Privacy policy.

1. Introduction

We operate solely within the United States. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our Site and services. By using the Site, you agree to this Policy. We respect your privacy and collect only what we need to schedule calls, deliver services, communicate with you, and improve our Site.

2. Information We Collect

Information You Provide

• Contact details: name and email address
• Business details: company name, industry, revenue range, relevant operational information
• Form responses: primary goals, current tools, operational challenges, intake answers
• Communications: messages you send to us and any files you upload

Information Collected Automatically

• Usage data: pages visited, timestamps, IP address, device/browser type
• Form submissions: when you submit a form on our Site (such as newsletter signups or contact forms), we collect the information you provide

3. How We Use Your Information

We use your information to:

• Schedule and confirm calls, and deliver lead magnets or materials you request
• Send confirmations, reminders, and follow-ups related to bookings and services
• Send SMS or text messages if you separately provide a phone number and expressly opt in, primarily for new-lead notifications and lead alerts, client account alerts, account status notices, project or service updates, billing or administrative notices, access notices, and appointment reminders
• Communicate about our services and operational resources, if you've opted in
• Analyze and improve our Site and detect/prevent abuse or fraud
• Comply with legal obligations and enforce our terms

4. Residents' Rights (U.S.)

You may request access to, correction of, or deletion of your personal information by emailing support@whiteboston.com.

California Residents (CCPA/CPRA)

Categories collected: identifiers (name, email); commercial information (bookings, requested services); internet activity (basic usage data); professional information (business name, industry). We do not collect sensitive personal information.

• Sources & Purposes: as described in Sections 2–3
• Disclosures: to service providers listed below
• Sale/Share: we do not sell personal information and do not share it for cross-context behavioral advertising
• Retention: see "Data Retention"

To exercise your rights, email support@whiteboston.com with "CCPA Request" in the subject line. We may request verification information and proof of authorization if an agent submits the request.

We will not discriminate against you for exercising your rights.

5. Analytics & Tracking

We use lightweight analytics to understand aggregate site activity and where the Site can be improved. We do not use retargeting ads or sell personal information.

• We use Cloudflare and server logs for hosting, security, performance, and abuse prevention
• We use InhoBot Analytics to measure pageviews, visits, referring sites, time spent on pages, scroll depth, and page performance. It uses random visitor and session identifiers stored in your browser. The tracker does not collect form contents, names, or email addresses, and respects supported Do Not Track and Global Privacy Control signals.

• Site forms and tool results are stored separately in WhiteBoston's lead database and are used only for the purposes described in this policy.
• We do not run retargeting ads and do not share personal information for cross-context behavioral advertising

SMS/Text Messaging

WhiteBoston LLC sends SMS/text messages only to clients who expressly opt in. Clients opt in by entering their mobile number and checking a dedicated SMS-consent checkbox during onboarding, or by giving equivalent written consent. The consent checkbox is separate from our general service agreement, is optional, and is unchecked by default; consent to receive SMS is not a condition of purchasing any goods or services.

We use your number only to send the messages you opted in to receive, primarily new-lead notifications and lead alerts (notifying you when a prospective customer submits a form on your website), as well as client account alerts such as account status notices, project or service updates, billing or administrative notices, access notices, and appointment reminders. Message frequency varies based on your lead volume, account, booking, or service relationship. Message and data rates may apply. You can opt out at any time by replying STOP. For help, reply HELP or contact hello@ehumphress.com.

We do not sell, rent, or share SMS opt-in data or consent status for third-party marketing. We may disclose limited SMS-related information to service providers that help us send, manage, or support text messages, and they may use that information only to provide services to us.

6. Third Parties & Integrations

We disclose limited information to trusted service providers under contracts requiring them to protect your data and use it only to provide services to us:

• Beehiiv - email newsletter platform for subscriber management and communications
• Google Workspace - Google Calendar for scheduling and Google Meet for video meetings
• Stripe - secure payment processing. Card information is processed directly by Stripe; we do not store payment details
• QuickBooks - invoicing and billing
• SMS and telephony providers - sending, managing, and supporting text messages only when you opt in to receive them
• Cloudflare - website hosting and infrastructure on secure U.S.-based servers

All third-party vendors comply with applicable U.S. data protection standards, including SOC 2 and PCI DSS where applicable.

7. Social Media Services

If you engage us for social media management services, the following additional data practices apply:

• Account access: We may access your social media accounts directly using credentials you provide, or through platform-specific business tools and scheduling applications, depending on your preferences and the platforms involved.
• Content & materials: We temporarily store content, raw footage, images, and brand assets during production. This content is deleted after posting to your accounts. We do not retain long-term backups of raw footage or source files.
• Your responsibility: You are responsible for maintaining the security of any account credentials you provide to us and for revoking access when services conclude.

8. Sharing & Disclosures

We do not sell or rent your personal data.

We may disclose information:

• To service providers (as listed above)
• With your consent
• To comply with law, legal processes, or enforce our agreements
• To protect the rights, property, or safety of users, the public, or WhiteBoston LLC

In the event of a merger, acquisition, or asset sale, affected users will be notified as required by law.

9. Data Retention

• Contact & booking info: retained as long as necessary to provide services, typically up to 2 years after your last interaction
• SMS consent and messaging records, if any: retained as needed to honor opt-in or opt-out preferences, support compliance, and document service communications if you separately opt in to SMS
• Logs: retained for up to 24 months
• Deletion requests: honored within 30 days of written request

10. Security

We implement reasonable administrative, technical, and physical safeguards appropriate to the nature of the information we process. If a security incident occurs and notification is legally required, we will notify affected individuals promptly.

11. Your Rights & How to Contact Us

WhiteBoston LLC
Email: support@whiteboston.com
Website: ehumphress.com and whiteboston.com

12. Location of Processing

We operate entirely within the United States. Personal data is processed and stored primarily in the U.S. by WhiteBoston LLC and our U.S.-based service providers.

13. Children

Our services are not directed to children under 13. We do not knowingly collect data from children. If you believe a child has submitted data, contact us to request deletion.

14. Do Not Track

Our InhoBot Analytics tracker does not load when your browser sends a supported Do Not Track or Global Privacy Control signal. You can also manage browser storage through your browser settings. Hosting, security, and information you submit through forms are handled separately as described in this policy.

15. Public Areas & User Content

If you post or submit content publicly (e.g., comments or messages), it may be read and used by others. Avoid sharing information you do not wish to disclose publicly.

16. Third-Party Links & Embeds

Our Site may contain links to third-party websites or embedded content (e.g., videos). We are not responsible for third-party privacy practices and recommend reviewing their privacy policies.

17. Job Applicants

If you apply for a role with WhiteBoston LLC, we will use your submitted information to evaluate your application in compliance with applicable laws.

18. Changes to This Policy

We may update this Policy periodically. Material changes will be highlighted on this page for at least 30 days following the effective date.