Privacyand cookies.
This policy is intentionally detailed. It covers every major touchpoint on the LightningRevenue site, including contact forms, popup flows, newsletter signup, first-party analytics, lead attribution, cookies, consent choices, retention, security, and privacy rights.
This page is written to be transparent and operationally protective. It is not a substitute for formal legal advice, and LightningRevenue may update it as systems, vendors, laws, security practices, or business workflows evolve.
Who this policy applies to.
This Privacy Policy applies to visitors, prospects, newsletter subscribers, and people who submit inquiries through LightningRevenue digital properties. It also applies to data collected through our first-party analytics system when optional analytics consent is granted.
LightningRevenue does not use this policy to grant unrestricted rights to collect data. We collect the data needed to operate the site, respond to inquiries, measure performance, improve acquisition quality, and protect our systems.
By using the site, submitting a form, consenting to optional cookies, signing up for the newsletter, or contacting LightningRevenue, you acknowledge that data may be processed according to this policy. If you do not agree with this policy, you should avoid submitting personal data and should adjust cookie choices through the consent controls.
This policy is intended to describe public website processing. Additional contracts, statements of work, data processing agreements, confidentiality agreements, security exhibits, or client-specific terms may apply if you become a client or vendor. If there is a direct conflict between this policy and a signed written agreement with LightningRevenue, the signed agreement controls for that specific engagement.
No unrestricted submission of sensitive data+
Unless separately agreed in a written contract, LightningRevenue does not ask you to submit sensitive personal information through public site forms. This includes protected health information, medical records, precise financial account data, social security numbers, government identifiers, credentials, biometric data, children's data, union membership, political opinions, criminal records, or other highly sensitive information. If you choose to submit such information anyway, you do so at your own risk and you instruct LightningRevenue to process it only as reasonably necessary to receive, review, delete, respond to, secure, or document the submission.
Business inquiry context+
The site is designed primarily for business-to-business inquiries. If you contact us on behalf of an organization, you represent that you are authorized to make the inquiry and that the submitted information is relevant to a legitimate commercial, operational, recruitment, vendor, or partnership purpose.
Reasonable security, not absolute security+
No website, database, network, transmission method, authentication flow, or operational process can be guaranteed to be completely secure. LightningRevenue uses practical safeguards appropriate to the site and the categories of data processed, but we do not warrant that unauthorized access, disclosure, alteration, loss, interruption, or misuse can never occur.
Accuracy and inference limitations+
Analytics, attribution, scoring, campaign source detection, referrer capture, and conversion analysis may rely on technical signals that are incomplete or imprecise. LightningRevenue may use such signals for operational and strategic decisions, but does not represent that analytics records are exhaustive, legally determinative, or suitable as the sole evidence of user intent.
Abusive or unlawful requests+
We may refuse, limit, delay, or charge for requests that are manifestly unfounded, excessive, repetitive, fraudulent, technically infeasible, legally prohibited, harmful to others, or impossible to verify. We may also retain limited records needed to demonstrate that a request was handled or denied appropriately.
What data we collect.
Identity and contact data+
Name, work email, company name, website, and any contact details you provide when using forms, project inquiries, newsletter signup, or the How Can We Help flow.
You are responsible for making sure any contact information you submit is accurate, current, and submitted with authority to represent the relevant company. If you submit information about another person or organization, you confirm that you have a legitimate basis to do so and that the submission does not violate confidentiality, employment, platform, or contractual obligations.
Project and commercial context+
Service interest, budget range, timeline, selected engagement model, selected pain points, selected outcomes, technology stack, campaign needs, CRM context, and free-text messages.
Project information is treated as business context for evaluation, scoping, qualification, prioritization, and response. You should not submit regulated health data, payment card data, government identifiers, passwords, confidential client records, trade secrets, or any information you are not authorized to disclose unless LightningRevenue has separately agreed in writing to receive and process that type of information.
Technical request data+
IP address, user agent, browser information, timestamps, request source, and security metadata generated when your browser communicates with our site.
Technical data may be processed automatically as part of ordinary internet communications. We may use this data to detect abuse, troubleshoot outages, prevent fraud, reduce spam, investigate suspicious activity, maintain logs, support auditability, and preserve the integrity of our site and infrastructure.
First-party analytics data+
Visitor ID, session ID, landing page, page views, referrer, UTM parameters, event timestamps, and attribution links between tracked sessions and submitted leads.
Analytics data is used for aggregate business intelligence, campaign performance, conversion quality, product decisions, and operational review. Analytics data should not be interpreted as a perfect or complete behavioral record. Browser settings, consent choices, blockers, network issues, and device changes can affect completeness and accuracy.
Consent preference data+
Your cookie choices, consent version, consent timestamp, and the categories you approved or rejected.
Consent records help us respect and evidence your choices. If you clear browser storage, use another device, change browser profiles, or block storage mechanisms, the site may ask for consent again because it may not be able to read your previous preference.
We may combine data from multiple site touchpoints where reasonably necessary to understand a single business relationship. For example, a newsletter signup, a later contact form, a consented analytics session, and a service request may be reviewed together so LightningRevenue can respond more intelligently, avoid duplicate outreach, and maintain pipeline context.
We do not intentionally collect more data than needed for the stated purpose. However, free-text fields can contain information that users voluntarily submit. If you include unnecessary, confidential, sensitive, or third-party information in a free-text field, LightningRevenue may receive it despite not requesting it.
How forms and lead flows work.
When you submit a form, we store the information you provide so we can respond, qualify the request, understand which service or engagement model is relevant, and maintain a record of inbound demand.
Submitting a form does not create a client relationship, agency relationship, fiduciary duty, exclusivity obligation, confidentiality obligation, or obligation for LightningRevenue to accept your project unless a separate written agreement is signed. LightningRevenue may decline, ignore, archive, delete, or deprioritize submissions that are incomplete, irrelevant, abusive, fraudulent, outside our service scope, or inconsistent with our business requirements.
Lead records may be reviewed by internal operators, strategists, designers, engineers, sales personnel, or authorized service providers who need the information to evaluate the request. We may also use aggregated form data to understand demand patterns, common objections, service fit, pricing expectations, and operational load.
How Can We Help popup+
Captures name, email, company, selected pain points, selected outcomes, selected services, IP address, user agent, and the submission timestamp.
We may use this record to identify duplicate submissions, route the inquiry internally, evaluate whether the request is commercially viable, prepare follow-up questions, and maintain evidence of what was submitted and when.
Engagement model selections+
Captures Foundation, Momentum, Apex, or Custom Package interest and the fields submitted through that engagement flow.
We may use this record to identify duplicate submissions, route the inquiry internally, evaluate whether the request is commercially viable, prepare follow-up questions, and maintain evidence of what was submitted and when.
Service request forms+
Captures service-specific data for PPC, SEO, web development, software development, UI/UX, SMM, sales setup, and lead generation forms.
We may use this record to identify duplicate submissions, route the inquiry internally, evaluate whether the request is commercially viable, prepare follow-up questions, and maintain evidence of what was submitted and when.
Contact page+
Captures your name, email, company, requested service, budget range, timeline, and message.
We may use this record to identify duplicate submissions, route the inquiry internally, evaluate whether the request is commercially viable, prepare follow-up questions, and maintain evidence of what was submitted and when.
Newsletter form+
Captures the email address submitted to The Insight newsletter and stores it in the newsletter approved database table.
We may use this record to identify duplicate submissions, route the inquiry internally, evaluate whether the request is commercially viable, prepare follow-up questions, and maintain evidence of what was submitted and when.
First-party analytics and lead attribution.
LightningRevenue uses in-house first-party analytics instead of relying only on third-party analytics platforms. If analytics consent is approved, the site can create a visitor ID and session ID, record page views, store landing page and referrer data, and connect a later form submission to that session.
The purpose of this system is to understand how people move through the site, which pages produce serious inquiries, which campaigns create qualified leads, and where the user experience needs improvement. This data helps LightningRevenue reduce low-quality spend, improve website content, refine service positioning, and make business decisions without depending entirely on third-party analytics platforms.
Analytics records are not used to make legally significant automated decisions about you. They may influence operational decisions such as which content to improve, which campaign to pause, which service page to prioritize, or which source appears to produce better-fit inquiries.
What a tracked session can include+
A tracked session can include session ID, visitor ID, landing page, referrer, UTM source, UTM medium, UTM campaign, UTM content, UTM term, page path, event name, timestamp, IP address, and user agent.
What lead attribution means+
Lead attribution connects a submitted lead to the consented analytics session that preceded it. This helps us understand which pages, campaigns, referrers, and messages generated legitimate inquiries.
What happens if analytics is rejected+
If analytics consent is rejected, optional analytics cookies should not be set and first-party analytics events should not be sent by the browser. Necessary cookies may still be used to operate the site.
Some server-side technical logs may still exist for security, debugging, rate limiting, uptime, or abuse prevention. Rejecting analytics cookies does not prevent all technical processing that is necessary for the site to load or for LightningRevenue to protect its systems.
Attribution is probabilistic+
Attribution can be affected by consent changes, private browsing, ad blockers, browser restrictions, cleared cookies, shared devices, VPNs, network changes, redirects, email clients, and UTM mistakes. LightningRevenue may rely on attribution for internal judgment, but does not guarantee that attribution is complete, exact, or legally conclusive.
Why we process data.
The legal basis for processing depends on the data category, the user interaction, the applicable jurisdiction, and the operational purpose. A single interaction may involve more than one basis. For example, a contact form may involve pre-contractual steps, legitimate interests, security logging, and consent-based attribution if analytics was approved.
Consent+
We rely on consent for optional analytics, marketing cookies, preference cookies, and newsletter subscription where applicable.
You may withdraw optional consent without affecting processing that occurred before withdrawal or processing that LightningRevenue must continue for necessary, legal, security, contractual, or legitimate operational reasons.
Legitimate interests+
We may process inquiry, analytics, and security data to operate the site, respond to prospects, prevent abuse, improve conversion quality, and understand business performance.
These interests include protecting infrastructure, reducing spam, preserving business records, measuring service demand, improving funnels, understanding campaign quality, and avoiding repeated or irrelevant outreach.
Contract or pre-contract steps+
When you contact us about a project, we process your submitted information to evaluate the request and prepare a response, proposal, or discovery conversation.
This does not mean LightningRevenue has agreed to work with you, reserved capacity, accepted confidentiality obligations, or committed to pricing, delivery, timelines, or scope before a written agreement is signed.
Legal obligations+
We may process or retain limited information where required for compliance, accounting, dispute handling, or lawful requests.
Where deletion conflicts with legal, tax, audit, fraud prevention, security, dispute, or evidence-preservation obligations, LightningRevenue may retain the minimum information reasonably necessary for that purpose.
How long data is kept.
Lead and inquiry data+
Kept for as long as needed to respond, manage pipeline context, maintain business records, and evaluate whether LightningRevenue can support the request.
We may retain declined, inactive, or duplicate inquiries to avoid repeated qualification work, document prior interactions, prevent abuse, and maintain continuity if you contact us again.
Newsletter data+
Kept until you unsubscribe, request deletion, or we determine the list record is no longer needed.
We may keep limited suppression or unsubscribe records where necessary to avoid sending future communications to an address that opted out.
Analytics data+
Kept for business performance review, attribution analysis, security review, and trend analysis, subject to operational cleanup and deletion requests where applicable.
Analytics may be aggregated, transformed, summarized, or separated from direct identifiers over time. Aggregated or de-identified business intelligence may be retained longer because it no longer reasonably identifies a specific person.
Admin session data+
Kept for authentication, security, and session management. Expired sessions may be removed through maintenance processes.
Admin records may be retained for audit, security review, unauthorized access investigation, and internal accountability.
Backups and residual copies+
Data deleted from active systems may remain for a limited time in backups, logs, caches, archives, or disaster recovery systems until those systems rotate or are overwritten. We may not be able to selectively remove every residual copy immediately if doing so would compromise integrity, security, or continuity.
How we protect data.
We use practical security controls for the size and nature of the site, including restricted admin access, hashed admin passwords, server-side session validation, HTTPS-oriented cookie settings, database access controls, and separation between public site behavior and admin functionality.
Security is a shared responsibility. You should avoid submitting unnecessary sensitive data, should not send passwords or secrets through contact forms, should use secure networks, and should notify us if you believe a submission was made in error or if you identify a security concern.
LightningRevenue may suspend access, disable admin sessions, rotate credentials, block traffic, preserve logs, or change functionality without notice if we believe doing so is necessary to protect users, infrastructure, business records, or system integrity.
HIPAA Aligned+
Where health-related workflows are relevant, our design direction is to minimize unnecessary data collection, restrict access, and avoid casual exposure of sensitive operational records.
HIPAA Aligned does not mean this public website is intended for unrestricted submission of protected health information, nor does it create a Business Associate Agreement. Any HIPAA-governed engagement must be handled through separate written terms where required.
GDPR Aligned+
The site supports consent choices, optional analytics controls, data minimization principles, access/deletion requests, and privacy-first first-party tracking behavior.
GDPR Aligned means the site is designed around privacy principles such as transparency, data minimization, purpose limitation, consent controls, and rights handling. It does not waive LightningRevenue's right to rely on legitimate interests, legal obligations, contractual necessity, security needs, or statutory exemptions where available.
ISO 27001 Aligned+
Our operating direction follows structured access control, least privilege, security review, incident awareness, and documented handling of business-critical data.
ISO 27001 Aligned describes the direction of our internal security posture and control thinking. It is not a representation that every LightningRevenue system, vendor, workflow, or engagement is certified unless a current certification is separately published or contractually provided.
Your privacy rights.
Depending on your location, you may have rights over your personal data. We will respond to valid requests according to applicable law and may need to verify your identity before acting on a request.
Rights are not absolute. We may deny or limit a request where permitted by law, including where the request conflicts with another person's rights, business confidentiality, security, legal privilege, fraud prevention, recordkeeping duties, dispute preservation, tax obligations, or technical feasibility.
If you submit a request, provide enough information for us to identify the relevant records. We may ask for additional verification, especially if the request involves deletion, export, sensitive information, or a record connected to a business or organization.
- Access the personal data we hold about you.
- Ask us to correct inaccurate or incomplete personal data.
- Ask us to delete personal data where retention is no longer required.
- Object to or restrict certain processing activities.
- Withdraw optional cookie consent at any time.
- Request a portable copy of data where applicable.
- Complain to a data protection authority if you believe your rights were not respected.
International data handling.
LightningRevenue may operate with infrastructure, vendors, and team workflows that cross national borders. Where data is transferred internationally, we aim to use practical safeguards appropriate to the provider, jurisdiction, and processing purpose.
International data handling may occur when cloud infrastructure, databases, monitoring, email routing, professional advisors, remote teams, or operational systems are located outside your region. The laws of those locations may differ from the laws where you live.
EU, UK, and international visitors+
If you access LightningRevenue from the EU, UK, or another region with privacy transfer rules, your data may be processed in countries with different privacy laws. We aim to limit transfers to legitimate operational needs.
Where required and commercially reasonable, LightningRevenue may rely on contractual safeguards, adequacy decisions, standard contractual clauses, vendor commitments, technical safeguards, or other lawful transfer mechanisms.
Regional law differences+
Privacy rights and obligations differ by jurisdiction. This policy is designed to provide broad transparency, but it may not list every right, exemption, procedure, deadline, or regulator-specific requirement in every location. We will handle applicable requests based on the facts, the requester's location, the data involved, and the laws that apply.
Questions, deletion, and consent changes.
For privacy requests, deletion requests, access requests, or questions about cookies and tracking, contact us at antonio@lightning-revenue.com.
Include your name, email address, the nature of the request, the relevant form or interaction, and any information that helps us locate the record. Do not send passwords, private keys, payment card numbers, medical files, or unrelated sensitive documents when making a privacy request.
We may keep a limited record of privacy communications to show how we handled the request, defend our decisions, comply with legal obligations, and prevent repeat abusive requests.