Privacy Policy

1. Introduction

We operate solely within the United States. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our Site and services. By using the Site, you agree to this Policy. We respect your privacy and collect only what we need to schedule calls, deliver services, communicate with you, and improve our Site.

2. Information We Collect

Information You Provide

• Contact details: name and email address
• Business details: company name, industry, revenue range, relevant operational information
• Form responses: primary goals, current tools, operational challenges, intake answers
• Communications: messages you send to us and any files you upload

Information Collected Automatically

• Usage data: pages visited, timestamps, IP address, device/browser type
• Form submissions: when you submit a form on our Site (such as newsletter signups or contact forms), we collect the information you provide

3. How We Use Your Information

We use your information to:

• Schedule and confirm calls, and deliver lead magnets or materials you request
• Send confirmations, reminders, and follow-ups related to bookings and services
• Send SMS or text messages if you separately provide a phone number and expressly opt in, primarily for new-lead notifications and lead alerts, client account alerts, account status notices, project or service updates, billing or administrative notices, access notices, and appointment reminders
• Communicate about our services and operational resources, if you've opted in
• Analyze and improve our Site and detect/prevent abuse or fraud
• Comply with legal obligations and enforce our terms

4. Residents' Rights (U.S.)

You may request access to, correction of, or deletion of your personal information by emailing [email protected].

California Residents (CCPA/CPRA)

Categories collected: identifiers (name, email); commercial information (bookings, requested services); internet activity (basic usage data); professional information (business name, industry). We do not collect sensitive personal information.

• Sources & Purposes: as described in Sections 2–3
• Disclosures: to service providers listed below
• Sale/Share: we do not sell personal information and do not share it for cross-context behavioral advertising
• Retention: see "Data Retention"

To exercise your rights, email [email protected] with "CCPA Request" in the subject line. We may request verification information and proof of authorization if an agent submits the request.

We will not discriminate against you for exercising your rights.

5. Analytics & Tracking

We use lightweight analytics to understand aggregate site activity and where the Site can be improved. We do not use retargeting ads or sell personal information.

• We use Cloudflare and server logs for hosting, security, performance, and abuse prevention
• We use Ahrefs analytics to measure aggregate page activity and search visibility

We use a lightweight internal contact-click tracker to understand when visitors click phone, text message, or email links on our website. This tracker records the type of contact link clicked, the page where the click occurred, the referring page when available, basic device screen width, and a short link label. It does not record pageviews, browsing sessions, form submissions, message contents, or information typed into forms. The tracker respects browser Do Not Track signals where available.

• Site forms and tool results are stored separately in WhiteBoston's lead database and are used only for the purposes described in this policy.
• We do not run retargeting ads and do not share personal information for cross-context behavioral advertising

SMS/Text Messaging

WhiteBoston LLC sends SMS/text messages only to clients who expressly opt in. Clients opt in by entering their mobile number and checking a dedicated SMS-consent checkbox on our client SMS opt-in form at https://ehumphress.com/client-sms-consent/, or by giving equivalent written consent during onboarding. The consent checkbox is separate from our general service agreement, is optional, and is unchecked by default; consent to receive SMS is not a condition of purchasing any goods or services.

We use your number only to send the messages you opted in to receive, primarily new-lead notifications and lead alerts (notifying you when a prospective customer submits a form on your website), as well as client account alerts such as account status notices, project or service updates, billing or administrative notices, access notices, and appointment reminders. Message frequency varies based on your lead volume, account, booking, or service relationship. Message and data rates may apply. You can opt out at any time by replying STOP. For help, reply HELP or contact [email protected].

We do not sell, rent, or share SMS opt-in data or consent status for third-party marketing. We may disclose limited SMS-related information to service providers that help us send, manage, or support text messages, and they may use that information only to provide services to us.

6. Third Parties & Integrations

We disclose limited information to trusted service providers under contracts requiring them to protect your data and use it only to provide services to us:

• Beehiiv - email newsletter platform for subscriber management and communications
• Google Workspace - Google Calendar for scheduling and Google Meet for video meetings
• Stripe - secure payment processing. Card information is processed directly by Stripe; we do not store payment details
• QuickBooks - invoicing and billing
• SMS and telephony providers - sending, managing, and supporting text messages only when you opt in to receive them
• Cloudflare - website hosting and infrastructure on secure U.S.-based servers

All third-party vendors comply with applicable U.S. data protection standards, including SOC 2 and PCI DSS where applicable.

7. Social Media Services

If you engage us for social media management services, the following additional data practices apply:

• Account access: We may access your social media accounts directly using credentials you provide, or through platform-specific business tools and scheduling applications, depending on your preferences and the platforms involved.
• Content & materials: We temporarily store content, raw footage, images, and brand assets during production. This content is deleted after posting to your accounts. We do not retain long-term backups of raw footage or source files.
• Your responsibility: You are responsible for maintaining the security of any account credentials you provide to us and for revoking access when services conclude.

8. Sharing & Disclosures

We do not sell or rent your personal data.

We may disclose information:

• To service providers (as listed above)
• With your consent
• To comply with law, legal processes, or enforce our agreements
• To protect the rights, property, or safety of users, the public, or WhiteBoston LLC

In the event of a merger, acquisition, or asset sale, affected users will be notified as required by law.

9. Data Retention

• Contact & booking info: retained as long as necessary to provide services, typically up to 2 years after your last interaction
• SMS consent and messaging records, if any: retained as needed to honor opt-in or opt-out preferences, support compliance, and document service communications if you separately opt in to SMS
• Logs: retained for up to 24 months
• Deletion requests: honored within 30 days of written request

10. Security

We implement reasonable administrative, technical, and physical safeguards appropriate to the nature of the information we process. If a security incident occurs and notification is legally required, we will notify affected individuals promptly.

11. Your Rights & How to Contact Us

WhiteBoston LLC
Email: [email protected]
Website: ehumphress.com and whiteboston.com

12. Location of Processing

We operate entirely within the United States. Personal data is processed and stored primarily in the U.S. by WhiteBoston LLC and our U.S.-based service providers.

13. Children

Our services are not directed to children under 13. We do not knowingly collect data from children. If you believe a child has submitted data, contact us to request deletion.

14. Do Not Track

Some browsers transmit "Do Not Track" signals. Our Site does not currently respond to these signals, but you can manage cookies and trackers through your browser settings.

15. Public Areas & User Content

If you post or submit content publicly (e.g., comments or messages), it may be read and used by others. Avoid sharing information you do not wish to disclose publicly.

16. Third-Party Links & Embeds

Our Site may contain links to third-party websites or embedded content (e.g., videos). We are not responsible for third-party privacy practices and recommend reviewing their privacy policies.

17. Job Applicants

If you apply for a role with WhiteBoston LLC, we will use your submitted information to evaluate your application in compliance with applicable laws.

18. Changes to This Policy

We may update this Policy periodically. Material changes will be highlighted on this page for at least 30 days following the effective date.