Privacy Policy

Iron Brook Digital LLC — Effective date: 1 January 2026

Introduction

Iron Brook Digital LLC (“Iron Brook Digital,” “we,” “us,” or “our”) operates the website ironbrookdigital.com and provides Google review and AI-powered automation services to local businesses.

This policy explains what personal information we collect, why we collect it, who helps us process it, and the choices and rights you have. It applies to our website, our forms, our booking and payment processes, and the text messages and emails we send to people who have asked to hear from us.

If anything here is unclear, email us at [email protected] and we will explain it.

Information we collect

We only collect information we actually need to run our business and serve our clients.

Information you give us directly

• Contact details submitted through forms on our website: your name, phone number, and email address.

• Booking details when you schedule a call or appointment: the date and time you select, the service you are interested in, your time zone, and anything you write in a notes or message field.

• Business information you choose to share, such as your company name, website, industry, and what you are hoping to improve.

• Payment details when you purchase a service. Card and bank information is entered into and processed by our payment processor, Stripe. We do not store full card numbers on our own systems. We keep a record of the transaction, such as the amount, date, plan purchased, and the last four digits of the card.

• Messages you send us by email, text message, web chat, or phone.

Information collected automatically

• Website and device information such as your IP address, browser type, device type, operating system, the pages you visit, the links you click, how long you stay, and the site or ad that referred you. This is collected through cookies and similar technologies, including Google Analytics.

• Communication activity such as whether an email we sent was opened or a link was clicked, and whether a text message was delivered.

Information we do not collect

We do not ask for and do not want your Social Security number, government ID numbers, health information, or precise geolocation. Please do not send us this kind of information.

How we use your information

We use the information we collect to:

• Respond to your enquiry and answer your questions.

• Schedule, confirm, and remind you about calls and appointments.

• Set up, deliver, and support the services you have purchased, including our review-generation and automation services.

• Process payments, issue receipts, and handle refunds or billing questions.

• Send service and account messages, such as confirmations, onboarding steps, reporting, and updates about your account.

• Send marketing and promotional messages by email or text message when you have asked to receive them, and only until you tell us to stop.

• Provide customer support and keep records of support requests.

• Understand how our website performs, which pages are useful, and where our visitors come from, so we can improve the site.

• Keep our systems secure, prevent fraud and abuse, and troubleshoot problems.

• Meet our legal, tax, accounting, and record-keeping obligations.

We do not use your information for automated decisions that have a legal or similarly significant effect on you.

Legal basis for processing

Iron Brook Digital LLC is based in the United States and serves clients in the United States. We handle personal information in line with applicable United States federal law and state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act, and comparable laws in states such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and Florida, where those laws apply to us.

In practice, we rely on the following grounds:

• Your consent. For marketing emails and text messages, and for non-essential cookies and analytics. You can withdraw consent at any time.

• Performing our contract with you. To deliver the services you have purchased, take payment, and provide support.

• Legitimate business interests. To secure our systems, prevent fraud, keep accurate records, and improve our website and services in ways you would reasonably expect.

• Legal obligations. To comply with tax, accounting, and other legal requirements.

SMS and mobile information

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We only send text messages to people who have given us their mobile number and agreed to receive them, for example by checking a consent box on one of our forms or by texting us first. Consent to receive marketing text messages is never a condition of purchasing anything from us.

The text messages we send fall into two categories: service messages related to your account, appointments, and support, and promotional messages about our services, which we send only if you opted in to them.

Text message opt-out and help

You are in control of the text messages you receive from us.

• To stop receiving text messages, reply STOP to any message from us at any time. We will send one confirmation message and then stop sending you texts. You can opt back in at any time by texting START or by contacting us.

• For help, reply HELP to any message from us, or contact us at [email protected] or +1 407-890-8003.

• Message frequency may vary depending on the service you use and how you interact with us.

• Message and data rates may apply. Your mobile carrier’s standard rates for messages and data will apply. We are not responsible for those charges.

• Carriers are not liable for delayed or undelivered messages.

• Not all mobile carriers or devices support every message type.

To stop receiving marketing emails, click the unsubscribe link at the bottom of any marketing email, or email [email protected]. We may still send you necessary service and billing messages about an active account.

Cookies and analytics

Our website uses cookies and similar technologies. A cookie is a small file stored on your device that helps a website work properly and helps us understand how the site is used.

We use:

• Essential cookies, which are needed for the site to function, such as keeping forms and page navigation working.

• Analytics cookies, through Google Analytics, which help us see how many people visit, which pages they view, and how they found us. This information is used in aggregate to improve the website.

• Form and booking cookies, set by our CRM platform, which help our forms and scheduling tools work and help us attribute an enquiry to the page it came from.

You can block or delete cookies through your browser settings. If you block essential cookies, parts of our website may not work correctly. You can also install the Google Analytics opt-out browser add-on, available from Google, to prevent Google Analytics from collecting your website activity.

We do not respond to browser Do Not Track signals, because there is no common standard for how they should be handled. The opt-out choices above are available to you instead.

How we share information

We do not sell or rent your personal information. We do not share your personal information with third parties or affiliates for their own marketing purposes.

We share information only in these limited situations:

With service providers and subcontractors who help us operate. These companies process information on our behalf, under contract, and only for the purpose of providing their service to us:

• GoHighLevel — our customer relationship management platform. It stores your contact details, booking details, support conversations, and the record of your messaging and email preferences, and it powers the automations we run for our clients.

• Stripe — our payment processor. Stripe handles card and bank details and processes payments and refunds. Stripe’s own privacy notice governs how it handles payment data.

• Google Analytics — our website analytics provider, which processes website and device information as described above.

We may also use similar support providers, such as email delivery, text message delivery, hosting, scheduling, and customer support tools. Where we do, they are bound by contract to use the information only to provide their service to us, to keep it confidential, and not to use it for their own purposes.

When the law requires it. We may disclose information if we are required to by law, a subpoena, a court order, or a valid request from a government authority, or where we need to in order to protect our legal rights, investigate fraud, or protect the safety of any person.

In a business transfer. If our business is sold, merged, or reorganized, information may transfer as part of that transaction. Any recipient would remain bound by this policy for information collected under it, and we would notify you of any material change.

With your direction. If you ask us to share information with someone, such as your own team member or another provider you work with, we will follow your instruction.

Text messaging originator opt-in data and consent are never shared with any third party, as stated in the SMS and mobile information section above.

Data security

We take reasonable steps to protect your information. These include encrypted connections on our website and forms, access controls so that only people who need your information can reach it, strong authentication on the accounts we use, and reliance on established providers such as Stripe for payment processing so that we do not hold full card details ourselves.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach that affects your personal information, we will notify you and any relevant authority as required by law.

How long we keep your information

We keep personal information only as long as we have a reason to:

• Enquiries and form submissions that do not become clients: up to 24 months from your last contact with us, then deleted.

• Client records, including booking and service history: for the duration of our working relationship and for up to 7 years afterwards, so we can meet tax, accounting, and legal record-keeping requirements.

• Payment and transaction records: up to 7 years, as required for tax and accounting purposes.

• Text message and email consent and opt-out records: for as long as we operate our messaging programs, because we are required to be able to show that consent was given and that opt-out requests were honored.

• Website analytics data: retained according to the settings in Google Analytics, generally no longer than 14 months.

When we no longer need information, we delete it or remove details that identify you.

Your privacy rights

Depending on where you live, you may have some or all of the following rights. We honor these requests for anyone who asks, regardless of your state, wherever we reasonably can.

• Access. Ask what personal information we hold about you and get a copy of it.

• Correction. Ask us to fix information that is inaccurate or incomplete.

• Deletion. Ask us to delete your personal information. We may need to keep certain records, such as transaction records for tax purposes or opt-out records for messaging compliance.

• Opt out of marketing. Reply STOP to any text message, or unsubscribe from any marketing email, at any time.

• Portability. Ask for a copy of the information you provided to us in a portable format.

• Withdraw consent. Withdraw consent you previously gave, at any time, without affecting anything we did before you withdrew it.

• No discrimination. We will not deny you service, charge you a different price, or give you a lower quality of service because you exercised a privacy right.

To make a request, email [email protected] with the details of what you would like, or call +1 407-890-8003. We will confirm receipt and respond within 45 days. If we need more time, we will tell you why and how long we expect to take, within the limits the law allows.

We may need to verify your identity before acting on a request, usually by confirming details we already hold, such as the email address or phone number you gave us. An authorized agent may make a request on your behalf if they provide written permission from you and we can verify it.

If you are unhappy with how we handled your request, contact us first and we will try to resolve it. You may also contact your state attorney general’s office.

Children’s privacy

Our services are for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 18 years of age. If you believe a minor has given us personal information, email [email protected] and we will delete it promptly.

Links to other websites

Our website and our messages may link to other websites, such as a client’s website, a review platform, or a payment page. We do not control those sites and are not responsible for their privacy practices. We recommend reading the privacy policy of any site you visit.

Changes to this policy

We may update this policy when our services, tools, or legal obligations change. When we do, we will update the effective date at the top of the page and post the new version on ironbrookdigital.com. If a change materially affects how we use your personal information, we will make a reasonable effort to notify you directly, such as by email. Continuing to use our website or services after an update means you accept the revised policy.

Contact us

If you have questions about this policy, want to exercise a privacy right, or want to raise a concern, contact us:

Iron Brook Digital LLC
1309 Coffeen Avenue STE 1200
Sheridan, Wyoming 82801
United States

Email: [email protected]

Phone: +1 407-890-8003

Website: ironbrookdigital.com

We aim to respond to all privacy enquiries within 5 business days.