Privacy Policy

1. Overview

Spearhead Marketing (“Spearhead,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect when you visit this website, contact us, or work with us, how we use it, who we share it with, and the choices you have.

We are a small marketing business, not a software platform. We do not run user accounts, host customer databases, or operate an advertising network. This policy is written to describe what actually happens on this website and in the course of our services — nothing more.

By using this website, you acknowledge the practices described here. If you do not agree, please do not submit personal information through the website.

2. Who we are

Spearhead Marketing is a website design and Google Business Profile management business based in Stephens City, Virginia, serving contractors and local service businesses in the United States. Contact details are in section 17.

For any information you submit through this website, Spearhead Marketing decides why and how it is used. When we work on a client's own website, Google Business Profile, or customer communications, we act on that client's instructions, and the client's own privacy policy governs their customers' information.

3. Information we collect

Information you provide

When you submit our contact form, email us, or become a client, we collect the information you choose to give us. Through the contact form this typically includes your first and last name, business name, email address, phone number if you provide one, which service you are interested in, and whatever you write in the message field. It also includes a record of the consent boxes you checked and when you submitted the form.

If you become a client, we may also collect business information, content and assets you send us, and access credentials you choose to share so we can do the work. We ask that you never send passwords by email; use a password manager's sharing feature or a platform's built-in delegated access instead.

Information collected automatically

This website is a set of static pages. It sets no cookies of its own, uses no analytics, runs no advertising pixels, and does not track you across other websites. Our web host records standard server logs — IP address, browser type, pages requested, timestamps and referring page — for security and reliability. The third-party services listed in section 6 collect their own information when you interact with them, and their practices are governed by their policies.

Information from third parties

We may receive your information from a referral source, a mutual contact, a review platform, or a business directory. If you were referred to us, we may know your name and business before you contact us. We do not buy consumer lead lists.

4. How we use information

We use information to:

• respond to your inquiry and answer questions about our services;
• prepare proposals and quotes, and manage projects we are engaged for;
• provide customer support and communicate about work in progress;
• send transactional messages such as scheduling, invoices, and project updates;
• send marketing communications where you have consented, consistent with your choices;
• operate, secure, and troubleshoot this website;
• maintain business and accounting records, prevent fraud, enforce our agreements, and comply with legal obligations.

5. Email and SMS communications

If you give us your phone number and consent to text messages, we may send SMS notifications, alerts, and occasional marketing communications from Spearhead Marketing at the number you provided. Message frequency varies. Message and data rates may apply. Reply STOP at any time to unsubscribe, or HELP for help. Consent to marketing messages is not a condition of purchase.

We do not sell, rent, or share your phone number or your SMS opt-in consent with any third party for their own marketing purposes. We share it only with the vendors that deliver messages on our behalf, and only for that purpose. Mobile opt-in data and consent records are never shared with third parties or affiliates for marketing.

You can unsubscribe from marketing email using the link in any marketing message, or by emailing us. We may still send you messages about active work, billing, or security, which are not marketing.

6. Service providers we use

Rather than describe our vendors in the abstract, here is what this website actually connects to and what each one receives:

• GoHighLevel / LeadConnector (HighLevel, Inc.) — our customer relationship manager. The contact form on our Contact page is an embedded GoHighLevel form. Everything you type into it goes directly to GoHighLevel, which stores it and notifies us. That embedded form is served from api.leadconnectorhq.com and may set its own cookies in your browser. It is loaded only on the Contact page.
• Google Fonts (Google LLC) — supplies the typefaces used across this site. Because the fonts are requested from Google's servers, Google receives your IP address and basic request information on every page you load. Google states it does not use these requests to build advertising profiles.
• Our web host — serves the pages and keeps standard server and security logs.
• Email and scheduling providers — deliver and store our correspondence with you.
• Google Business Profile — for clients who engage us for that service, we act on the client's account under their authorization.

If we add analytics or any advertising or tracking technology to this website in the future, we will update this section and this policy's “Last updated” date before, or at the time, it goes live.

7. How we share information

We share personal information with the service providers described above, in each case limited to what they need to perform their function for us. We may also disclose information when required by law or valid legal process, to protect our rights, property, or the safety of any person, in connection with a sale or reorganization of the business, or with your consent.

8. What we do not do

Some commitments are clearer stated as negatives:

• We do not sell personal information for monetary compensation.
• We do not share personal information for cross-context behavioral advertising.
• We do not share phone numbers or SMS consent with third parties for their marketing.
• We do not use your personal information, or our clients' customer data, to train generalized artificial intelligence or machine learning models.
• We do not buy consumer lead lists or scraped contact data.

9. Cookies, tracking, and Do Not Track

This website sets no first-party cookies and stores nothing in your browser's local storage. The embedded GoHighLevel form on our Contact page may set its own cookies when it loads; those are governed by HighLevel's privacy policy. You can block or delete cookies in your browser settings, though the contact form may not work correctly if you block them.

Because we run no cross-site tracking, there is nothing here for a “Do Not Track” or Global Privacy Control signal to turn off. We do not respond to those signals differently, as we do not engage in the tracking they are designed to stop. If that ever changes, this section will change with it.

10. Data retention and security

We keep inquiry information for as long as needed to respond and to maintain a record of the conversation, and typically no longer than three years after our last contact with you, unless you become a client. Client records, including contracts, invoices, and consent records, are kept for the length of the engagement and then for the period required for tax, accounting, and legal purposes — generally seven years. Consent records for SMS are kept for at least as long as we may need to evidence that consent.

We use reasonable administrative, technical, and organizational safeguards appropriate to the size of our business. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe your interaction with us is no longer secure, please contact us immediately.

11. Children's privacy

This website and our services are directed to businesses and adults. We do not knowingly collect personal information from anyone under 16, and never from children under 13. If we learn we have collected such information, we will delete it promptly. If you believe a minor has provided us information, contact us using section 17.

12. Third-party links

This website links to third-party sites and services, including our Facebook page and Google Business Profile. We do not control those services, and their privacy practices are governed by their own policies. A link is not an endorsement of a third party's privacy practices.

13. Your choices and privacy rights

You can ask us at any time to tell you what personal information we hold about you, correct it, delete it, or provide a copy of it. You can also ask us to stop sending you marketing communications. To make a request, email us at ben@growwithspearhead.com with enough detail for us to identify your records.

We will respond within 45 days, and will tell you if we need more time. We may need to verify your identity before acting, and we may keep information where the law permits or requires it — for example, records of a completed transaction or an SMS consent record. We do not charge a fee for a first request, and we will not treat you differently for making one. If we decline a request, we will explain why, and you may appeal by replying to our response; we will answer an appeal within 45 days.

You may use an authorized agent to submit a request where applicable law permits. We may ask you to verify the agent's authority.

14. State privacy rights

Several U.S. states give residents specific rights over their personal information. Because we are a small business, most of these laws do not apply to us by their own terms — they set thresholds on the number of consumers whose data a business processes, and we fall well below them. We extend these rights to everyone who contacts us regardless, because it is the right way to operate and because we would rather not have you check whether a threshold applies.

This means that whether you live in Virginia, California, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or anywhere else, you may request access to, correction of, deletion of, or a portable copy of your personal information, and you may opt out of marketing. Use the process in section 13.

For California residents specifically: we do not sell personal information and we do not share it for cross-context behavioral advertising, so there is no “Do Not Sell or Share My Personal Information” mechanism to offer. We do not collect or use sensitive personal information beyond what you volunteer in your message to us. You have the right not to be discriminated against for exercising your rights, and we do not.

For Virginia residents: our business is based in Virginia. Rights under the Virginia Consumer Data Protection Act, including the right to appeal a refused request, are honored through the process in section 13.

15. International visitors

We operate in the United States and serve U.S. businesses. Our website and services are not directed to the European Economic Area, the United Kingdom, or Switzerland, and we do not offer goods or services to individuals there or monitor their behavior. If you contact us from outside the United States, your information will be transferred to and processed in the United States, where privacy laws differ from those where you live.

We are not certified under the EU-U.S. Data Privacy Framework and make no claim to be.

16. Changes to this policy

We may update this Privacy Policy. The “Last updated” date above reflects the most recent revision. If we make a material change — particularly one that adds tracking technology or a new category of data sharing — we will update this page before or at the time the change takes effect. Your continued use of the website after an update means you accept the revised policy.

17. How to contact us

For any privacy question, request, or complaint:

Spearhead Marketing
200 Brandylion Drive
Stephens City, VA 22655
ben@growwithspearhead.com

We answer privacy requests within 45 days. If you are not satisfied with our response, you may contact your state attorney general's office.