Privacy policy

This Privacy Policy explains how RPM National ("RPM National," "we," "us") collects, uses, discloses and protects personal information when you visit rpmnational.com, talk to our website assistant, request an audit or growth plan, or otherwise interact with us. It also describes the rights you have, including specific rights for California residents.

This policy covers information about website visitors and prospective clients. When we handle data on behalf of our clients (for example, running their ad campaigns), we act as their service provider and follow their instructions and our contract with them. Healthcare clients should also see our HIPAA compliance statement.

We collect the following categories of personal information:

• Identifiers and contact details — name, email address, phone number, business name and website you give us in forms or the chat assistant.
• Commercial information — the services you are interested in, your budget range and details about your business goals.
• Communications — messages you send through forms, email, phone or our website assistant.
• Internet and device activity — IP address, browser type, pages viewed, referring URL and similar data collected automatically through server logs, cookies and analytics tools.
• Approximate location — city or region inferred from your IP address. We do not collect precise geolocation.
• Inferences — conclusions drawn from the above, such as which services may fit your business.

We do not intentionally collect sensitive personal information (such as Social Security numbers, financial account numbers or health information) through this website. Please do not submit health or medical information through our forms or chat.

• Directly from you, when you fill out a form, use the chat assistant, call or email us.
• Automatically from your browser or device when you use our site.
• From service providers such as our form, hosting and analytics vendors.
• From publicly available sources, such as your business website or Google Business Profile, when you ask us to audit them.

• To respond to your inquiry, prepare audits, proposals and growth plans, and schedule strategy sessions.
• To provide, maintain and improve our website and services.
• To send you information you asked for and, with your permission, occasional marketing. You can opt out at any time.
• To measure website performance and the effectiveness of our own advertising.
• To detect, prevent and respond to fraud, spam, abuse and security incidents.
• To comply with legal obligations and enforce our agreements.

We share personal information only as needed with:

• Service providers who process data on our behalf under contract, including website hosting (Vercel), database hosting (Neon), form processing (Jotform), AI providers that power the website assistant and audits, and analytics tools.
• Advertising and analytics partners, if we use cookies or pixels to measure or advertise our own services. This may be considered "sharing" for cross-context behavioral advertising under California law — see Your choices below.
• Legal and safety recipients, when required by law, subpoena or court order, or to protect the rights and safety of RPM National, our clients or others.
• A successor business in connection with a merger, acquisition or sale of assets, subject to this policy.

We do not sell personal information for money, and we do not knowingly sell or share the personal information of consumers under 16.

We use cookies and similar technologies to keep the site working, remember preferences, understand how visitors use the site and measure our marketing. You can block or delete cookies in your browser settings; some features may not work without them.

Global Privacy Control: We treat a browser Global Privacy Control (GPC) signal as a valid request to opt out of the sale or sharing of your personal information for that browser.

Do Not Track: As required by the California Online Privacy Protection Act (CalOPPA), we disclose that there is no industry standard for "Do Not Track" browser signals, so we do not respond to them separately. We do honor GPC signals as described above.

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, "CCPA") gives you the following rights regarding your personal information:

• Right to know the categories and specific pieces of personal information we collected about you, the sources, the purposes, and the categories of third parties we disclosed it to.
• Right to delete personal information we collected from you, subject to legal exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
• Right to limit the use of sensitive personal information. We do not use or disclose sensitive personal information for purposes that require this right.
• Right to non-discrimination. We will not deny you services, charge different prices or provide a different quality of service because you used your privacy rights.

Notice at collection — categories and retention

How to make a request

Email or call us using the details in Contact us below. We will confirm receipt within 10 business days and respond within 45 calendar days. If we need more time (up to another 45 days), we will tell you why. To protect you, we verify requests by matching information you give us with information we already have, such as your email address and phone number.

You may use an authorized agent to make a request. We may ask the agent for signed permission from you and may ask you to confirm your identity with us directly. You can make a right-to-know request up to twice in a 12-month period.

Shine the Light (Cal. Civ. Code § 1798.83)

California residents may ask once a year for information about personal information we disclosed to third parties for their own direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing. You can still send a request to the contact below.

Minors (Cal. Bus. & Prof. Code § 22581)

Our site is intended for businesses and is not directed to anyone under 16. We do not knowingly collect personal information from children. If you are under 18 and posted content on our site, you can ask us to remove it by contacting us.

To opt out of the sale or sharing of your personal information, you can:

• Turn on Global Privacy Control in your browser or with a browser extension. We honor it automatically.
• Email info@rpmnational.com with the subject "Do not sell or share my personal information."
• Call us toll-free at (877) 929-8331.

To stop marketing emails, use the unsubscribe link in any email. We may still send non-marketing messages about an active inquiry or engagement.

We use reasonable administrative, technical and physical safeguards, including encryption in transit (HTTPS), access controls and vendor contracts, to protect personal information. No method of transmission or storage is completely secure. We keep personal information only as long as needed for the purposes described above or as required by law, then delete or de-identify it. If a breach affects your information, we will notify you as required by California Civil Code § 1798.82 and other applicable laws.

Residents of other states with consumer privacy laws (such as Colorado, Connecticut, Virginia, Texas and Oregon) may have similar rights to access, correct, delete and opt out of targeted advertising, and to appeal our decision on a request. Contact us to make a request. If we deny it, you can appeal by replying to our decision with the subject "Privacy appeal."

We review this policy at least once a year and may update it from time to time. The effective date at the top shows when it last changed. If we make material changes, we will post a notice on this site before they take effect.

For privacy questions or to exercise your rights: