PRIVACY NOTICE

Last updated: August 20, 2026

TABLE OF CONTENTS

1. Who we are and what this covers
2. What information do we collect?
3. How do we use your information?
4. What legal bases do we rely on?
5. Who do we share your information with?
6. Advertising, analytics, and tracking technologies
7. Do we use cookies?
8. Email and SMS communications
9. Is your information transferred internationally?
10. How long do we keep your information?
11. How do we keep your information safe?
12. Do we collect information from minors?
13. What are your privacy rights?
14. United States state privacy rights
15. Controls for Do-Not-Track and Global Privacy Control
16. Do we make updates to this notice?
17. How can you contact us?
18. How can you review, update, or delete your data?

1. WHO WE ARE AND WHAT THIS COVERS

This Privacy Notice explains how LeadRush LLC, doing business as Leadrush Social ("Leadrush Social," "Company," "we," "us," or "our"), collects, uses, shares, and protects your personal information.

LeadRush LLC is a Colorado limited liability company. Our registered office is 9250 E Costilla Ave #110, Greenwood Village, CO 80112, United States. For the purposes of the EU GDPR and the UK GDPR, LeadRush LLC is the data controller of the personal information described here. We are not required to appoint a Data Protection Officer and have not appointed one. Privacy questions go to the contact in Section 17.

This notice applies when you:

• Visit our website at https://www.leadrushsocial.com or any landing page, funnel page, scorecard, quiz, booking page, or checkout page we operate
• Download a free resource, opt in to a lead magnet, or complete an assessment or scorecard
• Purchase a product, program, or service from us
• Engage with us in any other related way, including sales conversations, marketing, email, SMS, webinars, or events

In this notice:

• "Website" means any website, landing page, funnel, or hosted page of ours that references or links to this notice
• "Services" means our Website plus our products, programs, coaching, done-for-you marketing services, and any related sales, marketing, or events

A note on scope: we also process personal information on behalf of our clients when we run advertising, CRM, or marketing systems for them. In those engagements we act as a service provider / processor, not as the controller, and the client's own privacy notice governs. This notice covers only the information we collect for our own purposes. If you contact us about information we hold on a client's behalf, we will pass your request to that client and support their response.

2. WHAT INFORMATION DO WE COLLECT?

Personal information you give us

In short: we collect the personal information you choose to provide.

We collect personal information that you voluntarily provide when you request information about us or our Services, opt in to a resource, complete a scorecard or assessment, book a call, make a purchase, or otherwise contact us. What we collect depends on how you interact with us, and may include:

• Identity and contact data: name, email address, phone number, mailing address, billing address, company name, job title, and website URL
• Assessment and survey responses: the answers you give in a scorecard, quiz, application form, or intake questionnaire, including information about your business, revenue range, team size, tools, and goals
• Transaction data: products purchased, order value, purchase date, refund and dispute history
• Payment data: card and billing details you enter on Stripe's hosted checkout. Your full card number and security code go to Stripe directly. We never receive or store them. Payment data is collected and stored by Stripe, Inc. You can read Stripe's privacy notice at https://stripe.com/privacy
• Communications: the content of emails, SMS messages, form submissions, support requests, and (where you are told in advance and consent) recordings and transcripts of sales or coaching calls
• Testimonial and content data: any testimonial, review, case study detail, image, or video you provide to us

Please keep the information you give us accurate and tell us if it changes.

Information collected automatically

In short: some information, such as your IP address and browser characteristics, is collected automatically when you visit our Website.

We automatically collect certain information when you visit, use, or navigate the Website. Most of this does not directly identify you by name, but it is treated as personal information under GDPR and several US state laws. It includes:

• Log and usage data: IP address, browser type and settings, operating system, language preference, referring and exit URLs, date and time stamps, pages and files viewed, clicks, scroll depth, form interactions, search terms used on our site, and error reports
• Device data: device type, hardware model, device and application identifiers, screen resolution, internet service provider or mobile carrier, and system configuration
• Approximate location data: we infer approximate location (typically country, region, and city) from your IP address. We do not collect precise GPS location from your device.
• Advertising and attribution data: cookie and pixel identifiers, click identifiers passed in URLs (for example Meta's fbclid and Google's gclid), UTM campaign parameters, and the advertising interactions that brought you to us
• Session behavior data: where session analytics tools are enabled, aggregated recordings of mouse movement, clicks, and page scrolling on our pages

We collect this information through cookies, pixels, tags, server logs, and similar technologies. See Sections 6 and 7.

Information we receive from third parties

We may receive information about you from:

• Advertising and analytics platforms (Meta, Google), including aggregated campaign performance and audience data
• Social platforms, if you interact with our ads, pages, or lead forms, or if you choose to sign in or connect using a third-party account
• Publicly available business sources, such as company websites and professional networking profiles, when we research a prospective client
• Referral partners and affiliates, where you have been introduced to us

3. HOW DO WE USE YOUR INFORMATION?

In short: we use your information to deliver our Services, run our business, market to you where permitted, and comply with the law.

We use the personal information we collect to:

• Deliver our products and services, including fulfilling orders, granting course and program access, running client engagements, and providing coaching or consulting
• Take payment, process refunds, and manage billing, invoicing, tax, and accounting
• Communicate with you, including responding to inquiries, providing support, sending onboarding and administrative messages, and notifying you of changes to our terms or policies
• Send marketing and promotional communications by email and, where you have opted in, SMS. You can unsubscribe at any time (see Section 8)
• Run and measure advertising, including building audiences, creating lookalike audiences, retargeting people who have visited our pages, suppressing existing customers from acquisition campaigns, and attributing conversions to campaigns. This involves sharing information with Meta and Google (see Section 6)
• Analyze and improve our Website, funnels, offers, and content, including A/B testing headlines, pricing, and page layouts
• Score, segment, and qualify leads, including using scorecard and assessment answers to determine which resources or offers to show or send you
• Publish testimonials and case studies, only with your consent. To update or remove a testimonial, email info@leadrushsocial.com with your name and the page it appears on
• Protect our Services, including fraud monitoring and prevention, chargeback defense, security, and abuse detection
• Enforce our terms and policies, resolve disputes, and establish, exercise, or defend legal claims
• Comply with legal obligations, including tax and accounting record keeping, and responding to lawful requests from public authorities

AI and automated processing

We are an AI company, so we should be specific about this.

• We use AI tools to transcribe and summarize calls where you have been told in advance and consented, to draft and edit content, and to help score and segment leads from assessment answers.
• Where we use a third-party AI or transcription provider, we select business or enterprise tiers and configure them, where the provider offers the setting, so that your content is not used to train that provider's models.
• Lead scores and segments are suggestions, not decisions. A person decides who we contact, what we offer, and at what price.
• We do not use your personal information to make decisions that produce legal or similarly significant effects about you without human involvement, and we do not use AI to make eligibility, pricing, or credit decisions about you.

4. WHAT LEGAL BASES DO WE RELY ON?

In short: if you are in the EEA or UK, we only process your personal information when we have a valid legal reason to do so.

What we doLegal basisDeliver products, programs, and services you boughtPerformance of a contractProcess payments and manage your orderPerformance of a contractRespond to your inquiry or support requestPerformance of a contract, or legitimate interestsSend marketing emails to prospectsConsent, where required, or legitimate interestsSend SMS marketingConsentSet advertising and analytics cookies and pixelsConsentSet strictly necessary cookiesLegitimate interestsSet functional cookies that remember your preferencesConsentSend hashed identifiers to Meta and Google via the Conversions API and enhanced conversionsConsentScore, segment, and qualify leads from your assessment answersLegitimate interestsMeasure and improve site and funnel performanceConsent for non-essential analytics, otherwise legitimate interestsPublish a testimonial naming youConsentPrevent fraud and secure our systemsLegitimate interestsKeep financial and tax recordsLegal obligationEstablish or defend legal claimsLegitimate interests, or legal obligation

Where we rely on legitimate interests, we have assessed that our interest in running and growing our business does not override your rights and freedoms. You can object to this processing at any time (see Section 13).

Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect processing we carried out before you withdrew it.

5. WHO DO WE SHARE YOUR INFORMATION WITH?

In short: we share personal information with the service providers that run our business, and with Meta and Google for advertising and analytics.

We do not sell your personal information for money. We do share it in the circumstances below. Some of that sharing meets the definition of a "sale" or "share" under certain US state privacy laws. See Section 14 for what that means and how to opt out.

Service providers and platforms we use

ProviderWhat it does for usWhat it receivesMeta Platforms, Inc. (Facebook, Instagram)Advertising, retargeting, conversion measurement, audience buildingWebsite and conversion events via the Meta Pixel and Conversions API, cookie and click identifiers, IP address, and hashed identifiers such as email address and phone numberGoogle LLC (Google Tag, Google Analytics 4, Google Ads)Website analytics, conversion tracking, advertising, remarketingWebsite and conversion events via the Google Tag, cookie and click identifiers, IP address, device and browser data, and hashed identifiers such as email address where enhanced conversions are enabledHighLevel, Inc. (GoHighLevel)CRM, contact database, forms and funnels, email and SMS delivery, calendar booking, pipeline managementYour contact details, form and assessment answers, communication history, and behavioral data such as email opens and link clicksStripe, Inc.Payment processing and subscription billingYour name, email, billing address, and payment card details, which Stripe collects and stores directlyScoreAppHosting and scoring our scorecards, quizzes, and assessments. ScoreApp is a UK provider and this data is hosted in the UK or EUYour contact details and your answers to assessment questionsEmail, hosting, storage, video, scheduling, accounting, and support vendorsRunning day-to-day operationsThe minimum personal information needed to perform their function

We require our providers to sign data processing terms that limit what they may do with your information, and we work to have these in place with every vendor we use. We do not authorize any of them to use your personal information for their own independent purposes, except where noted below for Meta and Google.

Important: Meta and Google may use the data they receive for their own purposes, including improving their advertising and measurement products, in line with their own terms and privacy policies. Read them here:

• Meta Privacy Policy: https://www.facebook.com/privacy/policy
• Google Privacy Policy: https://policies.google.com/privacy
• Google Ads and analytics data practices: https://policies.google.com/technologies/partner-sites

Other situations in which we may share

• Professional advisers. Our lawyers, accountants, insurers, and auditors, where they need the information to advise us
• Business transfers. If we merge, sell assets, raise finance, or are acquired, your information may be transferred as part of that transaction. We will notify you if it becomes subject to a different privacy notice
• Corporate affiliates. Any company under common control with us, which is required to honor this notice
• Referral and joint venture partners. Where you reach us through a partner or affiliate promotion, we may share the fact of your signup or purchase with that partner so they can be credited. We do not share your assessment answers or communication history with them
• Legal obligations. Where we are required to disclose information to comply with applicable law, a court order, a subpoena, or a lawful request from a public authority, including for national security or law enforcement purposes
• Vital interests and safety. Where we believe disclosure is necessary to investigate or prevent a violation of our policies, suspected fraud, threats to anyone's safety, or illegal activity, or as evidence in litigation
• With your consent or at your direction

6. ADVERTISING, ANALYTICS, AND TRACKING TECHNOLOGIES

In short: we run the Meta Pixel and the Google Tag on our Website. They send information about your visit to Meta and Google.

Advertising is central to how we find clients, so this section spells out exactly what happens.

Meta Pixel and Conversions API

We use the Meta Pixel, a piece of code on our Website, and the Meta Conversions API, a server-to-server connection between our systems and Meta. Together these send Meta information about actions you take on our pages, such as viewing a page, submitting a form, starting a checkout, or completing a purchase.

The information sent to Meta may include your IP address, browser and device information, the pages you viewed, the events you triggered, Meta cookie identifiers, and hashed versions of identifiers you have given us such as your email address and phone number. Hashing converts these into a scrambled string before transmission, but Meta can match that string to an existing Facebook or Instagram account.

We use this to measure which ads produce results, to show you ads for our offers after you leave our site (retargeting), to build lookalike audiences from our customer and lead lists, and to exclude existing customers from acquisition campaigns.

Meta acts as an independent controller for some of this processing. For Event Data collected through the Meta Pixel and Conversions API from visitors in the EEA and UK, Meta and we act as joint controllers for the collection and transmission of that data. In practice this means we are responsible for giving you this notice and for obtaining your consent before the tools fire, and Meta is responsible for everything it does with the data afterwards, including responding to your access and deletion requests about its own processing. The arrangements are set out in Meta's Controller Addendum at https://www.facebook.com/legal/controller_addendum and, for the UK, the UK Controller Addendum at https://www.facebook.com/legal/terms/uk_controller_addendum

To control how Meta uses your data for advertising, use Meta's ad settings at https://www.facebook.com/adpreferences and Meta's off-Facebook activity tool at https://www.facebook.com/off_facebook_activity

Google Tag, Google Analytics 4, and Google Ads

We use the Google Tag to load Google Analytics 4 and Google Ads conversion tracking and remarketing.

Google receives your IP address, cookie and click identifiers, device and browser characteristics, the pages you viewed, and the events you triggered. Where enhanced conversions are enabled, we also send Google a hashed version of your email address so it can match a conversion to an ad click.

Google Analytics 4 does not log or store individual IP addresses from visitors in the EEA, the UK, or Switzerland. It uses the address to derive a coarse location and then discards it. Google Ads conversion and remarketing tags do receive and use your IP address.

We use this to understand how people find and move through our site, to measure which campaigns and keywords produce leads and sales, and to show you our ads across Google's network after you visit.

You can opt out of Google Analytics across all websites using Google's browser add-on at https://tools.google.com/dlpage/gaoptout and manage Google ad personalization at https://myadcenter.google.com

Session analytics

Where enabled, we use session analytics tools to record aggregated page interactions such as clicks, scroll depth, and mouse movement, so we can see where pages confuse people. We configure these tools to mask text entered into form fields, so that they do not capture passwords or payment card details.

Your controls

You can refuse or withdraw consent to non-essential tracking through the cookie banner on our Website, where one is presented to you, and through your browser settings. You can also opt out of interest-based advertising from participating companies at:

• Digital Advertising Alliance: https://optout.aboutads.info
• Network Advertising Initiative: https://thenai.org/how-to-opt-out/
• European Interactive Digital Advertising Alliance: https://www.youronlinechoices.eu

These controls are cookie-based, cover only the companies that participate in each program, and apply to the browser you set them in. Opting out stops personalized advertising from those companies. It does not stop you seeing ads.

7. DO WE USE COOKIES?

In short: yes, including cookies used for advertising.

Cookies are small files placed on your device. We and our providers use cookies, pixels, tags, local storage, and similar technologies for four purposes:

1. Strictly necessary. Keeping you logged in, remembering items in a cart, securing forms, and load balancing. These cannot be switched off
2. Functional. Remembering your preferences, such as language
3. Analytics. Understanding how our Website is used so we can improve it
4. Advertising. Measuring campaigns and showing you relevant ads, including through the Meta Pixel and Google Tag described in Section 6

Most browsers accept cookies by default. You can set your browser to refuse or delete cookies. If you do, parts of our Website may not work properly, and forms, checkouts, or booking pages may fail.

8. EMAIL AND SMS COMMUNICATIONS

In short: you can opt out of our marketing at any time, by any reasonable means.

Email. When you opt in to a resource, buy from us, or ask us to contact you, we may send you marketing emails about our products and services. Every marketing email includes an unsubscribe link. You can also email info@leadrushsocial.com to be removed. We will still send you transactional messages relating to purchases, account access, or legal notices.

SMS. We only send marketing SMS to people who have given express written consent to receive them. Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out and HELP for assistance. You can also revoke consent by emailing info@leadrushsocial.com or by telling us in any other reasonable way, and we will honor it within 10 business days. Consent to receive SMS marketing is never a condition of purchasing anything from us.

We do not sell or rent your mobile number, and we do not give it to any third party for that third party's own marketing. We do send a hashed, non-readable version of it to Meta and Google so they can match ad conversions, as described in Section 6. You can opt out of that under Section 14.

9. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

In short: yes. We are a US company and our providers are mostly US-based.

Your personal information is stored and processed in the United States and may be accessed by our team, which operates from the United States and Spain. It may also be processed in other countries where our providers operate.

If you are in the EEA, UK, or Switzerland, this means your information may be transferred outside your country to a jurisdiction that may not offer the same level of data protection. Where we make such transfers, we rely on one or more of the following safeguards:

• 
  
• The European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, incorporated into our contracts with providers
• 
  
• The EU-US Data Privacy Framework, the UK Extension, and the Swiss-US Data Privacy Framework, where the provider is certified
• 
  
• Your explicit consent, or the necessity of the transfer to perform a contract with you
• 
  

You can request a copy of the safeguards we rely on by emailing info@leadrushsocial.com

10. HOW LONG DO WE KEEP YOUR INFORMATION?

In short: only as long as we need it, and longer where the law requires.

We keep personal information for as long as necessary for the purposes set out in this notice, unless a longer period is required or permitted by law. Our general retention periods are:

Type of informationHow long we keep itProspect and lead records where you never became a customerUp to 3 years from your last engagement with us, then deleted or anonymizedCustomer and client recordsFor the life of the relationship plus 3 yearsFinancial, tax, and accounting records including invoicesUp to 7 years, consistent with IRS recordkeeping guidance and applicable state lawMarketing consent and opt-out recordsFor as long as we operate the relevant list. Where we delete a lead record, we keep a minimal suppression entry (a hashed email address or phone number and nothing else) indefinitely, so that we do not contact you again by mistakeWebsite analytics and advertising event dataPer the retention settings of the platform, typically 14 months or less in Google Analytics 4, and per Meta's own retention periodsCall recordings and transcriptsUp to 2 years, unless needed for a live engagementRecords needed for a legal claimUntil the claim and any appeal period is resolved

When we no longer have a legitimate need to process your information, we delete or anonymize it. Where that is not immediately possible, for example because it sits in a provider's backup, we stop using it and it is removed as that backup cycles.

11. HOW DO WE KEEP YOUR INFORMATION SAFE?

In short: we use appropriate technical and organizational measures, but no system is perfectly secure.

We use measures including encryption in transit (TLS), access controls and least-privilege permissions on our systems, multi-factor authentication on business-critical accounts, vendor due diligence, and limiting access to personal information to the people who need it to do their jobs.

No transmission over the internet and no storage system can be guaranteed to be 100% secure. We cannot promise that unauthorized third parties will never defeat our safeguards. Transmission of personal information to and from our Website is at your own risk. Please access our Website from a secure connection and device.

If a breach affects your personal information and the law requires us to tell you, we will notify you, the relevant state Attorneys General, and any applicable data protection supervisory authority within the time frame the law requires. Under Colorado law that is generally within 30 days of determining a breach occurred.

12. DO WE COLLECT INFORMATION FROM MINORS?

In short: no. Our Services are for adults in business.

We do not knowingly collect data from or market to anyone under 18. By using our Services, you confirm you are at least 18. If we learn that we have collected personal information from someone under 18, we will delete it and deactivate any associated account. If you believe we hold information about a minor, contact info@leadrushsocial.com

13. WHAT ARE YOUR PRIVACY RIGHTS?

In short: you have rights over your information. Contact us to use them.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you, and receive a copy
• Correct information that is inaccurate or incomplete
• Delete your personal information, subject to legal exceptions
• Port your information, receiving it in a structured, commonly used, machine-readable format, or having it sent to another controller where technically feasible
• Restrict our processing in certain circumstances
• Object to processing based on our legitimate interests, and to object to direct marketing at any time, with no exceptions for marketing messages. We will still send you transactional messages about purchases, access, and legal notices
• Withdraw consent at any time, where we rely on consent
• Opt out of the sale or sharing of your personal information and of targeted advertising (see Section 14)
• Obtain a list of the specific third parties that received your personal information, if you live in a state that grants this right, including Oregon, Delaware, and Minnesota
• Not be discriminated against for exercising any of these rights

How to exercise them. Email info@leadrushsocial.com with the subject line "Privacy Request" and tell us which right you want to use. We will respond within the time frame the applicable law requires, generally one month under GDPR and 45 days under US state laws, and we will tell you if we need an extension.

Verification. To protect you, we need to confirm your identity before acting on a request. We will usually do this by matching information you give us against what we already hold, or by contacting you through an email address or phone number you previously gave us. We only use information supplied for verification to verify you, and we delete it once the request is closed. We are not required to re-identify de-identified data in order to respond to a request.

Authorized agents. You may use an authorized agent to make a request on your behalf. We may deny a request from an agent who does not provide proof of valid authorization.

Appeals. If we decline your request and you live in a US state that provides an appeal right, you may appeal by replying to our decision with the word "Appeal." We will respond to your appeal within the period your state requires, and if we deny it we will tell you how to complain to your state Attorney General.

Complaints. If you are in the EEA or UK and believe we are processing your information unlawfully, you can complain to your local supervisory authority:

• Spanish Data Protection Agency (AEPD): https://www.aepd.es/
• Other EEA authorities: https://www.edpb.europa.eu/about-edpb/our-members_en
• UK Information Commissioner's Office: https://ico.org.uk/make-a-complaint/
• Swiss FDPIC: https://www.edoeb.admin.ch/en

We would appreciate the chance to resolve it with you first.

14. UNITED STATES STATE PRIVACY RIGHTS

In short: if you live in a US state with a privacy law, you have rights over your information, including the right to tell us to stop sharing it with advertising platforms.

Most US states now have a consumer privacy law. This section applies to residents of those states, which currently include California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Florida, Iowa, Delaware, New Hampshire, Nebraska, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island.

Each of those laws has size thresholds, and we are a small company that falls below some of them. Where a law applies to us, we follow it. Where it does not, we still do our best to honor the same requests. So you do not need to work out whether a law technically covers us. Just ask.

What we collect about you

Over the past twelve months we have collected:

• Who you are and how to reach you. Your name, email address, phone number, mailing or billing address, company name, and job title.
• What you told us about your business. Your answers to our scorecards, assessments, and application forms, including things like revenue range, team size, and the tools you use.
• What you bought. Products, order values, dates, refunds, and disputes. Your card details go to Stripe, not to us.
• How you used our website. Pages you viewed, links you clicked, forms you started, where you came from, and which ad or campaign brought you here.
• Your device and rough location. Your IP address, browser, device type, and the approximate city or region we can infer from that address. We do not collect precise GPS location.
• What we worked out about you. Lead scores, segments, and a general sense of what you are interested in and how close you are to buying.
• Calls and content. Recordings and transcripts of calls where you were told in advance and agreed, plus any images, video, or testimonials you send us.
• Your login, if you have an account for a program you bought.

We do not collect your race, religion, health information, biometric data such as fingerprints or voiceprints, education records, government ID numbers, or precise location.

What we do with sensitive information

The only sensitive information we hold is your login for our members' area, and we use it for one thing: letting you into what you paid for and keeping your account secure. We do not use sensitive information to work out characteristics about you, and we do not hand it to anyone in a way that would give you the right to limit how it is used.

We do not knowingly sell or share the information of anyone under 16.

Who gets your information, and why that word "sold" appears here

Two different things happen, and they are worth separating.

Our service providers get what they need to do their job. GoHighLevel holds your contact details because it runs our CRM and sends our emails. Stripe holds your payment details because it takes payment. ScoreApp holds your assessment answers because it runs the scorecard. They work for us under contract and cannot use your information for their own purposes.

Meta and Google get something more, and the law has a name for it. We run the Meta Pixel and the Google Tag on our site so we can measure our ads and show them to you again after you visit. That means we pass Meta and Google your device and cookie identifiers, your IP address, the pages you viewed and actions you took, what you bought, and the segments we put you in.

We do not sell your information for money. Nobody pays us for it. But California and several other states define "selling" and "sharing" broadly enough that passing this data to an ad platform for retargeting counts, even with no money involved. So rather than hide behind a technicality: yes, under those laws, what we send to Meta and Google counts as selling or sharing your personal information for targeted advertising. You can stop it, and here is how.

How to stop it

Pick whichever is easiest. All of these are free, and we will not treat you differently for using them.

1. Email us at info@leadrushsocial.com with "Do Not Sell or Share My Personal Information" in the subject line. We will action it as soon as we can, and within 15 business days at the latest.
2. Turn off advertising cookies in the cookie controls on our website.
3. Switch on Global Privacy Control in your browser. We treat that signal as a request to opt out, and if we can tell which contact record it belongs to, we apply it to your record too. See Section 15.
4. Go straight to the source and use the Meta and Google opt-out controls listed in Section 6.

If you live in California, three more things

You can ask who we gave your details to for their own marketing. California's "Shine the Light" law lets you ask us, once a year and for free, whether we shared your information with anyone else for their own direct marketing in the past calendar year. Write to us at the address in Section 17.

If you are under 18, you can ask us to take down what you posted. Our Services are for adults and we do not have public posting, so this is unlikely to apply. If it somehow does, email us from the address on your account and tell us you live in California. We will take it off public display, though copies may sit in backups for a while.

Our free scorecard is technically a "financial incentive." We give you a scorecard, guide, or assessment and you give us your contact details. California asks us to spell that out:

• What we take: your name, email, phone number if you give it, and your answers.
• What it is worth to us: roughly what the resource is worth to you, which for our free material is somewhere between $0 and $37. We base that on what we charge for comparable paid resources.
• Why we do it: so we can send you useful material and, if you agree to it, tell you about our paid programs.
• How to get out: unsubscribe, or email info@leadrushsocial.com. You keep anything you already downloaded.

If you live in Nevada

Nevada lets you opt out of the sale of certain information. We do not sell that information as Nevada defines it, but you are welcome to send a request to info@leadrushsocial.com, which is our designated address for these, and we will reply within 60 days.

15. CONTROLS FOR DO-NOT-TRACK AND GLOBAL PRIVACY CONTROL

In short: we do not act on Do-Not-Track. We do act on Global Privacy Control.

Do-Not-Track (DNT). Most browsers include a DNT setting. There is still no finalized, uniform industry standard for how sites should respond to DNT signals, so we do not respond to DNT browser signals. If a standard is adopted that we must follow, we will update this notice.

Global Privacy Control (GPC). GPC is different. It is a recognized universal opt-out mechanism, and a number of US states require businesses to honor it. We treat a GPC signal as a valid request to opt out of the sale or sharing of personal information for the browser and device that sends it. GPC is sent as a browser signal, so you may need to enable it in each browser and on each device you use. Where we can identify you from the browser that sends the signal, we apply the opt-out to your contact record as well, not just to that browser. You can learn more and enable it at https://globalprivacycontrol.org

16. DO WE MAKE UPDATES TO THIS NOTICE?

In short: yes, when the law or our practices change.

We may update this notice from time to time. The updated version will carry a new "Last updated" date. Routine changes take effect when posted.

Material changes apply going forward only, and we will give you notice before they take effect, by posting a prominent notice on our Website or by contacting you directly. Please review this notice periodically.

17. HOW CAN YOU CONTACT US?

In short: email info@leadrushsocial.com. A human reads it.

Email: info@leadrushsocial.com

By post:

LeadRush LLC (dba Leadrush Social)

9250 E Costilla Ave #110

Greenwood Village, CO 80112

United States

18. HOW CAN YOU REVIEW, UPDATE, OR DELETE YOUR DATA?

In short: one email does it. This section is the short version of Section 13.

To request access to, correction of, deletion of, or a portable copy of the personal information we hold about you, email info@leadrushsocial.com with the subject line "Privacy Request."

Tell us what you want us to do and give us enough information for us to find your records, typically the email address or phone number you used with us. We will verify your identity as described in Section 13 and respond within the period required by the law that applies to you.