Privacy Policy

This Privacy Policy applies to Cobalt Peak Marketing (“Cobalt Peak,” “we,” “our,” or “us”), including its website located at cobaltpeakmarketing.com. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have regarding your information.

By using this website, you acknowledge that you have read this Privacy Policy. If you do not agree with our practices, please discontinue use of the website.

1. Information We Collect

Information you provide directly

When you submit a contact form, book a strategy call, request a marketing audit, or otherwise communicate with us through our website, we may collect:

• Name
• Email address
• Phone number
• Company or business name
• Website URL
• Details about your business, goals, budget, or the services you’re interested in
• Any other information you choose to include in your message

Please do not submit sensitive personal information through our forms, such as Social Security numbers, payment card numbers, or other confidential information that is not necessary for your inquiry.

Information collected automatically

When you visit our website, we and our service providers may collect certain information automatically, including:

• IP address and approximate location
• Browser type and version
• Device type, operating system, and screen size
• Pages visited and time spent on the website
• Referring website or ad source
• Links clicked and general site activity
• Cookie identifiers, set only if you accept analytics or advertising technologies
• Advertising interaction data, such as whether you clicked a Google or Meta ad before visiting the site, collected only if you accept advertising technologies

2. How We Use Your Information

We use the information we collect to:

• Respond to inquiries: Use your contact details to call, text, or email you about your inquiry, strategy call, or audit request.
• Provide and manage services: Follow up on leads, schedule calls, and manage client communications and engagements.
• Send communications: With your consent where required, send marketing, educational, and informational emails about our services.
• Website analytics: If you accept, we use Google Analytics 4 to understand how visitors find and use our website.
• Advertising measurement: If you accept, we use Google Ads, Meta Pixel, or similar tools to measure form submissions, ad performance, and campaign effectiveness.
• Security and fraud prevention: Use our hosting provider and related tools to help protect the website from spam, abuse, malicious activity, and unauthorized access.
• Legal compliance: Use or retain information as required by applicable law, regulation, legal process, or business recordkeeping obligations.

We do not use your information for automated decision-making that produces legal or similarly significant effects.

3. Cookies and Tracking Technologies

We use cookies, localStorage, pixels, and similar technologies to operate the website, remember your preferences, understand website performance, and measure advertising results.

Consent comes first

We do not load analytics or advertising technologies until you accept them. This applies to every visitor, regardless of location, and is not limited to regions where consent is legally required. Until you choose, no analytics or advertising provider is contacted, no tag manager is loaded, and no analytics or advertising cookies are set. If you decline, none of it loads at all.

Essential technologies

We store your accept or decline choice in your browser's localStorage so we do not have to ask again on every page. This single item records your decision and nothing else. Essential technologies may also support website security, bot detection, and basic website functionality. These are necessary for the website to work and are active by default.

Analytics technologies

If you accept, we use Google Analytics 4 to collect information about how visitors use the website, including page views, sessions, device type, traffic source, and general browsing behavior.

Advertising technologies

If you accept, we use Google Ads, Meta Pixel, or similar advertising tools to measure ad clicks, form submissions, and campaign performance. These tools may also support remarketing or audience features where enabled.

Global Privacy Control and other opt-out preference signals

We recognize Global Privacy Control (GPC) and similar browser-level opt-out preference signals. If your browser or extension sends one when you arrive, we treat it as a decision to decline analytics and advertising technologies. We apply it automatically, without showing you a banner, and nothing loads.

To confirm that we honored the signal, open Your Privacy Choices in the footer of any page. It states whether analytics and advertising are currently on or off, and tells you when the setting came from your browser's signal rather than from a choice you made here. If you would rather opt in despite the signal, you can accept from that same panel, and your explicit choice takes priority from then on.

Changing your mind

Open Your Privacy Choices in the footer of any page to see your current setting and change it at any time. If you withdraw consent after previously accepting, we stop loading these technologies immediately and delete the analytics and advertising cookies already set in your browser, including Google Analytics and Meta Pixel identifiers.

You can also limit tracking independently of this website through your browser settings, Google Analytics opt-out tools, Google ad settings, Meta ad preferences, industry opt-out tools such as the Network Advertising Initiative opt-out page, or browser extensions that block analytics and advertising technologies. You may clear your browser cookies and localStorage at any time; doing so clears your saved choice, and we will ask again on your next visit.

4. Third-Party Services

We use third-party service providers to operate the website, process inquiries, protect the site, analyze usage, and measure advertising performance. These providers may process information according to their own privacy policies.

Cloudflare

Our website is served through Cloudflare, which provides hosting, content delivery, HTTPS, and platform-level security and performance. Cloudflare may receive your IP address, request metadata, browser information, and related technical data when you visit the website.

Resend

When you submit a contact form, book a call, or send an inquiry, your information is sent through Resend, our transactional email delivery service, so that we receive your request by email. This may include your name, phone number, email address, company, website, message, and related details. Resend may retain delivery logs and related metadata according to its own privacy policy.

Google Analytics 4

If you accept, we use Google Analytics 4 to collect website usage information such as page views, session duration, device type, browser type, and traffic source. Google may process this information on servers in the United States or other locations.

Google Ads

If you accept, we use Google Ads conversion tracking to understand whether visitors who clicked our ads completed a form submission or other action on the website.

Meta Pixel

If you accept, we use Meta Pixel to measure advertising performance on Facebook, Instagram, and related Meta services. This may include measuring page views, form submissions, and ad interactions. Where enabled, Meta Pixel may also support remarketing or audience features.

Google Fonts

Our website may load fonts served through Google Fonts. When this happens, a request may be made to Google’s servers, which may include your IP address and browser information.

5. Data Sharing and Disclosure

We do not sell your personal information for money. We may share limited online activity data with advertising partners for advertising measurement or cross-context behavioral advertising where permitted by law and your cookie preferences.

We may share information in the following circumstances:

• Service providers: Vendors and platforms that help us operate the website and business, such as hosting, security, CRM, analytics, advertising, and communication providers.
• Legal requirements: If required by law, subpoena, court order, legal process, government request, or to protect the rights, property, or safety of Cobalt Peak Marketing, our clients, employees, or the public.
• Business transfers: If Cobalt Peak Marketing is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, information may be transferred as part of that transaction.
• With your consent: In other circumstances where you have given us permission.

6. Data Retention

We retain personal information only as long as needed for the purpose it was collected, plus any period required for legal, tax, or accounting obligations. Retention periods by category:

• Contact and inquiry submissions: We keep what you send us until you ask us to delete it. That lets us keep a record of our conversation and follow up later if it makes sense. You can request deletion at any time using the contact details in Section 12, and we will delete it. The one exception is records we are required to keep by law: if you become a client, tax, accounting, and contractual recordkeeping obligations require us to retain engagement records even after a deletion request, and we will tell you if that applies to yours.
• Analytics data (Google Analytics 4): Event-level data is retained for 2 months. User-level data is retained for 14 months from your most recent activity, and that period restarts each time you visit again. Aggregated reporting data is not tied to a user or device and is not subject to these limits.
• Analytics cookies in your browser: The Google Analytics cookies (_ga and _ga_<id>) are set to expire up to 400 days after they are set, which is the maximum lifetime most browsers now permit for a cookie.
• Advertising cookies in your browser: The Meta Pixel cookie (_fbp) is set to expire 90 days after it is set. Google Ads cookies are set by Google with comparable lifetimes.
• Advertising data held by the platforms: Once measurement data reaches Google or Meta, its retention is governed by those companies’ own policies rather than ours. We do not control it and cannot extend or shorten it. Links to their privacy policies are in Section 4.
• Your consent choice: Stored in your browser’s localStorage until you clear it, or until you change your choice through Your Privacy Choices. It never leaves your browser.

If you decline, or later withdraw consent, we delete the analytics and advertising cookies already in your browser rather than waiting for them to expire.

You may request deletion of your personal information by contacting us using the information in Section 12. We may deny or limit deletion requests where retention is required or permitted by law.

7. Security

We use reasonable technical and organizational safeguards to help protect personal information. These may include HTTPS encryption, secure configuration practices, access controls, provider-side security tools, and security monitoring. Form submissions are transmitted through secure connections to our service providers.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we will take reasonable steps to protect your information and respond to any data incident as required by applicable law.

8. Your Rights and Choices

Regardless of where you live, you may contact us to request that we:

• Provide access to personal information we maintain about you
• Correct inaccurate information
• Delete your personal information, subject to legal and business recordkeeping requirements
• Stop certain marketing communications
• Withdraw consent for optional analytics or advertising cookies

For analytics and advertising, you do not need to contact us. Open Your Privacy Choices in the footer of any page to see whether these technologies are currently on or off and to change that immediately. Withdrawing consent also deletes the analytics and advertising cookies already stored in your browser.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email or by contacting us directly. You may also limit tracking independently of this website through your browser settings or the platform and industry opt-out tools described in Section 3.

If you provide your phone number, we may contact you by phone or text message about your request. Message and data rates may apply. To exercise your rights or make a privacy request, contact us using the information in Section 12. We will respond within a reasonable time and may need to verify your identity before completing certain requests.

9. California Residents

If we are subject to the California Consumer Privacy Act, as amended by the California Privacy Rights Act, or if we choose to honor similar requests voluntarily, California residents may have additional rights regarding their personal information.

Categories of personal information collected

In the past 12 months, we may have collected the following categories of personal information:

• Identifiers: Name, email address, phone number, and IP address
• Customer records: Contact and company information, inquiry details, and communication history
• Internet or network activity: Website usage, pages visited, browser type, device type, cookies, and ad interaction data
• Geolocation data: Approximate location derived from IP address
• Inferences: General advertising or analytics inferences created by third-party tools, where applicable

California privacy rights

California residents may have the right to know what personal information we collect and how it is used and shared, request deletion or correction of personal information (subject to exceptions), opt out of the sale or sharing of personal information, limit the use of sensitive personal information where applicable, and not be discriminated against for exercising privacy rights.

We do not sell personal information for money. We may share limited online activity data with advertising partners for advertising measurement or cross-context behavioral advertising, and only if you have accepted advertising technologies. To submit a California privacy request, contact us using the information in Section 12.

Opt-out preference signals

We process Global Privacy Control (GPC) and other browser-level opt-out preference signals as a valid request to opt out of the sale or sharing of personal information. We apply the signal automatically on arrival, for every visitor who sends one, without requiring you to submit a separate request or create an account.

To confirm that we received and honored your signal, open Your Privacy Choices in the footer of any page. It reports whether analytics and advertising are currently on or off, and identifies when the setting came from your browser's signal rather than from a choice made on this site. Because we do not require an account, we process these signals on a browser-by-browser basis rather than linking them to an identified person.

10. EEA and UK Residents

Our services are primarily directed to businesses in the United States. If you are located in the European Economic Area or the United Kingdom and interact with our website, this section may apply to you.

Legal bases for processing

Where GDPR or UK GDPR applies, we may process personal information based on contract performance (to respond to your inquiry or take steps before providing services), legitimate interests (to operate, secure, maintain, and improve our website and business), consent (to use analytics or advertising cookies where consent is required), and legal obligations.

GDPR rights

Where applicable, you may have the right to access, correct, or delete your personal information; restrict or object to certain processing; request data portability; withdraw consent where processing is based on consent; and lodge a complaint with your local supervisory authority.

International transfers

If information is transferred outside the EEA or UK, we rely on appropriate transfer mechanisms where required, which may include adequacy decisions, standard contractual clauses, the EU-U.S. Data Privacy Framework where the recipient is certified, or your consent. To exercise GDPR or UK GDPR rights, contact us using the information in Section 12.

11. Children’s Privacy

Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through our website, please contact us and we will take appropriate steps to delete the information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we update the policy, we will revise the “Last updated” date at the top of this page. If we make material changes, we may provide additional notice on the website. Your continued use of the website after changes are posted means you acknowledge the updated Privacy Policy.

13. Contact Us

For privacy-related questions, requests, or concerns, please contact us:

We aim to respond to privacy inquiries within a reasonable time and in accordance with applicable law.