How we collect, use and protect your information, in plain English

Who we are and what this covers

This policy explains how Nebula Global ("Nebula", "we" or "us") handles personal information collected through nebulaglobalco.com and in providing marketing services to businesses in the United States.

If you are a client, your written service agreement also applies to client data. Where that agreement says something different about client data, the agreement controls.

Notice at collection

When you fill in a form on this site, we collect your name, business name, work email, phone number, website, industry, number of locations, any notes you add and whether you agreed to receive texts. We also record your IP address, browser type, the page you sent the form from, the referring page and the time.

We use this to reply to your request, prepare your free audit and any quote, follow up about your request and keep business records. We do not sell or share your personal information, and we do not use it for cross-context behavioral advertising.

We keep enquiries that do not become client work for 24 months, and the IP address and browser details attached to a form for 90 days. The other periods are listed under "How long we keep information".

What we collect, where it comes from and why

• Identifiers and contact details (name, business name, email, phone, website). Source: you. Purpose: to reply, prepare your audit and quote, provide our services and keep records.
• Business details (industry, number of locations, notes). Source: you. Purpose: the same as above.
• Internet activity (IP address, browser, pages viewed, referring page, time of visit). Source: your device, through our website host and, only if you allow it, Google Analytics. Purpose: security, fixing problems and learning which pages are useful.
• Text message consent record (yes or no, the time and the wording shown). Source: you. Purpose: to show consent and honor opt-outs.
• Call recordings and call notes, if you call us and recording is announced. Source: you. Purpose: quality, training and records.
• Sensitive personal information: none. We do not collect or use sensitive personal information, and we do not use any information to infer characteristics about you.

How we use your information

We use the information you give us to respond to your request, prepare your free audit and any written quote, provide and improve our services, send you service messages, keep our records and meet legal, tax and security obligations.

If you agree to receive marketing emails from us, you can unsubscribe at any time using the link in every email.

Who receives your information

We do not sell or share personal information. In the last 12 months we disclosed the categories above, for business purposes, only to these recipients, who handle it for us: an affiliated company that receives and handles our enquiries, website hosting and database (Cloudflare), analytics (Google Analytics, only if you allow it), email delivery (Postmark), internal team messaging (Slack), our customer records system, phone and text message providers, and payment providers for clients.

We may also disclose information when the law requires it, to protect rights and safety, or as part of a merger, sale or similar business change, in which case this policy continues to apply to the information transferred.

We do not disclose personal information to third parties, including affiliated companies, for their own direct marketing.

Cookies, analytics and Do Not Track

We use Google Analytics 4 to count visits and see which pages are useful. It loads only if you choose "Allow analytics" in the cookie notice. You can change your choice at any time with "Cookie settings" at the bottom of every page.

When it runs, Google Analytics uses cookies and receives information about your visit, such as the pages you view, your device and your approximate location. Google can collect information about your activity over time and across different websites. We have turned off Google signals, advertising features and data sharing with other Google products, so Google processes this data for us as a service provider.

If your browser sends a Global Privacy Control signal, we treat it as a request to opt out and do not load Google Analytics for that browser. Browsers' "Do Not Track" signals have no common standard, so we do not respond to them separately; turning on Global Privacy Control has the effect described here.

We do not use advertising cookies, ad pixels, session recording or chat tools on this website.

You can also install Google's opt-out browser add-on at tools.google.com/dlpage/gaoptout (opens in a new tab).

Client account data

When a client connects accounts such as Google Ads, Google Business Profile, a website, a store, a phone system or a job, booking or practice management system, we access that data only to provide the services the client asked for.

Client data belongs to the client. We do not sell it, and we do not use one client's data to market to another client's customers. When a client leaves, we remove our access when asked and delete or return client data as set out in the service agreement, unless the law requires us to keep it.

Health information and patient data

For healthcare clients, we work HIPAA-aware and sign a Business Associate Agreement before we handle any protected health information. That agreement governs how we use and protect patient data.

Please do not send health information about yourself or anyone else through the forms on this website.

Text messages and phone calls

We send text messages only if you check the text consent box on a form, and only about the subject you agreed to. Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help, and we will honor an opt-out within 10 business days at most.

We do not share or sell mobile phone numbers, text message opt-in data or consent with third parties or affiliates for their marketing or promotional purposes. We share them only with the providers that deliver our messages.

Calls about your request are made by a person on our team. Phone calls with our team may be recorded for quality and training. We tell you at the start of the call when this happens.

How we protect information

We use reasonable technical and organizational measures to protect information, including access controls, encryption in transit and limits on who on our team can see client data. No system is completely secure, so we cannot promise that information will never be accessed without permission. If a breach affects you, we will tell you as the law requires.

How long we keep information

• Enquiries that do not become client work: 24 months from your last contact with us.
• IP address and browser details attached to a form: 90 days.
• Google Analytics data, if you allowed analytics: 14 months.
• Text message consent records: 5 years after your last message from us.
• Call recordings: 12 months.
• Client records: the length of the service agreement plus 7 years, for tax and legal records, unless the agreement says otherwise.

Your choices and rights, including in California

You can ask us to: tell you what personal information we have collected about you, where it came from, why we use it and who received it; give you a copy of it; correct it; and delete it. You can also opt out of any sale or sharing of your personal information, although we do not sell or share it. We will not treat you differently for using these rights.

To make a request, email [email protected] with the subject "Privacy request", or use the request form below. We will confirm that we received it within 10 business days and reply within 45 days. To protect you, we may confirm your identity by matching the email address or phone number you gave us. An authorized agent may make a request for you with your signed permission.

Information about children

Our website and services are for businesses. We do not knowingly collect personal information from anyone under 16, and we do not sell or share the personal information of anyone under 16.

Changes to this policy

We may update this policy from time to time. When we do, we will change the dates at the top of this page. If a change is significant, we will make that clear on the site or tell clients directly.

How to contact us

For any question about this policy or your information, email [email protected]. A member of our team will reply.

Make a privacy request

Use this form to ask us to tell you what we hold, give you a copy, correct it, delete it or stop any sale or sharing. You can also email [email protected] with the subject "Privacy request".