Privacy Policy
Effective date: October 28, 2025
1) Who We Are & Scope
Wolfest Excellency (“Wolfest”, “we”, “our”, “us”) provides automation-first marketing systems for restoration companies (water, fire, mold, flood). This Privacy Policy describes how we collect, use, disclose, and protect information in connection with wolfestexcellency.com, our services, and related communications.
This Policy applies to visitors, prospects, and customers. By using our site/services, you agree to the practices described here.
2) Categories of Information We Collect
A. Information you provide
- Contact: name, email, phone, company, role.
- Business: industry, service areas, website/URLs, ad accounts, CRM identifiers.
- Communications: form submissions, emails, chat transcripts, meeting notes.
- Billing (clients): invoicing details and transaction metadata (processed by payment providers).
B. Information collected automatically
- Usage/Device: IP address, device type, browser, OS, pages viewed, referring URLs, timestamps.
- Cookies & Pixels: analytics (e.g., GA4), advertising/retargeting, performance, and security cookies.
C. Information from third parties
- Lead sources, ad platforms, CRM/call-tracking systems (e.g., UTM parameters, call logs/recordings where enabled).
- Public sources and data partners used for business lead enrichment.
Sensitive data: we do not intentionally collect sensitive personal data. Please do not submit it.
3) Purposes of Use
- Provide, operate, and improve our website and services.
- Analyze performance, attribution, and outcomes (e.g., leads → bookings → revenue).
- Respond to inquiries, schedule demos/audits, and provide support.
- Send service updates, insights, and marketing you choose to receive (you may opt out anytime).
- Detect, prevent, and respond to fraud, abuse, security incidents, and legal requests.
4) Lawful Bases (GDPR/UK-GDPR)
Where GDPR/UK-GDPR applies, our processing bases include: contract performance, legitimate interests (e.g., site security, product improvement, B2B marketing relevance), consent (e.g., certain cookies/marketing), and legal obligations.
5) Cookies, Pixels & Analytics
We use cookies and similar tech to operate the site, measure usage, and improve conversions. You can manage cookies via your browser or any consent banner we provide. Disabling certain cookies may affect functionality.
- Essential: security, load balancing, consent storage.
- Analytics: GA4 via Google Tag Manager (aggregated traffic & conversions).
- Advertising/Retargeting: ad platform pixels to reach interested visitors again.
- Performance: speed and UX enhancements.
“Do Not Track” signals: we currently do not respond to DNT signals.
6) Call Tracking & Recordings (Clients)
Where enabled, call-tracking numbers, recordings, transcripts, and related metadata may be processed to attribute leads and improve quality/training. Access is restricted to authorized users. You are responsible for complying with any call-recording/telemarketing consent laws that apply to your business (e.g., one-party vs two-party consent).
7) Email & SMS Communications
- Email: we may send service, transactional, or marketing emails. You can unsubscribe from marketing via the link in the email.
- SMS: if used, we obtain your consent where required. Message and data rates may apply. Reply STOP to opt out; HELP for help.
8) Sharing & Disclosures
- Service providers / processors: hosting, security, analytics, CRM, call-tracking, email/SMS, payment, and automation platforms working on our behalf under data-protection terms.
- Advertising/retargeting partners: to measure and reach relevant B2B audiences (no sale of consumer profiles).
- Business transfers: merger, acquisition, financing, or sale of assets (we will take steps to protect your information).
- Legal: to comply with law, enforce terms, or protect rights, safety, and security.
9) International Data Transfers
Data may be processed in countries outside your own. Where required, we use safeguards such as Standard Contractual Clauses and comparable mechanisms.
10) Data Retention
- Website analytics: typically 14–26 months (aggregated thereafter).
- Leads, forms, emails: until your request is resolved or for as long as you maintain an account/relationship, then archived or deleted per policy.
- Call logs/recordings (if enabled): usually 3–24 months depending on configuration and legal requirements.
- Backups and logs: per security/operational schedules.
11) Security
We implement technical and organizational measures including SSL/TLS encryption, access controls, least-privilege, monitoring, and backups. No method is 100% secure; residual risk remains.
12) Your Privacy Choices & Rights
A. Global
- Access, correct, or delete your information.
- Object to or restrict processing in some cases.
- Withdraw consent where processing relies on consent.
To make a request, email [email protected]. We may need to verify your identity.
B. EEA/UK (GDPR/UK-GDPR)
- Right of access, rectification, erasure, portability, restriction, and objection.
- Right to withdraw consent without affecting prior lawful processing.
- Right to lodge a complaint with your local data protection authority.
C. California (CCPA/CPRA)
- Right to know, access, correct, and delete personal information.
- Right to opt out of “sale” or “sharing” for cross-context behavioral advertising.
- Right to limit use of sensitive personal information (we don’t seek to collect this).
- Right to non-discrimination for exercising your rights.
To exercise California rights, email [email protected] with “CCPA Request” in the subject.
D. Canada (PIPEDA/CASL)
You have rights to access and correct personal information and to withdraw consent to marketing at any time.
E. Nevada
Nevada residents may opt out of the sale of personal information by contacting [email protected]. We do not currently sell personal information as defined by Nevada law.
F. India (DPDP Act 2023)
Where the DPDP Act applies, you may access, correct, and erase personal data and withdraw consent for processing. Contact us at [email protected].
13) Children’s Privacy
Our services target business professionals and are not intended for individuals under 16. We do not knowingly collect data from children.
14) Third-Party Links & Services
Our site may link to third-party websites or embed third-party services (e.g., Google Calendar). Their privacy practices are governed by their own policies. Please review them before using those services.
15) Sub-Processors (Illustrative)
Depending on your configuration, we may use some of the following providers as processors: managed WordPress hosting/CDN, Cloudflare, Google (GA4, Tag Manager, Ads), Meta, LinkedIn, HubSpot/HighLevel/Pipedrive (CRM), CallRail/WhatConverts (call tracking), email/SMS platforms, payment processors, and workflow automation (e.g., n8n). The exact list varies by client stack and can be provided upon request.
16) Changes to This Policy
We may update this Policy from time to time. The “Effective date” above indicates the latest revision. Material changes will be highlighted on this page or communicated when appropriate.
17) Contact Us
Questions or requests? Email [email protected].
Tip: If you use a consent banner/CMP, map cookies to categories (Essential/Analytics/Advertising/Performance) and provide toggles. For clients, ensure call-recording and SMS consent practices align with applicable laws.