Privacy Policy

1. Introduction

The Equation Agency LLC ("we," "our," or "us") is a digital marketing agency based in Aventura, Florida, specializing in SEO, traffic recovery, AI search adaptation, and related services for businesses across South Florida and beyond. We are committed to protecting the privacy and personal information of every individual who visits our website, submits an inquiry, or engages with our services.

This Privacy Policy describes the types of personal information we collect, how we collect and use that information, with whom we share it, and the rights you have over your own data. This policy applies to the website located at theequationagencyllc.com and all associated subpages, booking flows, and digital assets operated by The Equation Agency LLC.

By visiting our website or submitting any form on it, you acknowledge that you have read and understood this policy. If you do not agree with these practices, please discontinue use of our website. This policy was last reviewed and updated in October 2026.

2. Information We Collect

We collect personal information in two primary ways: information you provide directly to us, and information collected automatically when you visit our website. Below is a detailed breakdown of each category.

Information You Provide Directly

When you complete a contact form, schedule a consultation, or communicate with us via email or phone, you may provide us with the following:

• Full name — used to address you personally and to maintain accurate records
• Email address — used for correspondence, scheduling confirmation, and follow-up communications
• Phone number — used for consultation calls and, where applicable, text-based follow-up if you opt in
• Business name and website URL — used to research your business prior to a strategy session
• Industry or business type — used to route your inquiry to the most relevant service offering
• Message or inquiry details — any written context you share about your goals, challenges, or questions
• Booking preferences — date and time selections made through our scheduling tool

Information Collected Automatically

When you visit our website, we and our service providers may automatically collect certain technical information about your device and browsing behavior, including:

• IP address — used for security, fraud prevention, and approximate geolocation
• Browser type and version — used to ensure our website renders correctly for your environment
• Operating system — collected as part of standard server request headers
• Pages visited and time spent — used to understand how users navigate our website and identify areas for improvement
• Referring URL — the website or search result that sent you to our site, if any
• Device type — whether you are on a mobile phone, tablet, or desktop computer
• Cookie identifiers — session and persistent identifiers stored on your device to support functionality and analytics

3. How We Collect Your Information

We collect information through the following mechanisms:

Direct Submission via Website Forms

Our website may include contact forms, consultation request forms, or newsletter signup forms. When you complete and submit one of these forms, the data you enter is transmitted to us and, depending on the form, stored in our CRM or email system for follow-up.

Booking System — Cal.com

We use Cal.com to power our consultation scheduling feature. When you book a strategy call through the booking modal or a direct scheduling link, you are submitting your name, email address, and selected appointment time directly through the Cal.com platform. Cal.com processes this data on our behalf and is subject to their own Privacy Policy. We receive a confirmation of the booking and your submitted contact information.

Website Analytics

We may use analytics tools, including Google Analytics, to collect aggregated data about website traffic and user behavior. These tools use cookies and similar technologies to track page views, session duration, traffic sources, and conversion events. This data is collected in anonymized or pseudonymous form and is used solely to improve our website's content, performance, and user experience.

Server Logs and Cloudflare

Our website is hosted on Cloudflare Pages, which processes every request to our website through Cloudflare's global network. Cloudflare may collect IP addresses, request metadata, and security-related signals as part of their infrastructure and security services. This collection is governed by Cloudflare's Privacy Policy. Separately, standard web server logs may capture request timestamps, IP addresses, status codes, and page paths for operational and security purposes.

Email and Phone Communications

If you contact us directly via email or phone, we retain a record of that communication, including any personal information you share in the course of the conversation. This helps us provide continuity of service and follow up appropriately.

4. How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery — to provide SEO services, digital marketing strategies, and related work you have engaged us to perform
• Consultation scheduling — to confirm, remind, and manage appointments booked through our scheduling system
• Follow-up communication — to respond to inquiries, provide requested information, send proposals, and follow up after consultations
• Business operations — to maintain accurate client and prospect records, generate invoices, and manage ongoing service relationships
• Website improvement — to analyze usage patterns, identify underperforming pages, and enhance the overall user experience
• Security and fraud prevention — to detect and respond to suspicious activity, unauthorized access attempts, or abuse of our website
• Legal compliance — to comply with applicable laws, regulations, court orders, or lawful requests from government authorities
• Marketing communications — only where you have explicitly opted in, we may send periodic updates about our services, new resources, or industry insights. You may opt out at any time.

We do not use your personal information to make automated decisions that produce legal or similarly significant effects on you, nor do we use it for profiling beyond the legitimate purposes described above.

5. Third-Party Tools We Use

To operate our business and deliver our services effectively, we rely on a limited number of trusted third-party platforms. Each provider is subject to its own privacy policy, and we endeavor to select providers whose data practices align with reasonable privacy standards.

Cal.com — Appointment Scheduling

Cal.com is our scheduling platform. When you book a consultation through our website, your name, email address, and appointment time are processed by Cal.com. Cal.com may store this information in accordance with their Privacy Policy. We use this data solely to confirm and conduct the scheduled appointment.

Cloudflare — Hosting and Security

Our website is served through Cloudflare Pages, and all web traffic passes through Cloudflare's network. Cloudflare provides DDoS protection, a web application firewall (WAF), and performance optimization. Cloudflare processes connection metadata including IP addresses, request headers, and response codes. This processing occurs at the network level and is governed by Cloudflare's Privacy Policy and Data Processing Agreement.

Google Analytics (If Applicable)

We may use Google Analytics to measure website traffic and user behavior. Google Analytics uses cookies to collect anonymized or pseudonymous data about how visitors interact with our website. This data is processed by Google and may be transmitted to and stored on Google's servers. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.

CRM and Email Platforms

We may use a customer relationship management (CRM) tool such as HubSpot or a comparable platform to store contact records, track communication history, and manage our sales and service workflows. Contact information you submit via our website may be entered into our CRM for follow-up and service delivery purposes. These platforms are contractually prohibited from using your data for their own marketing or selling it to third parties.

Google Search Console (Only If You Connect It)

If you are a client and choose to connect your Google Search Console account to us, Google gives us read-only access to the Search Console data for your website. Section 14 explains exactly what we receive from Google, how we use it, and how to remove our access.

Payment Processors

If applicable, payment transactions are handled by a third-party processor such as Stripe or QuickBooks Payments. We do not store full credit card numbers or sensitive payment credentials on our own servers. Payment data is handled under PCI-DSS compliant protocols by the respective processor.

6. Information Sharing

We do not sell, rent, or trade your personal information to any third party. This is an absolute policy and applies without exception to all data we hold about website visitors, prospects, and clients.

We may share your information in the following limited circumstances:

• Service providers acting on our behalf — the platforms described in Section 5 above receive your data only to the extent necessary to perform their specific function (e.g., Cal.com receives booking data to schedule appointments). These providers are not authorized to use your data for any other purpose.
• Legal requirements — we may disclose personal information if required to do so by law, subpoena, court order, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
• Business transfers — in the unlikely event that The Equation Agency LLC is acquired, merged with, or transfers its assets to another entity, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.
• With your consent — we may share your information with third parties when you have given us explicit permission to do so.

7. Cookies and Tracking Technologies

Cookies are small text files placed on your device when you visit a website. They allow websites to recognize returning visitors, remember preferences, and collect analytics data. We use the following types of cookies:

Strictly Necessary Cookies

These cookies are required for the website to function. They support navigation, form submissions, and security features. You cannot opt out of strictly necessary cookies without disabling the website entirely.

Analytics Cookies

If Google Analytics is active on our website, it places analytics cookies to track page views, session duration, and traffic source information. This data is aggregated and does not personally identify you. Analytics cookies can be blocked using browser settings or the Google Analytics Opt-out Add-on described in Section 5.

Third-Party Cookies

Third-party services embedded in our website, such as the Cal.com booking iframe, may place their own cookies. These are governed by the respective third-party's privacy policy and are outside our direct control.

How to Manage Cookies

Most browsers allow you to view, delete, and block cookies through their settings menus. Blocking all cookies may impair certain website functionality. For detailed guidance, consult your browser's help documentation or visit allaboutcookies.org. Opting out of analytics cookies will not affect your ability to use our website or book a consultation.

8. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, maintain active service relationships, meet legal and accounting obligations, and resolve any disputes that may arise.

Our general retention guidelines are as follows:

• Prospect inquiries (no contract signed) — retained for up to 24 months after the last communication, then permanently deleted unless you request earlier deletion
• Client records — retained for the duration of the service engagement plus seven (7) years to satisfy Florida business record-keeping requirements and standard accounting practices
• Booking and scheduling records — retained for up to 12 months after the appointment date
• Website analytics data — retained for up to 26 months in Google Analytics, in line with Google's default data retention settings; we may configure shorter retention periods at our discretion
• Email communications — retained in our email system for the duration of the relationship and up to three (3) years thereafter
• Server logs — retained for up to 90 days for security and operational diagnostics, then automatically overwritten

When personal information is no longer needed for any of the above purposes, we delete it from our active systems and, where technically feasible, request deletion from third-party service providers that processed it on our behalf.

9. Your Rights

Regardless of your location, we are committed to honoring reasonable data subject requests. You have the following rights with respect to the personal information we hold about you:

• Right to access — you may request a copy of the personal information we hold about you, including the categories of data, the purposes for which we hold it, and any third parties to whom it has been disclosed
• Right to correction — if any information we hold about you is inaccurate or incomplete, you may request that we correct or update it
• Right to deletion — you may request that we delete your personal information from our systems. We will honor this request unless retention is required by law or is necessary to complete a contracted service you have requested
• Right to restrict processing — in certain circumstances, you may ask us to limit the ways in which we use your data while a dispute or review is pending
• Right to data portability — where technically feasible, you may request that we provide your personal information in a structured, machine-readable format
• Right to withdraw consent — where we process your data based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing
• Right to object — you may object to processing of your personal information where we are relying on a legitimate interest as the legal basis for processing

To exercise any of these rights, please contact us at management@theequationagencyllc.com. We will respond to your request within 30 days. We may ask you to verify your identity before processing the request.

10. CCPA and GDPR Rights

California Residents — California Consumer Privacy Act (CCPA / CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including:

• Right to Know — the right to request disclosure of the categories of personal information we collect, the sources from which we collect it, the business purposes for collection, and the categories of third parties with whom we share it
• Right to Delete — the right to request deletion of personal information we have collected about you, subject to certain legal exceptions
• Right to Correct — the right to request correction of inaccurate personal information we maintain about you
• Right to Opt Out of Sale or Sharing — we do not sell or share personal information with third parties for cross-context behavioral advertising purposes, so no opt-out mechanism for this activity is required
• Right to Non-Discrimination — we will not discriminate against you for exercising any CCPA rights. We will not deny services, charge higher prices, or provide a different quality of service to you as a result of your exercising these rights

To submit a CCPA rights request, email us at management@theequationagencyllc.com with the subject line "CCPA Rights Request." We will verify your identity and respond within 45 calendar days, with a possible extension of an additional 45 days where reasonably necessary.

European Union and United Kingdom Residents — GDPR

If you are located in the European Union, European Economic Area, or the United Kingdom, you may have additional rights under the General Data Protection Regulation (GDPR) or UK GDPR, including the right to lodge a complaint with your local data protection supervisory authority. Our legal basis for processing your personal information is typically one of the following: performance of a contract (when you engage our services), compliance with a legal obligation, or our legitimate interests in operating our business, provided those interests are not overridden by your privacy rights.

Because we are a Florida-based business primarily serving domestic clients, we do not operate a formal EU data processing establishment. If you are in the EU and wish to exercise GDPR rights, please contact us at management@theequationagencyllc.com and we will address your request in accordance with applicable law.

11. Children's Privacy

Our website and services are intended solely for adults aged 18 and older. We do not knowingly collect personal information from individuals under the age of 18. Our services are business-to-business in nature, and we have no reason to interact with minors in the course of our normal operations.

If we become aware that we have inadvertently collected personal information from a person under 18, we will delete that information promptly. If you believe that a child has submitted personal information to us, please contact us immediately at management@theequationagencyllc.com so that we can take appropriate action.

12. Security Measures

We take the protection of your personal information seriously and implement a combination of technical and organizational measures to safeguard it against unauthorized access, disclosure, alteration, or destruction.

Technical Safeguards

• Cloudflare Security Layer — all traffic to our website is protected by Cloudflare's web application firewall (WAF), which filters malicious requests and mitigates DDoS attacks before they reach our servers
• TLS Encryption in Transit — all data transmitted between your browser and our website is encrypted using Transport Layer Security (TLS), ensuring that information cannot be intercepted by third parties during transmission
• HTTPS Enforcement — our website enforces HTTPS for all connections and redirects HTTP requests automatically
• Access Controls — access to systems that hold personal information is restricted to authorized personnel only, using role-based access controls and strong authentication practices
• No Storage of Payment Credentials — we do not store credit card numbers, bank account details, or similar sensitive financial information on our own infrastructure

Organizational Safeguards

We limit access to personal information to those employees and contractors who genuinely need it to perform their work. We train team members on data privacy expectations and contractually require third-party service providers to maintain appropriate security standards.

Limitations

While we employ industry-standard security practices, no method of data transmission or storage is completely secure. We cannot guarantee absolute security of your personal information. In the event of a data breach that materially affects your rights or the security of your personal information, we will notify affected individuals and relevant authorities as required by applicable law.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the top of this page and, at our discretion, may provide additional notice such as a banner on our homepage or an email to known contacts.

We encourage you to review this page periodically to stay informed about how we protect your information. Your continued use of our website after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree with the changes, please discontinue use of our website and contact us to request deletion of your data.

Prior versions of this policy may be requested by contacting us at the address below. We will retain historical versions of this policy for our own records.

14. Google User Data (Google Search Console)

This section applies only if you choose to connect your Google Search Console account to The Equation Agency LLC. You do this on Google's own sign-in screen, for example through a "Connect with Google" link we send you. Our Search Console connection is described on its own page: theequationagencyllc.com/search-console-connect.

What We Receive From Google

When you agree on Google's screen, Google gives us read-only access to:

• Search Console data for the websites your Google account can see in Search Console: search performance (clicks, impressions, click-through rate, average position, top search queries and top pages), URL Inspection results (whether Google has indexed a page, when Google last crawled it, and the page Google chose as canonical), and your submitted sitemaps.
• The email address of the Google account you used, so we know who connected and can tell you which account to use if you need to reconnect.

We ask Google only for the read-only Search Console permission and your account's email address. We never ask for permission to change anything in Search Console.

How We Use It

We use this data only to:

• monitor and report on the website you asked us to look after;
• find and fix problems with how Google crawls, indexes and ranks that website; and
• show you the results, in our reports and conversations with you.

We cannot change anything in your Search Console, on your website or in your Google account. We do not see your emails, your files or your password. We do not use Google user data for advertising, we do not sell it, and we do not use it to develop, improve or train artificial intelligence or machine-learning models.

Sharing

We do not sell, rent or share Google user data with anyone, except: the service provider that hosts our private systems (Cloudflare), which processes it only on our behalf; when you ask us to share it; or when the law requires it. People at The Equation Agency LLC see it only to do the work described above.

Storage and Security

The permission Google gives us (a sign-in token) and your Google email address are stored encrypted (AES-256-GCM) in our private system. The Search Console numbers are stored with your website's monitoring data. We keep daily numbers for at most 120 days, and the lists of top queries, top pages and indexing results are replaced each time we refresh them. Only our own team can see this data, and only after signing in with a passkey.

Removing Access and Deleting the Data

You can remove our access at any time on your Google Account's permissions page, myaccount.google.com/permissions, or by asking us at the email address in Section 15. When access is removed, we stop reading your data. On request, we delete the stored token, your Google email address and the Search Console data we hold for your website, within 30 days.

Limited Use

The Equation Agency LLC's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.