Legal Document

Privacy Policy

Effective Date March 10, 2026
Last Updated March 10, 2026
Jurisdiction New York, United States
Privacy Contact kristian@romero.nyc
Compliant with GDPR / UK GDPR CCPA / CPRA COPPA CAN-SPAM

This Privacy Policy ("Policy") describes how Romero NYC Marketing Agency LLC ("Romero NYC," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit romero.nyc, use our web applications, Free Tools, or engage with any of our services. This Policy is incorporated by reference into our Terms of Service.

BY USING OUR SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS POLICY. IF YOU DO NOT AGREE, PLEASE DISCONTINUE USE OF OUR SERVICES IMMEDIATELY.
Plain-English Summary
The full legal sections below are binding — this is for your convenience.
What do you collect?
Name, email, job title, company, IP address, browser/device info, cookies, and behavioral data like time-on-page and click rates.
Why do you collect it?
To run our website, deliver services, improve our tools, send marketing emails, serve ads, and reach out about our services and products.
Do you sell my data?
Not for money. We share data with service providers (HubSpot, Google, LinkedIn). This may qualify as "sharing" under CCPA — you can opt out.
What third parties get my data?
HubSpot (CRM), Google Analytics/Ads, LinkedIn Insight Tag, email delivery platforms, and our hosting provider.
What are my rights?
Access, correct, delete, or export your data. California residents have additional CCPA rights. EU/UK residents have GDPR rights. We respond within 45 days.
Do you track me with cookies?
Yes — for analytics and advertising (Google and LinkedIn pixels). You can opt out via our cookie banner or browser settings.
What about the free tools?
Free to use. By using them, you consent to us potentially reaching out about our services or products. Opt out any time.
How do I contact you?
Email kristian@romero.nyc with any privacy questions or requests.
01

Information We Collect

1.1 Information You Provide Directly

We collect personal information you voluntarily provide when you complete a form, subscribe to our email list, use a Free Tool, purchase a service, or communicate with us. Categories include:

  • Identifiers: First name, last name, business email address, phone number (if provided)
  • Professional information: Job title, company name, industry, company size
  • Commercial information: Service inquiries, purchase history, billing information
  • Communications: Messages, questions, and feedback you submit

1.2 Information Collected Automatically

When you visit our website or use our tools, we and our third-party partners automatically collect:

  • Device and browser data: IP address, browser type and version, operating system, device type
  • Usage data: Pages visited, time spent per page, scroll depth, click-through rates, session duration, content engagement metrics
  • Referral data: The URL or platform that directed you to our website
  • Cookie and tracking data: As described in Section 5
  • Pixel data: Conversion events and behavioral signals captured by Google Ads and LinkedIn Insight Tag pixels

1.3 Information from Third Parties

We may receive data from advertising platforms (Google, LinkedIn) providing audience insights, data enrichment services that supplement contact records with professional information, and analytics providers aggregating behavioral data across sessions.

1.4 Sensitive Data

Romero NYC does not intentionally collect sensitive personal information such as government ID numbers, health data, racial or ethnic origin, or financial account numbers. Please do not submit such information through our forms or tools.

02

How We Collect Your Information

2.1 Forms and Direct Submissions

Collected when you actively complete and submit a form, including contact forms, newsletter sign-ups, tool interfaces, and service inquiry forms.

2.2 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and local storage. See Section 5 for full details.

2.3 Google Analytics

We use Google Analytics to collect behavioral data about how visitors interact with our website, including session data, page views, and engagement metrics.

2.4 Advertising Pixels

Our website deploys advertising pixels operated by Google and LinkedIn. These pixels collect visit data and may serve you retargeted advertisements on those platforms. Each platform's privacy policy applies in addition to ours.

2.5 HubSpot CRM Integration

We use HubSpot as our CRM platform. When you submit a form on our website, your information is transmitted to and stored in HubSpot. HubSpot may also track your interactions with our emails and website using its own tracking technology. See: HubSpot Privacy Policy.

2.6 Automatic Server Logs

Our web hosting infrastructure automatically records IP addresses, request timestamps, requested URLs, HTTP status codes, and referrer information for security and diagnostics.

03

How We Use Your Information

Purpose Data Used Legal Basis (GDPR) Applies To
Delivering contracted servicesName, email, company, billingPerformance of contractService clients
Responding to inquiriesName, email, message contentLegitimate interestsForm submitters
Email marketing (our services)Email, name, engagement dataConsent / Legitimate interestsSubscribers & leads
Outreach for future productsEmail, job title, companyConsent / Legitimate interestsTool users, leads
Affiliate marketingEmail, behavioral dataConsentWebsite visitors
Advertising & retargetingIP, cookies, pixel dataConsentWebsite visitors
Analytics & performanceUsage data, click dataLegitimate interestsAll visitors
CRM & lead managementAll contact dataLegitimate interestsLeads & clients
Legal complianceAny relevant dataLegal obligationAs required
Security & fraud preventionIP, device, usage logsLegitimate interestsAll visitors

3.1 Marketing and Outreach — Important Disclosure

By submitting any form, using any Free Tool, or otherwise providing your contact information, you expressly consent to Romero NYC using your information to:

  • Send commercial email communications about our outbound marketing services
  • Contact you regarding consulting, advisory, or retainer services
  • Reach out about digital products, templates, courses, or other resources we develop
  • Enroll you in marketing sequences managed through HubSpot or similar platforms

You may opt out of marketing communications at any time as described in Section 8.

04

How We Share Your Information

4.1 Service Providers

Provider Category Data Shared Purpose
HubSpotCRM / MarketingName, email, company, activityContact management & email
Google AnalyticsAnalyticsIP (anonymized), behavior, deviceWebsite performance
Google AdsAdvertisingPixel/cookie data, conversionsAd targeting & measurement
LinkedIn Insight TagAdvertisingPixel/cookie data, page visitsB2B ad targeting
Web hosting providerInfrastructureServer logs, IP addressesHosting & security
Email delivery (ESP)CommunicationsEmail address, nameSending emails
Payment processorPaymentsBilling info (not stored by us)Processing transactions

4.2 No Sale of Personal Data — CCPA Disclosure

Romero NYC does not sell personal data for monetary compensation. However, sharing data with advertising platforms such as Google and LinkedIn for targeted advertising may constitute a "sale" or "sharing" under CCPA/CPRA. California residents have the right to opt out. See Section 8.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity. You will be notified if the transfer results in a materially different privacy policy.

4.4 Legal Requirements

We may disclose personal data if required by law, subpoena, or court order, or if necessary to protect the rights, property, or safety of Romero NYC, our clients, or the public.

05

Cookie Policy

5.1 What Are Cookies?

Cookies are small text files placed on your device by a website. They allow the website to recognize your device, remember your preferences, and collect usage data across sessions. We also use web beacons, local storage, and session identifiers.

5.2 Cookies We Use

Cookie Type Provider Purpose Duration
Strictly NecessaryRomero NYC / HostingSite functionality, security, load balancingSession
AnalyticsGoogle AnalyticsTraffic measurement, behavior trackingUp to 2 years
PerformanceHubSpotPage visit tracking, email link trackingUp to 13 months
AdvertisingGoogle AdsConversion tracking, retargetingUp to 90 days
AdvertisingLinkedIn Insight TagB2B audience targeting, retargetingUp to 90 days
PreferencesRomero NYCCookie consent state, preferencesUp to 1 year

5.3 Your Cookie Choices

06

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law.

Data Category Retention Period Deletion Trigger
Active client recordsDuration of relationship + 3 yearsContract end + 3 years
Lead and prospect data (CRM)Up to 3 years from last contactOpt-out or 3-year inactivity
Email marketing engagementDuration of subscriptionUnsubscribe or deletion request
Form submission dataUp to 3 yearsOpt-out or deletion request
Website analytics data26 months (Google default)Rolling deletion per GA settings
Server / access logs90 daysAutomated rolling deletion
Cookie / pixel dataPer cookie lifespan (see §5.2)Browser deletion or opt-out
Billing and payment records7 yearsRequired by tax/financial law
Legal correspondence7 yearsLegal hold expiration

Following the applicable retention period, we will securely delete or anonymize your personal data. Anonymized data may be retained indefinitely for analytical purposes.

07

Your Privacy Rights

7.1 Rights Available to All Users

Universal
Right to Know
Request a summary of the personal data we hold about you and how it is used.
Universal
Right to Correct
Request that we correct inaccurate or incomplete personal information.
Universal
Right to Delete
Request deletion of your personal data, subject to our legal retention obligations.
Universal
Right to Opt Out
Opt out of commercial email communications at any time via unsubscribe link or email.

7.2 Additional Rights — California Residents (CCPA/CPRA)

CCPA
Right to Know (Detailed)
Request the specific categories of personal information collected, used, disclosed, or sold in the past 12 months.
CCPA
Opt Out of Sale/Sharing
Opt out of sharing your data with ad platforms for cross-context behavioral advertising. Email us with subject "CCPA Opt-Out."
CCPA
Right to Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights.
CCPA
Authorized Agent
You may designate an authorized agent to submit requests on your behalf with written proof of authorization.

7.3 Additional Rights — EEA, UK & Swiss Residents (GDPR)

GDPR Art. 15
Right of Access
Obtain confirmation of whether we process your data and receive a copy of it.
GDPR Art. 16
Right to Rectification
Request correction of inaccurate or incomplete personal data.
GDPR Art. 17
Right to Erasure
Request deletion of your data where no legal basis for retention exists.
GDPR Art. 20
Data Portability
Receive your data in a structured, machine-readable format.
GDPR Art. 21
Right to Object
Object to processing based on legitimate interests, including for direct marketing.
GDPR Art. 7(3)
Withdraw Consent
Where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

If you are located in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority: Find your EU authority | UK ICO.

International Transfers: Romero NYC is based in the United States. If you are in the EEA or UK, your data is processed in the US under Standard Contractual Clauses (SCCs) or other appropriate safeguards. Contact us to request a copy.

7.4 How to Submit a Privacy Request

Email kristian@romero.nyc with subject line "Privacy Request – [Your Name]". We will acknowledge receipt within 10 business days and respond within 45 calendar days. We will need to verify your identity before processing your request. No fees will be charged.

08

Opt-Out & Communication Preferences

8.1 Email Marketing Opt-Out

Opt out of all marketing emails at any time by: (a) clicking "Unsubscribe" in any marketing email; or (b) emailing kristian@romero.nyc with "Unsubscribe" in the subject line. We process opt-out requests within 10 business days. Transactional and service emails are unaffected.

8.2 CCPA Opt-Out of Sale/Sharing

California residents may opt out of sharing data with advertising platforms for cross-context behavioral advertising. Email kristian@romero.nyc with subject line "CCPA Opt-Out" or use the cookie opt-out mechanisms in Section 5.3. We will process your request within 15 business days.

8.3 GDPR Withdrawal of Consent

Where our processing is based on your consent, you may withdraw consent at any time by contacting kristian@romero.nyc. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

09

Data Security

We implement commercially reasonable technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, and destruction:

  • Encryption: Data in transit is encrypted via TLS. Data stored in our systems and HubSpot is encrypted at rest.
  • Access controls: Personal data access is restricted to personnel who require it for their role, using role-based access controls and authentication requirements.
  • Third-party security: Key providers (HubSpot, Google Cloud infrastructure) maintain SOC 2 compliance and industry-standard security certifications.
  • Monitoring: We monitor for unauthorized access and anomalous activity.
  • Vendor assessment: We evaluate third-party service providers for security practices before sharing personal data.

No method of electronic transmission or storage is 100% secure. In the event of a data breach affecting your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law (within 72 hours under GDPR where applicable).

10

Children's Privacy (COPPA)

Our Services are intended solely for adults (18+) in a B2B context. We do not knowingly collect personal information from children under the age of 13, consistent with COPPA.

While Romero NYC does not target minors and does not create content designed to attract users under 13, we acknowledge that we cannot technically prevent minors from visiting our website and we do not have age-gating in place at this time.

If we become aware that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take prompt steps to delete that information. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at kristian@romero.nyc.

11

Third-Party Websites & Links

Our website may contain links to third-party websites not owned or controlled by Romero NYC. This Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party sites you visit. Romero NYC is not responsible for the content, privacy practices, or data handling of third-party websites.

12

Changes to This Policy

We reserve the right to update this Privacy Policy at any time. When we make material changes, we will: (a) update the "Effective Date" at the top; (b) notify registered users and email subscribers; and (c) post a prominent notice on our website for at least 30 days.

Your continued use of our Services following the effective date of any updated Policy constitutes your acceptance of the changes.

13

Contact Information

For any privacy-related questions, requests, or complaints, please contact:

Organization
Romero NYC Marketing Agency LLC
Privacy Contact
Kristian Romero
Email
Website
Jurisdiction
New York, United States

For GDPR purposes, Romero NYC Marketing Agency LLC is the data controller for personal data collected through this website. If you have unresolved concerns, you may contact your local supervisory authority.