Privacy Policy

Cracked Egg Creative (“we,” “us,” or “our”) is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. By using our website (crackedeggcreative.io), you agree to the practices described here.

1. Who We Are

Cracked Egg Creative is a full-service digital marketing agency providing strategy, creative, paid media, SEO, web design and development, and growth intelligence services.

• Founder / CEO: Nick Bouras
• Business Name: Cracked Egg Creative
• Email: info@crackedeggcreative.io
• Location: St. Louis, MO

For privacy-related questions or requests, contact us at: info@crackedeggcreative.io

2. What Data We Collect and Why

a) Form Submissions

When you submit a form on our site, such as our contact form, newsletter signup, or a request for a free assessment or guide, we collect:

• Your name
• Your email address
• Your phone number (if provided)
• Your company name and website (if provided)
• Any message, project details, or marketing challenges you choose to share

We also record the page you submitted the form from and, if you reached our site through one of our ads or campaigns, the campaign details included in the link (such as UTM parameters). Form submissions are sent to and stored in HubSpot, our customer relationship management (CRM) platform.

Legal basis (GDPR): Legitimate interest and pre-contractual steps (Article 6(1)(b) and (f)). For newsletter signups, the legal basis is your consent (Article 6(1)(a)), which you can withdraw at any time using the unsubscribe link in any email.
Purpose: To respond to your inquiry, deliver what you requested, and potentially enter into a business relationship.

b) Automatically Collected Data

When you visit our site, our hosting provider (Vercel) and our analytics and advertising tools may automatically collect:

• IP address
• Browser type and version
• Pages visited and time spent
• Referring URL
• Date and time of visit
• Device type and approximate location (derived from your IP address)

Legal basis (GDPR): Legitimate interest (Article 6(1)(f)), to maintain website security and performance and to understand how our website and advertising perform.

c) Cookies

Our website uses cookies and similar technologies for analytics and advertising. See Section 6 for full details.

3. How We Use Your Data

• To respond to inquiries and provide requested services
• To manage client projects and communication
• To send project updates or follow-up communications related to your inquiry
• To maintain the security and functionality of our website
• To measure and improve the performance of our website and advertising
• To comply with legal obligations

We do not sell your personal data. We do not use your data for automated decision-making that produces legal or similarly significant effects on you.

4. Who We Share Your Data With

We do not sell or rent your personal information. We may share data with trusted third-party service providers who assist us in operating our website and business, including:

• Website Hosting: Vercel, which hosts and delivers our website and processes server logs on our behalf.
• CRM and Forms: HubSpot, which receives and stores form submissions and manages our communications with you.
• Analytics and Tag Management: Google, through Google Tag Manager and Google Analytics, which help us understand how visitors use our website.
• Advertising: Meta (Facebook and Instagram), through the Meta Pixel, which measures the results of our ads and may be used to show you relevant ads on Meta platforms.
• Scheduling: Calendly, if you choose to book a meeting with us through one of our scheduling links.
• Email Service Provider: Microsoft 365, used to deliver and manage email communications.

All third-party providers are contractually obligated to handle your data securely and only for specified purposes. We may also disclose your information if required by law, court order, or to protect our legal rights.

5. How Long We Retain Your Data

• Form submissions: Retained for 2 years after last contact, then deleted unless a client relationship was established.
• Client project data: Retained for 7 years for business and tax record purposes, then securely deleted.
• Server logs: Retained by our hosting provider for a limited period according to its retention settings.
• Analytics and advertising data: Retained according to the settings of each provider, such as Google and Meta.
• Cookies: See Section 6 for individual cookie durations.

6. Cookies

Cookies are small text files stored on your device. We use the following types:

Strictly Necessary Cookies

Our website does not require cookies to function. We do not offer user accounts or logins.

Analytics Cookies

• Google Analytics (loaded through Google Tag Manager): sets cookies such as _ga to distinguish visitors and understand how the site is used; these last up to 2 years.

Advertising Cookies

• Meta Pixel: sets cookies such as _fbp to measure the results of our ads and support ad delivery on Meta platforms; these last up to 90 days.

Third-Party Content

• YouTube: videos embedded on our site may set cookies when they load or play. See Google’s privacy policy.

You can control or delete cookies through your browser settings. Note that disabling cookies may affect site functionality. You can opt out of Google Analytics with the Google Analytics opt-out browser add-on and manage Meta ad preferences in your Meta ad settings. For more information visit allaboutcookies.org.

7. Embedded Content from Other Websites

Pages on our site may include embedded content, such as YouTube videos, and links to third-party tools such as Calendly. Embedded content from other websites behaves exactly as if you had visited that website directly. Those websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that content.

8. Your Rights Under GDPR

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data, subject to legal retention obligations.
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.
• Right to Lodge a Complaint: File a complaint with your local data protection authority. In the UK, contact the ICO. In the EU, contact your national supervisory authority.

To exercise any of these rights, contact us at info@crackedeggcreative.io. We will respond within 30 days.

9. Your Rights Under CCPA (California Residents)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, disclose, and sell.
• The right to delete personal information we hold about you.
• The right to opt out of the sale of your personal information. We do not sell personal information.
• The right to non-discrimination for exercising your privacy rights.

To submit a CCPA request, contact us at info@crackedeggcreative.io.

10. Data Security

We implement reasonable technical and organizational measures to protect your personal data, including SSL/TLS encryption, secure hosting, and limited access to personal data on a need-to-know basis. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. International Data Transfers

Our business is based in the United States, and our website is delivered through our hosting provider’s global network. If you are accessing our site from outside the US, your data may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. If you are in the EEA or UK, we ensure appropriate safeguards are in place for any international transfers in accordance with GDPR requirements.

12. Children’s Privacy

Our website is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised “Last Updated” date. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

15. Contact Us

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact: