How We ProtectYour Information.
Plain language, no legal fog: what we collect, why we collect it, who can see it, and how we secure the websites and systems we build for our clients.
Last reviewed: August 2026
HTTPS Everywhere
Every page of this site and every site we launch is served over TLS with certificates renewed automatically. No mixed content, no exceptions.
Least-Privilege Access
Only the team members working on your account get access to your systems, and access is revoked the day a project or employment ends.
MFA on Everything
Multi-factor authentication is required on every internal account and on every client platform we administer — hosting, ad accounts, CRMs, and analytics.
We Don't Sell Data
We have never sold or rented personal information and we never will. Your data isn't a revenue stream for us.
The Details, In Plain English
What we collect
We only collect information you hand us or that's needed to run the site:
- Contact form submissions — name, email, phone, company, the services you selected, and your message.
- Analytics data — pages viewed, referring source, approximate location, device and browser type. Aggregated, not tied to your name.
- Client account data — for active clients, the credentials and business information required to manage the platforms you've asked us to manage.
We do not collect Social Security numbers, health records, or payment card numbers on this website. Invoices are handled through a third-party payment processor that stores card data on their systems, not ours.
Why we collect it
- To reply to your inquiry and scope your project.
- To deliver the services you've hired us for.
- To understand what content on this site is useful and improve it.
- To meet legal, tax, and accounting obligations.
We do not use your contact-form submission to add you to a marketing list without your consent, and we don't share it with other clients or partners.
Cookies and tracking
This site uses a small number of cookies and similar technologies:
- Essential — required for the site to load and for forms to work. Always on.
- Analytics — anonymous, aggregated traffic measurement so we know which pages earn their keep.
- Advertising — when we run campaigns, standard platform pixels may measure whether an ad led to a visit.
You can block or delete cookies in your browser settings at any time. The site will still work; our analytics just won't count you. We honor Global Privacy Control and "Do Not Track" signals where your browser sends them.
Who we share it with
We share data only with the vendors required to operate — hosting, email, analytics, CRM, and payment processing — and only the minimum each one needs. We do not sell, rent, or trade personal information. We will disclose information if legally compelled, and we'll tell you when we're permitted to.
How long we keep it
- Contact form submissions: 24 months, unless you become a client.
- Client records: for the life of the engagement plus 7 years for tax and legal purposes.
- Analytics: 14 months, in aggregate.
Your rights
Wherever you live, we'll honor these: request a copy of what we hold on you, ask us to correct it, ask us to delete it, or ask us to stop contacting you. Email andrew@beefymarketing.com and we'll respond within 30 days. Texas residents have these rights under the Texas Data Privacy and Security Act; we extend the same treatment to everyone regardless of state.
How we secure client websites
- TLS certificates with automatic renewal on every site we launch.
- Managed updates and patching for platforms and plugins under an active care plan.
- Automated off-site backups with tested restores.
- Web application firewall and bot filtering on hosted properties.
- Form spam filtering and rate limiting to keep submissions clean.
- Credentials stored in an encrypted password manager — never in email, spreadsheets, or chat.
Fraud and identity verification
Before we change billing details, transfer a domain, or grant new access to a client account, we verify the request with a known contact through a channel other than the one the request came in on. Invoice fraud usually starts with a spoofed email; a 60-second phone call stops it. If you ever get a payment request from "Beefy Marketing" that looks off, call us at (281) 626-8544 before you pay it.
If something goes wrong
If we become aware of a breach affecting your information, we'll notify affected clients directly within 72 hours of confirming it, tell you what was exposed, and tell you what we're doing about it. No spin.
AI and your data
We use AI tools in our work. We do not paste client confidential information, credentials, or personal data into public AI tools, and we do not permit client data to be used for third-party model training. Read our full AI Policy for how we disclose AI use in deliverables.
Contact
Questions about this policy, or a request about your data: andrew@beefymarketing.com · (281) 626-8544 · Beefy Marketing, Tomball, Texas.
Questions About Your Data?
Ask us directly. A real person reads it, and you'll get a real answer.