Privacy Policy

Toolbox Marketing Co. ("we," "us," "our") is a DBA of Northern Wave Marketing, LLC, a Florida limited liability company located in Riverview, Florida. This Privacy Policy describes how we collect, use, and share information when you visit toolboxmarketingco.com or purchase our services. By using our site or services, you agree to the practices described here.

1. Information we collect

Information you give us directly:

• Contact details: name, business name, phone number, email address, mailing/business address, city/state.
• Order information: trade type, services offered, brand color preferences, services list, location.
• Files you upload: business logos, photos, or other materials submitted through our intake form or via email.
• Payment information: handled by Stripe (we never see, store, or have access to your card numbers — see Section 4).
• Support communications: messages, emails, or phone conversations with our team.

Information collected automatically:

• Standard server logs: IP address, browser type, pages viewed, timestamps. We use this to keep the site running and detect abuse — we do not sell or share this data.
• Cookies and similar technologies: minimal use, primarily for keeping the site running. We do not use third-party advertising trackers on our marketing site.

2. How we use your information

We use your information to:

• Build, host, maintain, and update the website you've subscribed to.
• Process payments and manage your subscription (via Stripe).
• Communicate with you about your account, your site, billing, and support requests.
• Respond to inquiries from prospective customers.
• Send occasional service updates (e.g., scheduled maintenance, important account notices).
• Comply with legal obligations and protect against fraud or abuse.

3. We do not sell your personal information

4. Service providers we use

To run our business, we share necessary information with a small number of service providers, each of whom is contractually obligated to protect your data:

• Stripe (payment processing) — handles all credit card transactions. We never see your card number. Stripe's privacy policy.
• Render (web hosting) — hosts our application and stores order data on its infrastructure.
• Microsoft 365 (email) — handles our email correspondence with you.
• Cloudflare or similar CDN (when applicable) — serves your website's static files quickly to visitors.

5. Your subscriber site visitors

If you are a subscriber, the website we build for you may collect information from your visitors (e.g., contact form submissions). That information is forwarded to you. We do not use your customers' data for any purpose other than delivering it to you. As a subscriber, you are responsible for handling that data in accordance with applicable privacy laws and providing your own privacy notice on your site if required.

6. Data retention

We retain your information for as long as your subscription is active and for a reasonable period afterward to comply with tax, accounting, and legal requirements. Stripe retains payment records for the periods required by law (typically 7 years for U.S. financial records). You can request deletion of non-required information at any time (see Section 8).

7. Security

We use industry-standard practices to protect your information, including HTTPS encryption for all site traffic, password-protected admin areas, and reputable service providers. No system is 100% secure, but we take reasonable steps to safeguard your data. If we ever experience a data breach affecting your information, we will notify you in accordance with applicable law.

8. Your rights

You have the right to:

• Request a copy of the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of information we are not legally required to retain.
• Opt out of non-essential communications (account-related communications cannot be opted out of while you have an active subscription).

To exercise any of these rights, email us at hello@toolboxmarketingco.com. We respond within 30 days.

9. Children

Our services are intended for businesses and adults. We do not knowingly collect personal information from anyone under 18.

10. California, Virginia, and other state residents

If you are a resident of California, Virginia, Colorado, Connecticut, or another state with comprehensive privacy laws, you may have additional rights under those laws (such as the right to know, the right to delete, and the right to opt out of "sale" or "sharing" of personal information). As stated above, we do not sell or share personal information for cross-context behavioral advertising. To exercise any state-specific rights, contact us at the email below.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be communicated to active subscribers by email.

12. Contact us