Privacy Policy

Cavallo Agency LLC (“Cavallo Agency,” “we,” “us,” or “our”) is a web design and digital marketing agency based in Ambler, Pennsylvania, serving engineering, environmental, construction, home builder, and manufacturing firms. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit cavalloagency.com (the “Website”), contact us, or request a proposal.

By using the Website, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Website.

1. Information We Collect

Information You Provide to Us

We collect information you choose to give us, including when you:

• Submit a contact or project inquiry form, such as your name, email address, phone number, company name, website URL, and details about your project, budget, timeline, or how we can help.
• Start our project inquiry form without finishing it. Our multi-step project inquiry form saves your answers as you move through it, even if you never press submit. See Section 2 for details.
• Schedule a meeting or call us, such as your name, contact details, and any information you share during the conversation.
• Email or otherwise correspond with us, including the content of your messages and any files you send.
• Become a client, such as billing contacts, account credentials or access you grant us, and business information needed to deliver our services.

Please do not submit sensitive personal information (such as Social Security numbers, financial account numbers, or health information) through our forms.

Information Collected Automatically

When you visit the Website, we and our service providers automatically collect certain information about your device and usage, including:

• IP address and approximate location (city or region) derived from it
• Browser type, device type, operating system, and screen resolution
• Pages viewed, time spent on pages, links clicked, and navigation paths
• Referring website, search terms, and campaign information (such as UTM parameters)
• Date and time of your visit

This information is collected using cookies, browser storage, and similar technologies described in Section 5 and in our Cookie Policy.

Information From Security Tools

To protect the Website and our forms from spam, bots, and malicious activity, we use Cloudflare’s security services, including Cloudflare Turnstile. These services may process your IP address, browser characteristics, and interaction signals to tell people apart from automated traffic.

2. How Our Forms Work

We want you to know exactly what happens to the information you type into our forms.

• Submitted forms. When you submit a contact or project inquiry form, your answers are stored in a database hosted by Cloudflare (Cloudflare D1) and a notification containing your submission is emailed to our team through our email delivery provider, Resend. We use this information to respond to you and to prepare any proposal you request.
• Partially completed forms. Our project inquiry form saves your progress on our servers as you complete each step, before you submit it. This means that if you enter information (for example, your name, email address, company, or project details) and then leave the form without finishing, the information you entered up to that point is stored. We do this so you can return and pick up where you left off, and so our team can follow up with you about your inquiry. If you would prefer that we delete a partially completed form, or that we not contact you about it, email us at hello@cavalloagency.com.
• Campaign attribution. When you arrive on the Website from a link that contains campaign parameters (such as utm_source or utm_campaign), we keep those parameters in your browser’s session storage for the length of your visit. If you submit a form, those parameters, along with the page you submitted from, are included with your submission so we can understand which of our marketing efforts led you to us. Session storage is cleared when you close the browser tab.
• Spam protection. Our forms use Cloudflare Turnstile and other automated checks to block spam and abuse.

3. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries, consultation requests, and proposal requests
• Follow up on project inquiries, including inquiries you started but did not submit
• Provide, manage, and improve our web design and development, marketing strategy, and growth marketing services (including SEO, paid search, LinkedIn, and email marketing)
• Communicate with you about projects, invoices, and service updates
• Send you marketing communications you have requested or that we are otherwise permitted to send (you can opt out at any time)
• Analyze how visitors use the Website so we can improve its content, design, and performance
• Measure the effectiveness of our own marketing and advertising campaigns
• Detect, prevent, and respond to spam, fraud, security incidents, and other harmful activity
• Comply with legal obligations and enforce our Terms of Use

4. How We Share Your Information

We do not sell your personal information. We share personal information only as described below:

• Service providers. We work with trusted third parties who help us operate our business and the Website. These include Cloudflare (website hosting, content delivery, security, spam protection, and form database storage), Resend (email delivery of form notifications), and Google (Google Tag Manager and Google Analytics), as well as tools we use for email, internal team communication, workflow automation, and customer relationship management. These providers may access personal information only to perform services on our behalf.
• Legal requirements. We may disclose information if required by law, subpoena, or court order, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers. If Cavallo Agency is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction.
• With your consent. We may share information for any other purpose with your consent.

5. Cookies and Tracking Technologies

Cookies are small text files stored on your device. We and our partners use cookies and similar technologies for the following purposes:

• Essential and security cookies. Required for the Website to function and remain secure, including bot and spam protection on our forms provided by Cloudflare.
• Analytics cookies. We use Google Analytics 4, deployed through Google Tag Manager, to understand how visitors find and use the Website. Google Analytics collects information such as pages visited and time on site. You can learn more at How Google uses information from sites or apps that use its services and opt out using the Google Analytics Opt-out Browser Add-on.
• Advertising and marketing tags. The Website does not set advertising cookies directly. However, Google Tag Manager may load measurement or conversion tags from advertising platforms (such as Google, Microsoft, or LinkedIn) to help us measure our own campaigns. You can manage ad preferences at Google My Ad Center and Microsoft Ad Settings.

We also use your browser’s session storage to remember campaign (UTM) parameters during your visit, as described in Section 2.

Most browsers let you block or delete cookies through their settings. If you block cookies, some parts of the Website may not work as intended. Some browsers offer a “Do Not Track” signal; because there is no common industry standard for responding to these signals, the Website does not currently respond to them. Where required by applicable law, we will honor recognized opt-out preference signals such as Global Privacy Control. For a full list of cookies and how to control them, see our Cookie Policy.

6. Client Data We Process on Your Behalf

When we build, maintain, or market websites for our clients, we may have access to data those websites collect from their own visitors and customers. We process that data only on our clients’ instructions and in accordance with our client agreements. If you are a visitor to one of our clients’ websites, please refer to that client’s privacy policy and contact them directly with any privacy requests.

7. Data Retention

We keep personal information only for as long as needed to fulfill the purposes described in this Privacy Policy, including to respond to your inquiry, deliver our services, maintain business and tax records, resolve disputes, and enforce our agreements. Partially completed project inquiry forms are kept only as long as reasonably needed to let you resume the form and for us to follow up on your inquiry. When information is no longer needed, we delete or anonymize it.

8. Data Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encrypted (HTTPS) connections, Cloudflare’s network security and bot protection, access controls on our form database, and spam prevention on our forms. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9. Your Choices and Rights

• Marketing emails. You can unsubscribe from our marketing emails at any time by clicking the “unsubscribe” link in any message or by contacting us.
• Access, correction, and deletion. You may request access to, correction of, or deletion of the personal information we hold about you, including any partially completed form.
• Cookies and analytics. You can control cookies through your browser settings and the opt-out tools listed in Section 5 and in our Cookie Policy.

Depending on where you live, you may have additional rights under applicable privacy laws, such as the California Consumer Privacy Act (as amended by the California Privacy Rights Act) and similar laws in other U.S. states. These may include the right to know what personal information we have collected, to obtain a copy of it, to correct or delete it, and to opt out of targeted advertising or the “sale” or “sharing” of personal information. We do not sell personal information. To exercise any of these rights, contact us using the information in Section 14. We may need to verify your identity before responding, and we will not discriminate against you for exercising your rights.

10. Children’s Privacy

The Website and our services are intended for businesses and are not directed to children under 13 (or under 16 where applicable law sets a higher age). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Third-Party Websites

The Website may link to third-party websites, including client websites featured in our portfolio and social media platforms. We are not responsible for the privacy practices or content of those sites, and we encourage you to review their privacy policies.

12. Visitors Outside the United States

Cavallo Agency is based in the United States. The Website is delivered through Cloudflare’s global network, and form submissions are stored and processed in the United States or other locations where our service providers operate. If you access the Website from outside the U.S., your information may be transferred to, stored, and processed in countries whose data protection laws may differ from those in your country.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be posted on this page, and your continued use of the Website after changes are posted means you accept the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or would like to exercise your privacy rights, please contact us:

Cavallo Agency LLC
300 Brookside Ave, Building 4, Suite 125
Ambler, PA 19002
Phone: (215) 669-4619
Email: hello@cavalloagency.com