Privacy Policy
Effective 17 September 2026. Last updated 17 September 2026.
Sparkplug ("we", "our", "us") respects the privacy of our clients, partners, and visitors ("you", "your"). This policy describes what personal and business information we collect, how we use and protect it, and the rights you have over it. By using our services you consent to the practices described here.
1. Information we collect
We collect information in three ways: directly from you, automatically as you use the site, and from the platforms we connect to on your behalf.
Information you give us
- Contact and identifying details: name, email address, phone number, and business name.
- Business details: industry, service area, company size, campaign objectives, budget range, and what you are trying to achieve.
- Uploaded materials: logos, images, video, prior campaign work, brand guidelines, and documents needed to run your advertising.
- Billing information, handled through PCI-DSS compliant payment providers. We do not store card numbers ourselves.
- Partner and press information where you contact us in that capacity, such as organization, role, and the nature of your request.
Information collected automatically
Our hosting provider records standard server data such as IP address, browser and device type, referring page, and time of request, for security and reliability. This site uses Google Analytics 4 to measure how people find and use it: pages viewed, approximate location at city level, device and browser, referring source, and whether a contact form was submitted. IP addresses are anonymized. We use this to understand which pages are useful and which advertising works, not to identify individual visitors.
Information from third parties
Where you have granted access, we receive campaign and performance data from advertising platforms such as Google Ads and Meta, and analytics data from your own website analytics property. We may use public business registries to verify business details.
2. How we use information
- To respond to your inquiry and, if you become a client, to set up and run your account.
- To deliver the services agreed: campaign management, creative production, local search work, and reporting.
- To operate automated workflows, including client record creation, folder provisioning, scheduled reporting, and record auditing.
- To send service communications such as reports, invoices, and account notices.
- To target and place advertising in the regions and audiences your campaigns call for.
- To monitor for fraud, unauthorized access, and misuse.
- To meet legal, tax, and accounting obligations.
We may use anonymized, aggregated data for analysis and service improvement in a form that does not identify you. We do not sell your personal information, and we do not share it for other companies' marketing.
3. Automated processing and AI
Parts of our operation run on automated workflows, and some of those steps use AI systems to read, classify, and draft. This includes processing inquiries, organizing client records, drafting communications, and preparing reports. Anything sent to you on our behalf is reviewed by a person before it goes out, with the exception of the automatic acknowledgement you receive immediately after submitting a form, which is clearly identified as such. We keep audit logs of automated actions recording what was done, when, and by which system.
4. Who we share information with
We share information only in these circumstances:
- Service providers who operate parts of our business under confidentiality obligations. These currently include Netlify and Namecheap for website hosting and domain services, Google Workspace for email, documents, and file storage, Google Analytics for site measurement, n8n for workflow automation, and Anthropic for the AI processing described above.
- Advertising platforms, including Google and Meta, strictly to execute campaigns on your instruction.
- Legal compliance: where required by law, subpoena, or court order, or to protect the rights and safety of Sparkplug and its clients.
- Corporate transactions: in a merger, acquisition, or restructuring, client data may transfer as part of the business, subject to the protections in this policy.
- Anywhere else only with your express authorization.
5. Retention
We keep information only as long as needed for the purpose it was collected, subject to legal obligations. Inquiry records are kept as a record of business contacts and can be deleted at your request. Client uploads are retained for the duration of the engagement and for up to two years afterwards unless you ask for earlier deletion. Financial records are retained for seven years for tax and accounting purposes. Analytics data is anonymized after 24 months. Credentials and API tokens are removed at account closure.
6. Security
- Data is encrypted in transit and at rest by the platforms we use.
- Access is restricted to people with a business need for it.
- Client files live in access-controlled folders; a client can see and upload to their own folder set and cannot see another client's.
- We keep audit logs and review them for anomalies.
- In the event of a breach affecting your data, we will notify you in accordance with applicable law.
No method of transmission or storage is completely secure, so please do not send passwords, government identification numbers, or payment card details by form or ordinary email.
7. Your rights
Depending on where you live, you may have the right to access the personal information we hold, to correct it, to have it deleted, to restrict or object to how it is processed, and to receive a copy in portable form. You may also opt out of non-essential communications at any time.
Send requests to ignite@sparkplug.agency. We verify identity before acting on a request and respond within thirty (30) days.
8. Cookies
Google Analytics sets cookies to distinguish one visit from another and to measure whether a visitor returns. This site sets no advertising cookies and runs no advertising pixel of its own. Embedded third-party resources such as web fonts may log requests under their own policies. You can block these cookies in your browser without losing any functionality on this site.
9. International transfers
We operate from the United States and use providers based there. If you contact us from outside the United States, your information will be transferred to and processed in the United States, with appropriate safeguards including Standard Contractual Clauses where applicable.
10. Children
Our services are for businesses and adults. We do not knowingly collect information from anyone under 18. If we learn we have, we delete it.
11. Changes
We may revise this policy. Updates are posted here with a new effective date, and continued use of our services constitutes acceptance.
12. Contact
Privacy questions and requests: ignite@sparkplug.agency