Your data, explained simply.
This page tells you exactly what information we collect, why we collect it, who we share it with, and how to opt out. Plain English. No legalese where we can avoid it.
1. Who we are
PELORA Marketing is a creative-first marketing agency based in Newport Beach, California. We operate the website at peloramarketing.com (the "Site"). When this policy says "we," "us," or "PELORA," we mean PELORA Marketing. When it says "you," we mean any visitor to the Site or anyone who contacts us, books a call, or buys a service.
2. What we collect
2.1 Information you give us directly
- Contact form data: Name, email, phone, business name, and any message you send through a form on the Site.
- Calendly booking data: If you book a strategy call via Calendly, we receive your name, email, time zone, and answers to any intake questions Calendly collects.
- Stripe payment data: If you purchase a service, Stripe processes the payment. We receive your name, email, billing details, and the purchased product. We do not directly store your card number. Stripe stores it under their own security standards (PCI DSS).
- Chat conversations: If you message us via the on-site AI chat assistant, the transcript is stored to improve responses and follow up if you book.
- Email and SMS replies: If you respond to our marketing or follow-up sequences, we store those replies in our CRM to continue the conversation.
2.2 Information collected automatically
- Cookies and pixels: The Site uses cookies and tracking pixels from Meta (Facebook), Google (Ads and Analytics), HubSpot, and similar services to understand which pages you visit, where you came from, and which marketing campaigns are working.
- Device and browser data: IP address, browser type, operating system, screen size, and approximate location (city or region level).
- Behavior data: Pages viewed, time on page, links clicked, scroll depth, video plays, form interactions.
- Referral data: The URL of the site that linked you to us, the search query that brought you here (when search engines share it), and any UTM campaign parameters in the URL.
3. Why we collect it
We collect this data to:
- Respond to your inquiries, schedule calls, and deliver the services you bought.
- Send you relevant follow-up emails and texts about our services (you can opt out anytime).
- Measure which marketing campaigns are working so we can improve them.
- Show you relevant ads on Meta (Facebook and Instagram), Google, YouTube, and similar platforms (retargeting).
- Comply with legal obligations (tax records, accounting records, payment dispute records).
- Protect the Site against fraud, spam, and abuse.
4. Who we share it with
We do not sell your personal information. We share data only with the third-party services that help us run the business, and only what they need to do their job:
- Meta Platforms (Facebook, Instagram): The Meta Pixel installed on the Site sends event data (page views, form starts, purchases) to Meta so we can measure ad performance and retarget visitors.
- Google (Ads, Analytics, Tag Manager): Same purpose as Meta. Google Ads conversion tracking and Google Analytics 4 receive event and traffic data.
- HubSpot: Our CRM. Stores your contact details, conversation history, and lifecycle stage so we know who you are when you reach out.
- Stripe: Processes payments. Receives the data Stripe needs to charge your card and email you a receipt.
- Calendly: Hosts our calendar and intake form for booked calls.
- Netlify: Hosts the Site itself. Sees standard server logs (IP, request paths, timestamps).
- Chatbase: Powers the AI chat assistant on the Site, if you use it.
- Email and SMS providers: The tools that send our follow-up sequences.
- Bing Webmaster Tools and Google Search Console: Receive sitemap and search performance data. They do not receive personal data from you.
We may also disclose data when required by law (subpoena, court order, regulatory request) or to defend against legal claims.
5. Cookies and tracking
The Site uses cookies and similar technologies. The main categories:
- Strictly necessary: Required for the Site to function (session cookies, security tokens). You cannot opt out of these.
- Analytics: Google Analytics, HubSpot tracking. Help us measure performance.
- Advertising: Meta Pixel, Google Ads conversion tracking, retargeting pixels.
You can opt out of advertising cookies by:
- Adjusting your browser cookie settings.
- Opting out at facebook.com/settings?tab=ads for Meta.
- Opting out at adssettings.google.com for Google.
- Visiting the Digital Advertising Alliance opt-out page: optout.aboutads.info.
6. Your rights
6.1 If you live in California (CCPA / CPRA)
California residents have the right to:
- Know what personal information we have about you.
- Request a copy of that information.
- Request that we delete it (with some exceptions for legal record-keeping).
- Correct inaccurate information.
- Opt out of the "sale" or "sharing" of personal information. (We do not sell your data. The data we share with Meta and Google for advertising purposes may legally count as "sharing" under CPRA.)
- Not be discriminated against for exercising these rights.
6.2 If you live anywhere else
You have similar rights under your local privacy law (GDPR if you are in the EU or UK, PIPEDA if you are in Canada, etc.). To exercise any of these rights, contact us using the info at the bottom of this page.
6.3 How to opt out of marketing
Every marketing email we send has an unsubscribe link in the footer. SMS messages include "Reply STOP to opt out." You can also email us directly and ask to be removed.
7. How long we keep it
- Contact and lead data: Kept in our CRM as long as you are a potential or active client, plus 3 years after our last interaction, unless you ask us to delete sooner.
- Customer / paying client data: Kept for 7 years after the engagement ends (for tax and accounting records).
- Marketing analytics data: Anonymized after 26 months in Google Analytics. Meta retains pixel data per their own retention policy.
- Chat transcripts: Kept for 12 months unless you request earlier deletion.
8. How we protect it
We use industry-standard security: HTTPS across the entire Site, encrypted CRM and payment processing, multi-factor authentication on every account that touches your data, principle-of-least-access permissions. No system is perfectly secure, and we cannot guarantee absolute security. If we ever experience a data breach that affects you, we will notify you and the relevant authorities within the timeframes required by law.
9. Children
The Site is not intended for anyone under 18. We do not knowingly collect personal information from children under 13 (or under 16 in the EU). If you believe we have inadvertently collected such information, contact us and we will delete it.
10. Changes to this policy
We may update this Privacy Policy when our practices change, when new tools are added to the Site, or when laws change. The effective date at the top of this page will be updated. Material changes will be flagged on the homepage or via email to active contacts.
11. Contact us
For privacy questions, data access requests, deletion requests, or anything else covered by this policy:
Email: hello@peloramarketing.com
Phone: (760) 409-7544
Mailing address: PELORA Marketing, Newport Beach, California, United States
We respond to verifiable privacy requests within 45 days, as required by California law.