Privacy Policy

Last Updated: December 27, 2024

Introduction

Surreal Marketing Services ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website surrealmarketingservices.com, use our services, or communicate with us.

By using our website or services, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our website or services.

Information We Collect

Personal Information You Provide

We may collect personal information that you voluntarily provide when you:

  • Fill out contact forms or request a quote
  • Schedule a consultation or book an appointment
  • Subscribe to our newsletter or marketing communications
  • Communicate with us via email, phone, or other channels
  • Use our website planner or project planning tools

This information may include:

  • Name and business name
  • Email address
  • Phone number
  • Project requirements and preferences
  • Any other information you choose to provide

Information Collected Automatically

When you visit our website, we may automatically collect certain information, including:

  • IP address and approximate geographic location
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent on each page
  • Referring website or source
  • Click patterns and navigation behavior

How We Use Your Information

We use the information we collect to:

  • Respond to your inquiries and provide customer support
  • Deliver the services you request, including web design and development
  • Send you project updates, invoices, and service-related communications
  • Send marketing communications (with your consent)
  • Improve our website, services, and user experience
  • Analyze website traffic and usage patterns
  • Protect against fraud and unauthorized access
  • Comply with legal obligations

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. These may include:

  • Essential cookies: Required for website functionality
  • Analytics cookies: Help us understand how visitors use our site (Google Analytics)
  • Marketing cookies: Used to deliver relevant advertisements (Google Ads)

You can control cookies through your browser settings. However, disabling certain cookies may affect website functionality.

Cookie & Third-Party Inventory

The complete list of cookies and third parties that may set cookies, scripts, or pixels on this site:

Provider / CookiePurposeCategoryRetention
connect.sid (first-party)Session authentication for the admin portalEssentialSession (deleted on logout)
Google Analytics 4 (_ga, _ga_*)Aggregate traffic and behavior analyticsAnalyticsUp to 14 months (GA4 default)
Google Ads (_gcl_*)Conversion tracking for paid campaignsMarketingUp to 90 days
SendGrid (no client cookies)Transactional email delivery for contact and consultation formsService providerEmail logs retained 30 days
OpenAI API (no client cookies)Server-side AI suggestions for the project plannerService providerPrompts not retained for training (per OpenAI API policy)
Replit hosting (no client cookies)Application hosting, request logs, runtime infrastructureService providerRequest logs retained 30 days
Neon Postgres (no client cookies)Primary database for leads, contacts, and planner sessionsService providerLeads/planner data: 24 months; backups: 7 days

Data Categories & Retention Periods

  • Contact form submissions (name, email, phone, message): 24 months from last interaction, then deleted.
  • Consultation booking data (name, email, scheduled time): 24 months from booking date.
  • Project planner sessions (selections, generated quote, email if provided): 12 months from last activity.
  • Email transactional logs (delivery, bounce, open events via SendGrid): 30 days.
  • Server request logs (IP, user agent, path, referrer): 30 days for abuse detection and capacity planning.
  • Aggregate analytics (pageviews, sessions, country): up to 14 months in Google Analytics 4.

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

  • Service providers: Third-party vendors who assist us in operating our business (hosting, analytics, email services)
  • Legal requirements: When required by law, court order, or government request
  • Business transfers: In connection with a merger, acquisition, or sale of assets
  • Protection of rights: To protect our rights, privacy, safety, or property

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes SSL encryption, secure servers, and regular security assessments. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Your Rights and Choices

You have the following rights regarding your personal data. To exercise any of them, send a Data Subject Access Request (DSAR) to [email protected]. We respond within 30 days and may verify your identity before fulfilling the request.

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information
  • Opt out of marketing communications at any time
  • Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the information provided below.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our website and services are not directed to children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last Updated" date at the top of this page. We encourage you to review this policy periodically for any changes.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Surreal Marketing Services
Southern Utah
Serving all of Utah and clients nationwide