Data Controller
Cala Marketing LLC (trading as Marketing Clinic) is the data controller for personal data collected through this website. We are registered in the State of Florida, USA, and operate across European and Latin American markets.
Contact for data matters: privacy@marketingclinic.info
Postal address: 2427 Aspinwall St, Sarasota, FL 34237, United States
This policy applies to all personal data we collect through www.marketingclinic.com, including our contact forms, audit request forms and any direct email communication.
Personal Data We Collect
Data you provide directly
- Name and job title
- Business email address and telephone number
- Clinic or practice name and website URL
- Content of messages you send us via our contact or audit request forms
Data collected automatically
- IP address and approximate geolocation (country/city level)
- Browser type, operating system and device type
- Pages visited, time on page, referral source and scroll depth (via Google Analytics 4)
- Ad interaction data (via Meta Pixel, if you arrive via a paid social campaign)
- Cookie identifiers — see our Cookie Policy for full details
Data we do not collect
We do not collect sensitive personal data (health records, financial details, government ID numbers) through this website. Do not include such information in any form submission.
Why We Process Your Data
We rely on the following legal bases under GDPR Article 6:
Legitimate interests (Art. 6(1)(f))
To respond to enquiries submitted through our forms, to analyse website performance and improve user experience, and to measure the effectiveness of our marketing campaigns. Our legitimate interests do not override your rights — you may object at any time.
Consent (Art. 6(1)(a))
For non-essential cookies (analytics and marketing trackers). You may withdraw consent at any time by adjusting your cookie preferences via the banner on our site or by contacting us directly.
Contract performance (Art. 6(1)(b))
If you become a client of Marketing Clinic, we process relevant contact and business data to fulfil our contractual obligations. This processing is governed by a separate data processing agreement.
Specific Uses
- Responding to enquiries and providing the free marketing audit you requested
- Sending follow-up communications related to your enquiry (you may opt out at any time)
- Analysing aggregate website traffic to improve content and user experience
- Running retargeting campaigns on Meta platforms (only if you have consented to marketing cookies)
- Complying with legal obligations (e.g. fraud prevention, tax records for clients)
We do not sell, rent or trade your personal data to any third party for their own marketing purposes.
Who We Share Data With
We share data only with trusted processors who act under our instructions and are bound by data processing agreements:
Google LLC — Analytics & Ads
Google Analytics 4 processes anonymised usage data. We have enabled IP anonymisation. Google may transfer data to the USA under Standard Contractual Clauses. See Google's Privacy Policy.
Meta Platforms Inc. — Advertising
The Meta Pixel tracks ad conversions when you have consented to marketing cookies. Data is transferred to the USA under Standard Contractual Clauses. See Meta's Privacy Policy.
Web3Forms — Form submissions
Our contact forms use Web3Forms to route submissions to our inbox. They process your submission data transiently; no long-term storage occurs on their servers. See Web3Forms Privacy Policy.
Hosting & infrastructure
This website is hosted on servers located within the European Economic Area or under equivalent safeguards. No other third parties have access to personally identifiable data collected through this site.
Transfers Outside the EEA / UK
As a US-registered company operating in European markets, some of your data may be transferred to and processed in the United States. Where this occurs, we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- UK International Data Transfer Agreements (IDTAs) for UK data subjects
- Adequacy decisions where applicable
You may request a copy of the relevant transfer safeguards by contacting privacy@marketingclinic.info.
How Long We Keep Your Data
- Enquiry / form data: up to 24 months from last contact, or until you request deletion
- Analytics data: 14 months (Google Analytics default, configured in our GA4 property)
- Cookie consent records: 12 months
- Client records: 7 years from contract end (legal / tax obligation)
When retention periods expire, data is securely deleted or anonymised.
Your Data Protection Rights
Under GDPR and UK GDPR you have the following rights. To exercise any of them, email privacy@marketingclinic.info. We will respond within 30 days.
You also have the right to withdraw consent for cookie-based processing at any time, without affecting the lawfulness of processing before withdrawal.
Right to complain
If you believe we have not handled your data lawfully, you have the right to lodge a complaint with your supervisory authority. In the EU this is typically the data protection authority in your country of residence. In the UK, it is the Information Commissioner's Office (ICO).
How We Protect Your Data
We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration or disclosure. These include HTTPS encryption across the entire website, access controls limiting who can view enquiry data, and regular security reviews of our third-party processors.
No method of internet transmission is 100% secure. If you suspect a data breach involving your information, please contact us immediately at privacy@marketingclinic.info.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page indicates when the policy was last revised. Material changes will be notified via a prominent notice on our homepage for at least 30 days.
Continued use of our website after an update constitutes acceptance of the revised policy.