Privacy policy.
This policy describes what personal information Webtoro33 ("we," "us," "our") collects on webtoro33.com, why we collect it, who we share it with, how long we keep it, and the rights you have over it — including rights specific to California residents under the California Consumer Privacy Act of 2018 as amended by the CPRA ("CCPA").
Who we are
Webtoro33 is a performance marketing agency based in California's Central Valley that builds lead-generation websites and runs local SEO, Google Ads, reputation, and marketing automation programs for contractors and local service businesses.
Contact: [email protected]
Information we collect
1. Information you give us directly
When you submit the free-audit form or otherwise contact us, we collect:
- Identifiers: your name, email address, phone number (optional), and business name.
- Commercial information: your website URL, the service you are interested in, and the challenge or goal you describe in the form's message field.
- Location: the city and state you serve.
2. Information collected automatically
When you visit webtoro33.com, the following is collected automatically by us or by the third-party services listed below:
- Internet or network activity: pages viewed, referring URL, time on page, clicks, scroll depth, device and browser type, operating system, approximate IP-derived location (country/region only — we do not store full IPs), and session identifiers.
- Inferences: derived data such as which marketing campaigns or content are performing, used to improve the site and our own ad targeting.
We do not collect Social Security numbers, driver's license numbers, financial account numbers, precise geolocation, biometric information, or any sensitive personal information as defined by the CCPA.
How we use your information
- Respond to your inquiry. When you submit the free-audit form, we use your contact information to reach out with your audit and any follow-up about a potential engagement.
- Operate and improve the site. Analytics tell us which pages are useful, which are broken, and which marketing campaigns work.
- Advertising measurement. We run Google Ads and use conversion measurement to see which ads produce inquiries so we can spend our marketing budget responsibly.
- Security and legal compliance. Detecting abuse, preventing spam, and complying with legal obligations.
Third parties we share information with
We share limited information with the following service providers strictly to operate the site and respond to inquiries. None of them sells your information on our behalf.
| Service | Purpose | Data involved | Their policy |
|---|---|---|---|
| Web3Forms | Form submission processing | Form fields you submit (name, email, phone, business, message) | web3forms.com/privacy |
| Google Analytics 4 | Website analytics | Usage events, device, approximate region | policies.google.com/privacy |
| Google Ads | Ad measurement and conversion tracking | Conversion events, referring campaign | policies.google.com/privacy |
| Hosting provider (Netlify or Vercel) | Site delivery, request logging, DDoS protection | IP address (transient), request metadata | Netlify · Vercel |
We may also disclose information when required by law (for example, in response to a valid subpoena), to enforce our terms, or to protect the rights, property, or safety of Webtoro33, our clients, or the public.
Cookies and similar technologies
We use a small number of first-party and third-party cookies and storage keys:
- Strictly necessary: session integrity, form anti-spam.
- Analytics: Google Analytics sets cookies (
_ga,_ga_*) to measure distinct visitors and sessions. - Advertising measurement: Google Ads sets cookies to attribute conversions to ads you clicked.
You can block or delete cookies at any time using your browser settings. Doing so may reduce site functionality but will not prevent access to any page.
Data retention
- Free-audit form submissions: up to 24 months from submission, then deleted or anonymized.
- Analytics event data: up to 14 months (Google Analytics default retention setting).
- Engagement records for clients: retained for the life of the engagement plus 7 years for tax and legal recordkeeping.
Your California CCPA rights
If you are a California resident, you have the following rights regarding the personal information we collect about you. These rights are not absolute; they are subject to the exceptions and verification requirements of the CCPA.
- Right to know. You can request the categories and specific pieces of personal information we have collected about you in the past 12 months, the sources, the purposes, and the categories of third parties we shared it with.
- Right to delete. You can request that we delete personal information we collected from you, subject to statutory exceptions (for example, completing a transaction you requested, complying with legal obligations, or detecting security incidents).
- Right to correct. You can request that we correct inaccurate personal information we hold about you.
- Right to opt out of sale or sharing. We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising as that term is defined in the CCPA. There is nothing to opt out of, but if that ever changes we will update this policy, provide a "Do Not Sell or Share My Personal Information" link, and honor Global Privacy Control signals.
- Right to limit use of sensitive personal information. We do not collect sensitive personal information as defined by the CCPA, so this right does not apply to our collection.
- Right to non-discrimination. We will not deny you services, charge different prices, or provide a different level of quality because you exercised any of these rights.
To exercise any of these rights, email [email protected] with the subject line "CCPA Request." We will respond within 45 days. We may ask you to verify your identity before fulfilling the request. You can also designate an authorized agent to make a request on your behalf by providing written authorization.
Global Privacy Control (GPC)
Webtoro33 does not sell or share personal information. If your browser transmits a Global Privacy Control signal, we will treat it as a valid opt-out of any future sale or sharing for as long as we receive it.
Children
Webtoro33 is a business-to-business service. We do not knowingly collect personal information from anyone under 16. If you believe a minor submitted information through our site, contact us and we will delete it.
Security
We use HTTPS encryption in transit, strict Content Security Policy headers, and limited-access storage for form submissions. No method of transmission or storage is 100% secure, but we continuously harden the site against common web vulnerabilities and review our configuration quarterly.
Accessibility of this policy
This policy is published as accessible HTML that meets WCAG 2.2 Level AA. If you need an alternative format (large print, plain text, audio), email [email protected] and we will provide one within one business day.
Changes to this policy
We may update this policy to reflect changes to our practices or to applicable law. The "Effective" date at the top of this page always reflects the current version. Material changes will be highlighted at the top for at least 30 days.
Contact
Webtoro33
Central Valley, California
[email protected]
This policy is provided for transparency and compliance purposes. It is not legal advice. For advice about your specific situation, consult qualified counsel.