics, advertising, retargeting, conversion tracking, CRM, call tracking, session recording, heatmap, lead attribution, security, and similar technologies.

Client-Authorized Platform and Account Data

When a client grants us access to third-party platforms, accounts, APIs, dashboards, websites, advertising accounts, analytics accounts, CRM systems, call tracking systems, CMS platforms, reporting tools, or other business systems, we may access, collect, export, analyze, store, transmit, and otherwise process information from those systems as reasonably necessary to provide our services.

This may include:

• Advertising account data.
• Search engine data.
• Website analytics data.
• Search query data.
• Conversion data.
• Landing page and website performance data.
• CRM, lead, contact, or pipeline data.
• Call tracking and attribution data.
• Form submission data.
• Campaign settings.
• Audience, remarketing, and segmentation data.
• Account configuration information.
• Reports, exports, screenshots, documents, spreadsheets, dashboards, and related work files.

The exact information we access depends on the services requested by the client and the permissions granted to us.

3. How We Use Information

We may use information to:

• Respond to inquiries.
• Evaluate whether we are a good fit for a prospective client.
• Provide SEO, PPC, analytics, CRO, website, reporting, and growth consulting services.
• Access, review, manage, audit, troubleshoot, and optimize client accounts and systems.
• Build reports, dashboards, strategies, recommendations, forecasts, and analyses.
• Communicate with clients and prospective clients.
• Manage proposals, contracts, invoices, and business records.
• Improve our website, services, workflows, and internal operations.
• Run analytics, advertising, retargeting, and lead attribution.
• Secure our website, accounts, files, and systems.
• Detect, prevent, or investigate fraud, abuse, security issues, or unauthorized access.
• Comply with legal obligations.
• Enforce agreements and protect our rights.

We do not sell client data or personal information.

4. Google API Data

Clients may authorize Boards of Growth to access Google products and APIs, including but not limited to Google Ads, Google Analytics, Google Search Console, Google Business Profile, Google Tag Manager, Looker Studio, Google Drive, Google Sheets, or other Google services that may be relevant to client work.

When a client authorizes access, we may use Google API data to:

• Analyze advertising, search, analytics, and website performance.
• Manage, audit, troubleshoot, and optimize campaigns or accounts.
• Prepare reports, dashboards, exports, recommendations, and strategy documents.
• Monitor performance trends, conversions, search visibility, traffic, and business outcomes.
• Support the services requested by the client.

We may store Google API data in reports, spreadsheets, dashboards, documents, local files, cloud storage, internal workspaces, or other business systems used to provide services and maintain business records.

We may share Google API data with service providers, contractors, consultants, platforms, or tools that help us provide services, operate our business, secure our systems, or support client work. We do not sell Google API data. We do not use Google API data for unrelated advertising, unrelated retargeting, data-broker purposes, or surveillance purposes.

Clients may revoke our Google access at any time through their Google account permissions or by contacting us at [email protected]. Clients may also request deletion of Google API data we maintain, subject to legal, contractual, backup, security, and legitimate business recordkeeping needs.

Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including applicable Limited Use requirements.

5. Cookies and Tracking Technologies

We may use cookies, pixels, tags, scripts, server logs, and similar technologies to operate our website, measure performance, improve user experience, attribute leads, run advertising, and understand how visitors interact with our content.

These technologies may be provided by analytics platforms, advertising platforms, CRM platforms, call tracking providers, heatmap/session recording tools, lead attribution tools, security tools, or similar service providers.

We may use these technologies for:

• Website analytics.
• Conversion tracking.
• Advertising measurement.
• Retargeting.
• Audience building.
• Lead attribution.
• CRM integration.
• Call tracking.
• Session analysis.
• Fraud prevention and security.
• Website performance improvement.

You can control cookies through your browser settings. Some browsers also offer “Do Not Track” settings. Our website does not currently respond to all browser-based “Do Not Track” signals. Where legally required, we will honor applicable privacy preference signals.

Some third-party advertising and analytics providers offer their own opt-out tools. Your choices may depend on your browser, device, and the specific provider.

6. AI-Assisted, Automation, and Productivity Tools

We may use AI-assisted, automation, analytics, cloud, and productivity tools to help us provide services and operate our business. These tools may help us analyze data, prepare reports, summarize information, troubleshoot technical issues, generate drafts, improve workflows, and develop recommendations.

Information processed by these tools may include website data, advertising data, analytics data, search data, CRM data, client documents, project notes, business communications, and other information relevant to the services we provide.

We use these tools to support client work and internal operations. We do not sell client data or personal information to AI tool providers. Where an engagement requires special handling of regulated, confidential, or highly sensitive data, additional written terms may apply.

7. Service Providers and Third Parties

We may share information with third parties that help us provide services and operate our business, including:

• Cloud storage providers.
• Analytics platforms.
• Advertising platforms.
• AI-assisted and automation tools.
• CRM and project management tools.
• Reporting and dashboard tools.
• Website hosting and security providers.
• Payment processors.
• Email and communication tools.
• Contractors, consultants, and professional advisors.
• Legal, accounting, compliance, and administrative service providers.

We may also share information:

• With client-authorized platforms and accounts.
• When required by law, subpoena, court order, or legal process.
• To protect our rights, property, clients, website, systems, or users.
• In connection with a business transaction such as a merger, acquisition, financing, restructuring, or sale of assets.
• With consent or at the direction of the client.

We may also use and share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify a specific person or client.

8. Client Responsibility for Authorized Access and Regulated Data

Some Boards of Growth clients operate in healthcare, behavioral health, addiction treatment, financial services, legal services, or other regulated industries. Our standard services are marketing, analytics, advertising, SEO, CRO, website, and related business services.

Clients are responsible for determining what information they provide to us, what systems they authorize us to access, whether the information is regulated or sensitive, and whether additional legal terms are required.

Unless a separate written agreement says otherwise, clients are responsible for their own legal, regulatory, industry, licensing, privacy, advertising, and platform-policy compliance.

9. Data Storage and Retention

We may store information in local files, cloud storage, email systems, project management systems, reporting tools, analytics tools, business systems, backups, and other operational systems.

We retain information for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain business records, support reporting, comply with legal obligations, resolve disputes, enforce agreements, preserve work history, protect our rights, and operate our business.

Clients and prospective clients may request deletion of information by contacting [email protected]. We will review and respond to deletion requests, subject to legal, contractual, backup, security, dispute-resolution, and legitimate business recordkeeping needs.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, misuse, loss, disclosure, alteration, or destruction.

No website, platform, file system, transmission method, or storage system is completely secure. Clients are responsible for managing access permissions in their own platforms, removing users who no longer need access, using strong credentials, and maintaining the security of their own systems.

11. Client Access Controls and Revocation

Clients control the permissions they grant through third-party platforms. Clients may revoke our access through those platforms at any time.

We may also remove, disable, or reduce access when an engagement ends, when access is no longer needed, when requested by the client, or when we believe continued access creates a security, legal, or operational risk.

Revoking access may limit our ability to provide services.

12. California Privacy Information

Boards of Growth is a U.S.-focused business based in California. We include this section to provide additional transparency for California residents.

Depending on how you interact with us, we may collect categories of information such as:

• Identifiers, such as name, email address, phone number, company name, IP address, and online identifiers.
• Business and commercial information, such as inquiry details, client relationship information, project information, and service history.
• Internet or electronic network activity, such as website interactions, pages viewed, device information, browser information, analytics data, and advertising interaction data.
• Professional or employment-related information, such as job title, company role, business contact details, or information shared during sales or client communications.
• Inferences or business insights created from client-authorized marketing, analytics, website, CRM, advertising, or performance data.

We may use and disclose these categories for the purposes described in this Privacy Policy.

We do not knowingly sell personal information. We may use advertising, analytics, retargeting, and similar technologies that involve sharing certain online identifiers or website activity with third-party platforms for measurement, attribution, or advertising purposes. You can control cookies through your browser settings and may contact us at [email protected] with privacy requests.

13. Children’s Privacy

Our website and services are intended for businesses and adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us at [email protected].

14. International Visitors

Boards of Growth is U.S.-focused. If you access our website or communicate with us from outside the United States, you understand that your information may be processed in the United States or in other locations where our service providers operate.

15. Third-Party Websites and Platforms

Our website may link to third-party websites, platforms, tools, or services. We are not responsible for the privacy practices, content, policies, or security of third parties. Review their privacy policies before providing information to them.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date. Your continued use of our website or services after an update means the updated Policy applies.

17. Contact Us

For privacy questions, access requests, deletion requests, or other privacy-related matters, contact:

[email protected]