Privacy policy

1. Welcome!

We respect your privacy and are committed to protecting your personal information. This policy explains how Second Mile, a HubSpot partner agency and web-development company, collects, uses, shares, and safeguards information when you interact with our websites, services, or communications (collectively, our “Services”). When we process information on behalf of a client, that work is also governed by our agreement with the client and its instructions.

2. Information We Collect

Category	Examples	Source
Contact data	name, business name, job title, email address, phone number, mailing address	Provided by you via forms, chat, email, phone
Account & service data	project details, support history, preferences, HubSpot CRM records	Generated through use of our Services
Technical & usage data	IP address, browser type, device identifiers, pages visited, time spent, clicks, referring/exit pages	Collected automatically via cookies, HubSpot tracking code, Google Analytics, and Vercel Speed Insights
Marketing data	engagement with emails, event attendance, downloads, social media interactions	Provided by you or derived from interactions
Payment data	limited billing information (handled by payment processors, with no full card details stored)	Provided by you to our secure payment provider

Sensitive data: We do not intentionally collect sensitive personal information (e.g., health, biometric, or precise geolocation data). If you believe you have provided such information, please contact us so we can delete it.

3. How We Use Your Information

We use personal information for the following business purposes, subject to applicable law:

1. Provide and improve Services – manage projects, troubleshoot, and develop new features.
2. Measure performance – analyze traffic and usage to enhance user experience and understand which content and inquiries lead to business relationships.
3. Marketing & communications – send newsletters, offers, and event invitations (with your consent where required).
4. Customer support – respond to inquiries, requests, and feedback.
5. Security & fraud prevention – detect, prevent, and address security incidents or violations of our Terms.
6. Compliance & legal obligations – maintain records, enforce agreements, and comply with applicable laws.

4. Third-Party Services We Rely On

Service	Purpose	Privacy Resources
HubSpot	CRM, form submissions, marketing communications, website activity, and contact attribution	HubSpot privacy policy
Google Analytics 4	Website traffic, engagement, and performance reporting	How Google uses information from sites using its services
Vercel Speed Insights	Page loading speed, interaction delay, and layout stability	Speed Insights privacy information
Hosting and security providers	Website delivery, operational logs, and protection against spam, abuse, and automated submissions	Vercel privacy notice, Cloudflare privacy policy
Embedded media providers	Deliver videos and other media displayed on our pages; may receive technical information when their content loads	See the privacy notice linked by the relevant player or provider
Payment Processors	Secure online payments (e.g., Stripe, PayPal)	See respective privacy notices
AI service providers	AI-assisted research, analysis, writing, development, meeting documentation, and other service delivery through centrally managed ChatGPT and Claude business accounts	See our AI transparency and responsible use policy

These providers may collect information directly or receive data from us. Their processing is subject to the applicable service terms, data-processing agreements, and privacy notices. Third-party tools or embedded content may recognize a browser over time or across websites using the same service; their own notices explain their practices. Our use of these tools is for the purposes described here, not advertising audiences or retargeting.

Our ChatGPT and Claude business accounts are centrally configured so our inputs and outputs are not used to train their general-purpose models. Client-specific handling requirements and restrictions are addressed through our engagement agreements and the practices described in our AI policy.

5. Cookies & Tracking Technologies

We use cookies, local storage, and similar tools to:

• Remember your preferences and improve site functionality.
• Understand how visitors navigate our site.
• Understand which sources and communications bring visitors and inquiries to us.

HubSpot tracking: HubSpot uses browser identifiers to recognize returning visitors and record activity on our site. When you submit a form or otherwise identify yourself through our HubSpot communications, that activity may be associated with your contact record. This helps us understand your inquiry and follow up appropriately. It is not limited to anonymous aggregate statistics.

Google Analytics 4: We use GA4 to understand traffic sources, page usage, and website performance. We do not use HubSpot or Google Analytics to build advertising audiences or retarget visitors. The site's Google Analytics configuration disables Google Signals and advertising-personalization signals.

Vercel Speed Insights: We measure page loading speed, interaction delay, and layout stability to improve the website. Reports include page paths and technical context such as browser, device type, and country. This tool does not use cookies to identify visitors. We remove URL query strings and fragments from performance events. It follows the same analytics preference and browser opt-out signals described below.

Your choices: On our main website, HubSpot visitor tracking, Google Analytics, and Vercel Speed Insights are on by default, unless your browser signals an opt-out or you have already opted out. Select Privacy settings in the footer or on this page, then Turn off analytics, to stop this tracking. You can return to these settings to change your choice. A first-visit floating shortcut disappears after you save a preference or dismiss it; dismissal alone does not change your tracking preference. We retain existing saved opt-outs. Your choice is stored in your browser, so it may need to be set again on another browser or device or after clearing storage. If browser storage is unavailable, this tracking stays off. Hosting, security, and form processing remain available without analytics; forms do not include a HubSpot visitor identifier when analytics is off. Turning off analytics does not delete information you have already submitted to us. Separate landing-page subdomains may present their own cookie choices.

You can also block or delete cookies through your browser settings and use the Google Analytics Opt-out Browser Add-on. Browser controls and our analytics preference do not necessarily control every embedded third-party service. Some media or site functions may be affected when you block cookies.

6. Browser Privacy Signals

Our main website honors Global Privacy Control and Do Not Track when enabled in your browser by keeping HubSpot visitor tracking and Google Analytics off. These signals take precedence over a saved analytics-on preference. To turn analytics back on, first disable the signal in your browser and then use Privacy settings. We do not sell personal information or disclose it for cross-context behavioral advertising, whether or not either signal is enabled. These signals and our controls do not necessarily control embedded third-party services or separate landing-page subdomains.

7. Sharing & Disclosure

We do not sell or rent personal information or disclose it for cross-context behavioral advertising. We do not use HubSpot or Google for advertising audiences or retargeting. We do share information for the purposes described in this policy with:

• Service providers acting on our behalf under strict confidentiality obligations.
• Professional advisers (e.g., auditors, lawyers) under confidentiality.
• Authorities when required by law, court order, or to protect rights and safety.
• Successors in merger, acquisition, or asset sale scenarios (with notice to you where required).

8. Where Information Is Processed

Second Mile is based in the United States. Our distributed team and service providers may process information in the United States and other countries where they operate. Privacy laws may differ from those where you live. Applicable legal requirements and contractual safeguards govern that processing.

9. Data Security

We implement administrative, technical, and physical safeguards such as:

• Encryption in transit (TLS) and at rest where appropriate.
• Access controls and multi-factor authentication.
• Regular security training and audits.
• Incident response procedures.

No internet transmission is 100% secure. If we detect a data breach that poses a high risk to you, we will notify you and regulators as required.

10. Your Privacy Rights

Depending on where you live, you may have rights to:

• Access personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data (“right to be forgotten”).
• Restrict or object to processing.
• Port your data to another service.
• Opt out of marketing communications.

You can ask us to review, correct, or delete personal information by emailing admin@thesecondmile.com. We may need to verify your identity and will respond within the period required by applicable law. Some information may need to be retained for legal, security, or contractual reasons.

State Privacy Laws

Rights under state privacy laws depend on the law's scope and whether it applies to the organization and information involved. This policy does not imply that every state-specific right applies in every circumstance. You may contact us with privacy questions or requests regardless of where you live. Our no-sale and no-advertising-sharing practices described above apply to all visitors.

11. Marketing Preferences

You can unsubscribe from our emails at any time via the “unsubscribe” link or by contacting us. Opting out will not affect transactional messages.

12. Data Retention

We keep personal information for as long as reasonably necessary for the purposes in this policy, including providing services, maintaining business records, complying with legal obligations, resolving disputes, and enforcing agreements. Turning off analytics stops optional tracking through our controls; it does not automatically erase existing CRM or business records. Contact us to request deletion of information we hold about you.

13. Children’s Privacy

Our Services are not directed to children under 16, and we do not knowingly collect their information. If you believe a child has provided us with personal data, contact us so we can delete it.

14. Changes to This Policy

We may update this policy as our practices or legal requirements change. We will post the revised policy here and update the effective date at the top. For material changes, we will provide any additional notice or choice required by applicable law.

15. How to Contact Us

If you have questions or concerns about this policy or your data, please contact:

Privacy Team
Second Mile
Email: admin@thesecondmile.com