This Privacy Policy explains how Norzer LLC ("Norzer," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit norzer.me or any of its subdomains (the "Site"), contact us, subscribe to our newsletter, use our chat assistant, join our Discord community, or become a client. It also explains the privacy rights available to you and how to use them.
This policy does not cover the websites, profiles, or listings we build or manage for our clients. Each client is responsible for its own privacy practices and its own privacy policy. Our use of cookies, pixels, and similar technologies is explained in detail in our Cookie Policy, which forms part of this Privacy Policy.
Summary
- We collect the information you give us through our forms, email, chat, calls, and Discord, plus information collected automatically when you use the Site.
- We do not sell personal information for money.
- We use advertising tools from Google and Meta to measure our ads and to show our ads to people who have visited the Site or who are already in our records. State privacy laws treat this as "sharing" for cross-context behavioral advertising or as "targeted advertising."
- You can opt out at any time through the Your Privacy Choices link in our footer, through the cookie banner, or by turning on Global Privacy Control in your browser.
- To exercise any privacy right, email hello@norzer.me.
Who We Are
Norzer LLC is a digital marketing company that operates entirely online and serves small businesses across the United States. We are the business (or "controller") responsible for the personal information described in this policy. You can reach us about anything in this policy at hello@norzer.me.
Information We Collect
Information you give us
- Contact form. Your name, email address, message, how you heard about us, and any other details you choose to include.
- Client intake forms. When you complete our Local SEO, Website Design, or PPC intake forms, we collect your name, job title, company name, email address, phone number, website address, business address, and detailed information about your business. This can include your services, competitors, goals, marketing history, advertising spend, budget range, annual revenue range, and target audience.
- Website prelaunch form. Your name, company name, website address, frequently asked questions, testimonials, media mentions, social media profiles, memberships, certifications, and any files you upload.
- Newsletter signup. Your name and email address.
- Survey prompts. Your answer to questions such as where you heard about us.
- Chat assistant. The messages you type into the chat assistant on the Site and any information you include in them.
- Phone calls and messages. Your phone number, call details, and, where you have been notified, a recording of the call. Text messages you send us.
- Discord. Your Discord username and the messages, files, and other content you post in our public community server or in a private client server.
- Account access you provide as a client. Usernames, passwords, and similar access details for accounts we manage for you, such as your Google Business Profile, directory listings, website, or hosting.
- Other communications. Anything you send us by email, including files and attachments.
Information collected automatically
- Device and usage information. IP address, browser type, device type, operating system, pages viewed, links clicked, referring website, and the date and time of your visit.
- Approximate location. Your general location (such as city or region), derived from your IP address. We do not collect precise geolocation.
- Advertising identifiers. Click identifiers added to links in our ads (such as Google and Meta click IDs), cookie identifiers, and conversion events, such as submitting our contact form or calling us after clicking an ad.
- Short link activity. When you click a short link on the Site (for example, links to our social profiles), we record the click, including your IP address, browser, and referring page.
- Security information. Information used to block spam, bots, and attacks, such as IP address, request details, and browser and device signals.
- Email engagement. Whether you open our emails and which links you click, measured with tracking pixels and tracked links.
We collect much of this information with cookies, pixels, tags, and similar technologies. Our Cookie Policy lists them.
Information from other sources
- Advertising and analytics partners. Reports on how our ads and the Site perform, including conversion and call reporting from Google and Meta.
- Public sources. Information about your business that is publicly available, such as your website, Google Business Profile, directory listings, reviews, and social media pages, which we review when assessing or delivering our services.
- Referrals. Contact details shared with us by someone who refers you.
How We Use Information
We use personal information to:
- respond to your questions and requests and follow up on inquiries;
- evaluate whether our services fit your business and prepare proposals;
- deliver, manage, and support the services you purchase from us, including building and managing your website, listings, profiles, content, and advertising;
- send you our newsletter and other marketing communications, which you can stop at any time;
- measure and improve the Site, our content, and our services;
- run, measure, and improve our own advertising, including showing our ads to people who have visited the Site or who are in our records, and excluding existing clients from ads;
- train our team, check quality, and keep records of our communications;
- protect the Site, our clients, and Norzer from spam, fraud, abuse, and security threats;
- comply with our legal obligations and enforce our agreements; and
- carry out any other purpose we describe to you when we collect the information, or that you agree to.
We do not use personal information to make automated decisions that produce legal or similarly significant effects about you.
Advertising and Sharing for Ads
We advertise on platforms operated by Google and Meta (Facebook and Instagram), and we may add other advertising platforms in the future. To run and measure these ads we use the following tools:
- Meta Pixel and Meta Conversions API. These record visits to the Site and actions such as submitting a form, and send that information to Meta from your browser and from our systems. Meta uses it to measure our ads and to show our ads to people who have visited the Site.
- Google Ads tag, conversion tracking, and call tracking. These measure when someone who clicked one of our ads submits a form or calls us. Visitors who arrive from a Google ad may see a Google forwarding phone number so that Google can report the call to us.
- Remarketing audiences. Lists of Site visitors, built by Google and Meta from the tools above, so we can show our ads to people who have already visited.
- Customer list matching. We may upload contact information from our records, such as email addresses and phone numbers, to Google (Customer Match) and Meta (Custom Audiences). The information is hashed (converted into a coded format) before upload. The platforms use it to match people to their accounts so we can show ads to, or exclude ads from, those people, and then discard the unmatched data under their own terms.
- Enhanced conversions. When you submit a form after clicking one of our ads, a hashed version of your email address may be sent to Google or Meta to improve the accuracy of conversion measurement.
Under the California Consumer Privacy Act, disclosing personal information to advertising platforms for these purposes is called "sharing" for cross-context behavioral advertising. Under other state privacy laws it is called "targeted advertising," and some states may treat it as a "sale" even though no money changes hands. We do not receive payment for personal information. You have the right to opt out of this activity, as described in the section titled Your Privacy Choices below.
Google and Meta use the information they receive under their own privacy policies. You can learn more at policies.google.com/privacy and facebook.com/privacy/policy.
Artificial Intelligence Tools
We use artificial intelligence tools, including our own YearZero system and AI services from third-party providers, to plan, research, write, and analyze as part of delivering our marketing services. Information you give us about your business may be processed by these tools for that purpose. People on our team review AI-assisted work before it is used for a client.
We do not enter passwords, private keys, API keys, payment card numbers, or similar access credentials into AI tools. Third-party AI providers process information under their own terms and policies.
Chat Assistant
The chat assistant on the Site is an automated AI system provided by AssistLoop, not a live person. Conversations are recorded and processed by AssistLoop and its AI partners to operate the service. By sending a message, you agree to this. AssistLoop's handling of chat data, including how long it keeps conversations and whether it uses them to improve its services, is governed by AssistLoop's own privacy policy. Copies of conversations that we keep are handled under this policy. Please do not share passwords, payment details, or other sensitive information in the chat.
Phone Calls
We may record phone calls for quality, training, and record-keeping purposes. When a call is recorded, we will tell you at the start of the call. If you do not want to be recorded, tell us and we will stop recording or offer to continue by email.
Discord
Our public Discord community server is open to anyone who joins. Anything you post there can be seen by other members, and we cannot control how other members use it. Clients may also be invited to private Discord servers that we use for project communication and to share resources. Access to private servers is limited to the client and our team. Discord collects and uses information under its own privacy policy, available at discord.com/privacy.
Client Account Credentials
When clients send us usernames, passwords, or similar access details by email or Discord so that we can manage their accounts, we store them in a restricted Google Drive location that is shared only, by invitation, with team members who need access to perform the work. A team member's access is removed when that person no longer works with us. We use these credentials only to deliver the services the client has requested. We recommend that clients change any shared passwords when an engagement ends.
How We Disclose Information
We disclose personal information to the following categories of recipients:
- Service providers and processors that perform services for us under contract, including website hosting and security, bot and spam protection, email and newsletter delivery, file storage and productivity tools, communication platforms, chat assistant services, analytics, AI tools, and review display widgets. These providers may use personal information only to provide services to us.
- Advertising partners, currently Google and Meta, as described in the section titled Advertising and Sharing for Ads.
- Team members and contractors who need the information to perform work for Norzer and who are bound by confidentiality obligations.
- Professional advisors, such as lawyers and accountants, where needed for their advice.
- Legal and safety recipients, such as courts, regulators, and law enforcement, when required by law or when we believe disclosure is needed to protect the rights, property, or safety of Norzer, our clients, or others.
- Business transfers. A buyer or successor if Norzer is involved in a merger, acquisition, financing, or sale of assets, subject to this policy.
- Others at your direction or with your consent.
We do not disclose personal information to third parties for their own direct marketing purposes.
Categories of Personal Information
The table below describes the categories of personal information we have collected in the past 12 months, as defined by California law, who receives each category for a business purpose, and whether each category is shared for cross-context behavioral advertising. The sources and purposes for each category are described above.
| Category | Examples | Disclosed for a business purpose to | Shared for advertising |
|---|---|---|---|
| Identifiers | Name, email address, phone number, IP address, cookie and device identifiers, advertising click IDs, Discord username | Service providers, team members and contractors, professional advisors | Yes, with Google and Meta (including hashed email and phone) |
| Customer records | Name, business address, phone number, and account access details you provide | Service providers, team members and contractors | Name, email, and phone only, hashed, with Google and Meta |
| Commercial information | Services you are interested in or purchase, budget range, advertising spend, business revenue range | Service providers, team members and contractors, professional advisors | Conversion events only (for example, that a form was submitted) |
| Internet or other electronic network activity | Pages viewed, links clicked, referring site, interactions with ads and emails | Service providers (analytics, hosting, security) | Yes, with Google and Meta |
| Approximate geolocation | City or region derived from IP address | Service providers (analytics, security) | Yes, with Google and Meta |
| Audio and electronic information | Call recordings, chat transcripts, Discord messages | Service providers (chat assistant, communication platforms), team members and contractors | No |
| Professional information | Job title, company name, business details | Service providers, team members and contractors | No |
| Inferences | Advertising audience membership created by Google or Meta | Not applicable | Created by advertising partners |
| Sensitive personal information | Account usernames and passwords that clients give us | Team members and contractors only | No |
We do not collect Social Security numbers, government ID numbers, financial account numbers, precise geolocation, biometric information, health information, or information about racial or ethnic origin, religion, union membership, sex life, sexual orientation, citizenship, or immigration status.
Sensitive Personal Information
The only sensitive personal information we collect is account login information that clients give us so that we can manage their accounts. We use it only to perform the services requested and for other purposes permitted by law. We do not use it to infer characteristics about anyone. Because of this, the right to limit the use of sensitive personal information under California law does not apply.
How Long We Keep Information
We keep personal information only as long as needed for the purposes described in this policy, using the periods below. When a period ends, we delete or de-identify the information, unless the law requires us to keep it longer.
| Information | Retention period |
|---|---|
| Leads and inquiries (contact and intake form submissions, related emails, notes, and call recordings) | 3 years from our last contact with you |
| Client records (for clients who purchase marketing services) | For the duration of the services, plus 3 years after the services end |
| Billing and tax records | As long as required by tax and accounting laws |
| Client account credentials | Only as long as needed to perform the services, then deleted from our storage |
| Newsletter subscriptions | Until you unsubscribe. After that, we keep your email address on a suppression list so we do not email you again. |
| Analytics data | Up to 14 months in Google Analytics |
| Advertising audiences and uploaded customer lists | Kept in line with the lead and client periods above, and removed when you opt out. Google and Meta keep data under their own policies. |
| Chat assistant conversations | Held by AssistLoop under its policy. Copies we keep follow the lead and client periods above. |
| Website backups | Up to 90 days |
| Records of privacy requests | At least 24 months, as required by law |
| Posts in our public Discord server | Until you or we delete them, subject to Discord's own retention |
Your Privacy Rights
Residents of California and of other states with comprehensive consumer privacy laws have rights over their personal information. We extend these rights to all United States residents, whatever state you live in. Subject to the exceptions allowed by law, you have the right to:
- Know and access the personal information we have collected about you, including the categories of information, its sources, the purposes for collecting it, and the categories of recipients;
- Obtain a copy of your personal information in a portable, readily usable format;
- Correct inaccurate personal information;
- Delete personal information we have collected from you or about you;
- Opt out of the sale of personal information, sharing for cross-context behavioral advertising, and targeted advertising;
- Opt out of profiling used to make decisions that produce legal or similarly significant effects (we do not carry out this kind of profiling);
- Obtain a list of the specific third parties to which we have disclosed personal information;
- Appeal our decision on your request; and
- Not be discriminated against for exercising any of these rights. We will not deny services, charge different prices, or provide a different level of quality because you exercised your rights.
How to Exercise Your Rights
Email your request to hello@norzer.me with "Privacy Request" in the subject line, or use the request form in the Your Privacy Choices section below. Tell us which right you want to use and the email address or phone number you used with us.
- Verification. To protect your information, we will verify your identity by matching the details in your request with the information we hold, which may include asking you to confirm a code sent to your email address. We will only use the information you provide for verification and to respond to your request. We do not need to verify your identity for opt-out requests.
- Authorized agents. You may use an authorized agent to make a request for you. We may ask the agent for signed permission from you and may ask you to confirm your identity directly with us.
- Timing. We will confirm receipt of your request within 10 business days and respond within 45 days. If we need more time, we will tell you why, and we may extend the response period by up to 45 additional days where the law allows.
- Appeals. If we decline your request, you may appeal by replying to our decision or by emailing hello@norzer.me with "Privacy Appeal" in the subject line. We will respond to your appeal in writing within the period required by your state's law, generally 45 to 60 days. If we deny your appeal, you may contact the Attorney General of your state.
- Cost. Requests are free. We may decline or charge a reasonable fee for requests that are clearly unfounded, excessive, or repeated, where the law allows.
Your Privacy Choices
California law also gives you the right to limit the use of sensitive personal information. The only sensitive personal information we hold is account login details that clients give us, and we use it only for purposes the law permits, so there is nothing further to limit.
You can opt out of the sharing of your personal information for cross-context behavioral advertising, targeted advertising, and any activity that may be considered a sale, in any of these ways:
- Click the Your Privacy Choices link in the footer of any page, which brings you to this section, then turn off Marketing in the cookie controls below. The controls show your current choices.
- Click "Opt out" or "Manage preferences" on the cookie banner, or submit the opt-out request form in this section.
- Turn on Global Privacy Control (GPC) in a browser or extension that supports it. We treat a GPC signal as a valid request to opt out for that browser, without any further action from you, and this section shows that the signal has been honored.
- Email hello@norzer.me with "Do Not Sell or Share" in the subject line. When you opt out by email, we will also exclude your email address and phone number from customer lists we upload to advertising platforms.
Browser-based opt-outs apply to the browser and device you use. If you use another browser or device, or clear your cookies, you will need to opt out again there. You may opt back in at any time.
Additional State Disclosures
California. In the past 12 months we have not sold personal information for money. We have shared the categories of personal information marked "Shared for advertising" in the table above with advertising partners for cross-context behavioral advertising. We have no actual knowledge of selling or sharing the personal information of consumers under 16 years of age. We do not offer financial incentives in exchange for personal information. California residents may also request information about disclosures to third parties for their own direct marketing; we do not make such disclosures.
Nevada. We do not sell covered information as defined by Nevada law. Nevada residents may still send an opt-out request to hello@norzer.me.
Other states. This policy is intended to include all information required in a privacy notice by the comprehensive consumer privacy laws of each state where those laws apply, so no separate state notice is needed.
Children's Privacy
The Site and our services are intended for adults 18 years of age and older. We do not knowingly collect personal information from anyone under 18, and we do not sell or share the personal information of anyone we know to be under 18. If you believe a minor has given us personal information, contact hello@norzer.me and we will delete it.
Security
We use reasonable administrative, technical, and physical safeguards to protect personal information, including encrypted connections on the Site, bot and spam protection, a website firewall, access limited to team members who need it, and removal of access when a team member leaves. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal information, we will notify you as required by law.
Where Information Is Processed
Norzer serves clients in the United States, and most of our service providers store data in the United States. Some members of our team and some contractors work outside the United States and may access personal information from there to perform work for Norzer. We require them to protect personal information as described in this policy.
The Site and our services are not directed to individuals in the European Union, the European Economic Area, or the United Kingdom.
Email and Text Messages
You can unsubscribe from our newsletter and marketing emails at any time with the link at the bottom of each email. We may still send you messages about services you have purchased from us.
If you agree to receive text messages from us, message frequency varies and message and data rates may apply. Reply STOP to opt out or HELP for help. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.
Third-Party Websites and Platforms
The Site links to websites, platforms, and tools operated by others, such as social media networks, review sites, Discord, and our separate tools. Their privacy practices are governed by their own policies, and we are not responsible for them.
Changes to This Policy
We review this policy at least once a year and update it when our practices or the law change. When we make changes, we will post the updated policy on this page and change the "Last Updated" date. If we make a material change to how we use personal information we have already collected, we will notify you by email or with a notice on the Site before the change takes effect, and will ask for your consent where the law requires it.
Contact Us
Norzer LLC
Email: hello@norzer.me
Website: norzer.me
If you have a disability and need this policy in another format, email us and we will provide it.