Privacy Policy

Last updated: October 28, 2026

This Privacy Policy explains how Green Flag Digital LLC (“Green Flag Digital,” “GFD,” “we,” “us,” or “our”) collects, uses, shares and protects personal information when you visit greenflagdigital.com and our related pages, fill out our forms, subscribe to our newsletter, talk with us, or otherwise interact with us (together, the “Site” and “Services”).

Green Flag Digital is a B2B marketing agency (AI search, SEO and digital PR). Our Site is intended for businesses and professionals.

Information we collect
How we use information
Cookies, pixels and analytics
How we share information
Your choices
California and other U.S. state privacy rights
EEA, UK and Swiss visitors
How long we keep information
Security
International transfers
Children
Client data
Changes to this policy
Contact us

1. Information we collect

Information you give us

Contact and inquiry details: such as your name, email address, phone number, company, job title, website URL, and anything you write in a message, when you fill out a contact or booking form, sign up for our newsletter, download a resource, or email or meet with us.
Communications: records of emails, chats, calls and meetings with us, which may be recorded or transcribed with notice.
Business information: details about your company, goals and marketing that you choose to share when exploring or buying our Services.

Information collected automatically

When you use the Site, we and our partners automatically collect device and usage information, such as:

IP address and approximate location (city/region) derived from it
browser, device and operating system
pages viewed, links clicked, time on page and the referring site or search query
cookie and similar identifiers
where session recording is used, mouse movements, clicks and scrolling on our pages

Information from third parties

Visitor identification and enrichment: we use B2B data services that may match a visit to our Site with company or professional profile information they hold (for example, company name, industry, size, and in some cases a professional name, title or business email address).
Business data providers: we may obtain publicly available or licensed business contact information (such as name, title, company and business email) to research and reach out to companies that may benefit from our Services.
Advertising and social platforms: we receive reports about how people interact with our ads and posts.

We do not intentionally collect sensitive personal information (such as government ID numbers, financial account numbers, health information or precise geolocation) through the Site. Please do not send it to us.

2. How we use information

To respond to inquiries, schedule calls, and provide proposals and Services
To send newsletters and marketing emails you have asked for or that are permitted by law (you can unsubscribe at any time)
To identify businesses interested in our Services and to conduct B2B sales outreach
To measure and improve the Site, our content and our marketing
To show you relevant advertising on other websites and platforms, and to measure whether our ads work
To secure the Site, prevent spam, fraud and abuse, and troubleshoot problems
To comply with law, enforce our terms, and protect our rights and the rights of others

3. Cookies, pixels and analytics

We use cookies, pixels, tags and similar technologies on the Site. The categories, with examples of the providers we use, are:

Necessary: hosting, security, spam protection and the forms that make the Site work (for example, our hosting provider and Gravity Forms).
Analytics: to understand how the Site is used (for example, Google Analytics, Microsoft Clarity, Amplitude, PostHog and Plausible). Some of these tools may record sessions to help us improve page design.
Marketing and CRM: to manage leads, forms, chat and email (for example, HubSpot and Intercom).
Advertising: to measure and target ads (for example, Google Ads, LinkedIn and Meta pixels).
B2B visitor identification: to understand which companies and professionals visit the Site (for example, Apollo, Clearbit by HubSpot and similar services).

You can manage non-essential cookies through our cookie settings banner where available, through your browser settings, or through the opt-out tools offered by these providers (for example, Google Analytics opt-out and NAI opt-out). Blocking cookies may affect how the Site works.

Do Not Track and Global Privacy Control. Our Site does not respond to browser “Do Not Track” signals, because there is no common standard for them. Where required by applicable law, we treat a Global Privacy Control (GPC) signal as a request to opt out of the “sale” or “sharing” of personal information for that browser.

We do not sell personal information for money. We share personal information with:

Service providers that work on our behalf under contract, such as website hosting (Kinsta), CRM and email (HubSpot, Google Workspace), forms, chat, analytics, scheduling, meeting recording, project management, data enrichment, AI and productivity tools, and payment and accounting providers.
Advertising and analytics partners (such as Google, LinkedIn and Meta) through the cookies and pixels described above. Under some U.S. state laws, this may be considered “selling” or “sharing” personal information for targeted advertising. See Your choices to opt out.
Professional advisers, such as lawyers, accountants and insurers.
Authorities and others when required by law or legal process, or to protect the rights, safety or property of GFD, our clients or others.
A buyer or successor in connection with a merger, acquisition, financing or sale of all or part of our business.
Others with your direction or consent.

5. Your choices

Marketing emails: click “unsubscribe” in any marketing email, or contact us. We may still send you non-marketing messages about an inquiry or engagement.
Cookies and ads: use our cookie settings banner where available, your browser settings, GPC, or the opt-out tools above.
Opt out of targeted advertising, “sale” or “sharing”: email us at the address below with the subject “Do Not Sell or Share,” or turn on GPC in your browser.
Access, correction or deletion: contact us as described below.

6. California and other U.S. state privacy rights

Depending on where you live (for example, California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with consumer privacy laws), and to the extent those laws apply to us, you may have the right to:

know what personal information we have collected about you and access a copy of it
correct inaccurate personal information
delete personal information
opt out of the sale or sharing of personal information and of targeted advertising
not be discriminated against for exercising these rights

To make a request, email us at the address below. We will verify your request by matching information you provide with information we hold. You may use an authorized agent, and we may ask the agent for proof of authorization. If we deny your request, you may appeal by replying to our decision with the subject “Privacy Appeal.”

Categories of personal information collected in the last 12 months. We collect the categories below from you, from your device, and from the third-party sources described in Section 1, for the purposes in Section 2. We disclose them to the recipients in Section 4.

Category	Examples	Collected
Identifiers	Name, email, phone, IP address, cookie and online identifiers	Yes
Professional or employment information	Company, job title, business contact details	Yes
Internet or network activity	Pages viewed, clicks, referrers, ad interactions	Yes
Approximate geolocation	City or region derived from IP address	Yes
Audio or electronic information	Recordings or transcripts of calls and meetings, with notice	Yes
Inferences	Likely interests or company fit, based on the above	Yes
Commercial information	Services purchased or considered	Yes (clients and prospects)
Protected classifications, biometric data, education records	—	No
Sensitive personal information	—	No

Identifiers, internet activity and inferences may be “sold” or “shared” (as those terms are defined under California law) with advertising partners for targeted advertising. We do not knowingly sell or share the personal information of consumers under 16.

If you are in the European Economic Area, the UK or Switzerland, we process your personal information on these legal bases:

Consent: for non-essential cookies and certain marketing. You can withdraw consent at any time.
Contract: to respond to your requests and provide Services.
Legitimate interests: to run, secure and improve our business and Site, and to market our B2B services, balanced against your rights.
Legal obligation: to comply with law.

You have the right to access, correct, delete, restrict or object to processing of your personal information, and to data portability. You may also complain to your local data protection authority.

8. How long we keep information

We keep personal information for as long as needed for the purposes in this policy. That generally means for the duration of a business relationship, plus the period needed for legal, tax, accounting and dispute-resolution purposes. We keep inquiry and marketing records until you ask us to delete them or they are no longer useful. When we no longer need information, we delete or anonymize it.

9. Security

We use reasonable administrative, technical and physical safeguards to protect personal information, including managed hosting with malware scanning and vulnerability protection, access controls and multi-factor authentication. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. International transfers

We are based in the United States, and our service providers may process information in the U.S. and other countries. Where required, we rely on appropriate safeguards, such as Standard Contractual Clauses, for transfers of personal information from the EEA, UK or Switzerland.

11. Children

Our Site and Services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

12. Client data

When we provide Services to our clients, we may process personal information on their behalf, for example within their analytics, CRM or advertising accounts. In those cases, we act as a service provider or processor, and the client’s own privacy policy governs that information. Please contact the relevant client with any requests about it.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and change the “Last updated” date above. If changes are material, we will provide additional notice where required.

14. Contact us

For questions, or to exercise your privacy rights, contact:

Green Flag Digital LLC
10089 Willow Creek Rd #200
San Diego, CA 92131, USA
Email: privacy@greenflagdigital.com