Privacy Policy

• We collect what you type into our contact form: your name, your email address and your message. We use it to reply to you.
• We do not sell your data. We never have.
• Analytics and advertising cookies are only set after you accept them. Decline, and this site sets no cookies whatsoever.
• You can change your mind at any time using the Cookies link at the bottom of any page.
• If you are in California, the UK or the EU, there is a section near the end written for you.

The rest of this page is the same thing said precisely.

This website is operated by Linkstart, the responsible party for the personal data described on this page. If you have a question about your data, or you want to exercise any of the rights below, write to info@linkstartmarketing.com and say so plainly. That inbox is the designated channel for everything here — there is no form to hunt for and no department to be passed between. A person reads it.

We are based in Mexico, so this is our full privacy notice under the Federal Law on the Protection of Personal Data Held by Private Parties — the LFPDPPP — and its implementing regulations. It is written to meet that law, and to be read by anyone anywhere: if another regime covers you, we will honour the rights it gives you rather than argue about which one applies.

The contact form asks for your name, email address and a message. The newsletter form asks only for an email address. Nothing on this site asks for anything else, and there is nowhere to upload a file.

We collect no sensitive personal data — nothing about your health, your origin, your beliefs, your politics, your union membership, your sexual life or your finances. We do not ask for it, there is no field for it, and if you put it in the message box anyway we would rather you did not. Nothing here requires the written consent that sensitive data would.

When you submit the form, that information is emailed to our team so we can answer you, and an automatic acknowledgement is emailed back to you. Your address is used as the reply-to on the message we receive, which is how a reply reaches you.

To stop the form being abused as a way of sending mail to strangers, we keep two short-lived technical records: a one-way hash of your email address, so the same address cannot be used to trigger repeated automatic replies within a day, and a one-way hash of your IP address, to rate-limit submissions. These are hashes, not the values themselves — they cannot be turned back into your address or your IP. They expire within a day.

Like every website, ours is reached by your browser announcing certain things: your IP address, which browser and operating system you are using, which page you asked for and, sometimes, which page sent you. Our hosting provider records this in standard server logs, which exist so the site can be kept running and secure.

This happens before any question of consent, because it is how the web works — a server cannot send you a page without knowing where to send it.

The law we are written under divides this in two, and so do we.

Necessary purposes. Without these the site cannot do the thing you came for:

• answering your enquiry, and carrying on that conversation;
• sending you the automatic acknowledgement that confirms we received it;
• the short-lived hashes that stop the form being used to send mail to strangers;
• keeping the site running, available and secure, which is what the server logs are for.

Secondary purposes. These make our work better, and you can refuse every one of them without losing anything:

• measuring how the site is used, so we can improve it;
• measuring and targeting the advertising we pay for;
• sending you the newsletter, if you asked for it.

To refuse the secondary purposes, decline the cookie banner — or change your mind later with the Cookies link at the foot of any page. You do not have to write to us, give a reason, or wait for us to act; it takes effect the moment you click. If you would rather tell us in words, info@linkstartmarketing.com works too. Declining changes nothing about how the site behaves or how we answer you.

A cookie is a small file a site asks your browser to keep. We treat them as something to ask about first, not to apologise for afterwards.

Until you answer the banner, and permanently if you decline it, this site sets no cookies at all. Not a reduced set — none. Your decision itself is remembered in your browser's local storage under the name ls_consent, which never leaves your device and is never sent to us or to anyone else.

If you accept, the following are set:

One further cookie, ls_conv, is set only at the moment you submit the form and is deleted a few seconds later, on the thank-you page. It exists so that a single enquiry is counted once rather than every time that page is refreshed. It carries no information about you and lasts five minutes at most. It is set regardless of your cookie choice, because without it the site cannot tell one submission from a page reload.

With your acceptance, we use Google Analytics 4 to understand how the site is used — which pages are read, which sections are reached, how many people get in touch. We also load Google Tag Manager, which is the tool that lets us change that measurement without rebuilding the site.

We also use the Meta Pixel, which tells Meta that a visit or an enquiry happened, so that advertising we pay for can be measured and shown to people more likely to want it.

If you decline, Google receives no cookies and only an anonymous, cookieless signal that a page was viewed; Meta receives nothing at all from your browser.

Separately, when you submit the contact form, our server sends Meta a record of that enquiry directly, through its Conversions API. This is how advertising results are attributed reliably when a browser blocks scripts. That record contains a one-way hash of your email address and name — Meta can match it against an account it already has, but cannot read it — together with your IP address and browser identification, which Meta requires in plain form.

Because our server creates that record, and not your browser, it is currently sent whenever the form is submitted — including if you declined cookies, since it does not depend on them. If you would rather it had not been, write to info@linkstartmarketing.com and we will have it deleted.

Two kinds, and no others. If you write to us, we reply — and the moment your message arrives, an automatic acknowledgement goes back to you so you know it did not vanish. If you asked for the newsletter, you get the newsletter.

We do not run a mailing-list platform, so there is no unsubscribe link at the bottom of an email to click. Reply and say stop, or write to info@linkstartmarketing.com, and you are off the list — there is no flow to complete and nobody will ask you why. We will not pass your address to anyone else to mail you, and we do not buy addresses to mail.

We do not sell, rent or trade personal information. It is shared only with the services that make this site and our replies work:

• Hostinger — hosts the website and carries our email. Your enquiry passes through it and is stored in our inbox.
• Google — analytics and tag management, only with your acceptance.
• Meta — advertising measurement, as described above.

These companies process data on servers that may be outside your country, including in the United States. Where the law requires a safeguard for that transfer, we rely on the standard contractual protections those providers offer.

Every one of these is a processor: it handles the data on our instructions and for our purposes, which is why it needs no separate consent from you. None of them is given your data to use for purposes of its own — nothing here is sold, rented or traded. If that ever changed we would have to say so here first, and give you a way to refuse it.

We may also disclose information where a law obliges us to, which we would resist to the extent the law allows.

This site loads nothing from anywhere else. Our typefaces, video and scripts are all served from this domain rather than from a font, media or code network, so browsing these pages does not quietly announce you to a third party.

• Enquiries stay in our inbox while there is a live conversation and for as long afterwards as we may reasonably need them — to pick up a thread, or to show what was agreed. Ask us to delete yours and we will.
• The anti-abuse hashes expire within twenty-four hours.
• Server logs are kept by our host on its own schedule, typically a matter of weeks.
• Analytics data is retained by Google for fourteen months.

Mexican law calls these the ARCO rights, after the four things you can ask for — the initials work the same in English. Wherever you are, you may ask us to:

• Access — tell you what we hold about you, and give you a copy;
• Rectification — correct it, if it is wrong or incomplete;
• Cancellation — delete it;
• Opposition — stop using it for a particular purpose;
• and, separately, withdraw a consent you gave earlier. For cookies the Cookies link at the foot of the page does this immediately, without asking us.

Write to info@linkstartmarketing.com. So that we can act on it rather than write back asking questions, tell us your name and an address we can reply to, which of the four you want, and which data you mean. If you are acting for someone else, say so and show that you may. We may ask you to confirm you are who you say you are — that check exists to stop someone else asking for your data, not to slow you down.

The law gives us twenty working days to answer and fifteen more to carry out what we agreed, and we do not intend to use all of them. We will not make you explain yourself to get a straight answer, and asking costs nothing.

If we get it wrong, you can take it to the INAI, Mexico's data protection authority, at inai.org.mx. If you live somewhere else, the authority where you live will do just as well — we will not argue about jurisdiction with someone complaining about us.

The CCPA, as amended by the CPRA, gives you rights over what we hold: to know what we have collected about you and why, to have it deleted, to have it corrected, and to opt out of its sale or sharing. You may use any of them without being treated worse for it — you will get the same site, the same answer and the same price.

In a year, what this site collects from a Californian falls into two of the categories that law names: identifiers (your name and email if you write to us; your IP address and cookie identifiers otherwise) and internet activity (which pages you read, and which advert brought you). Nothing else. We collect no sensitive personal information as that law defines it, and we have no use for it.

We do not sell personal information, and we never have — no one pays us for it. But California treats letting an advertising network set identifiers in your browser as sharing, and if you accept cookies here, that is what Meta and Google do. So we say it in their words rather than hiding behind ours.

Your opt-out is the same control everyone else gets, and it costs nothing: decline the cookie banner, or change your mind later with the Cookies link at the foot of any page. It takes effect at once, needs no account, and no request to us. You may also write to info@linkstartmarketing.com and we will do it and confirm.

One thing we would rather admit than let you assume: this site does not yet read the Global Privacy Control signal your browser can send. Because we set no advertising cookies at all until you accept them, a visitor who never accepts is already in the position GPC asks for — but the signal itself is not read today, and we will say so here until it is.

The UK GDPR and the GDPR ask us to name what entitles us to process anything at all. For us it is short:

• Your request — answering an enquiry, and the acknowledgement that confirms it arrived. You wrote to us; replying is the point.
• Your consent — analytics, advertising measurement and the newsletter. Given at the banner, withdrawn at the Cookies link, and nothing depends on it.
• Our legitimate interests — keeping the site up and secure, and the short-lived hashes that stop the contact form being used to mail strangers. Both are narrow, and neither profiles you.

On top of the rights listed above, you may also ask for your data in a portable form to take elsewhere, and you may object to anything we do on the basis of legitimate interests. Neither costs anything and neither needs a reason.

Our providers process data on servers that may sit outside the UK and the EU, including in the United States. Where a transfer needs a safeguard, we rely on the standard contractual clauses those providers publish. You can complain to your own supervisory authority — in the UK the ICO — and you do not have to come to us first, though we would rather you did so we can fix it.

The site is served only over an encrypted connection, and mail between the site and our inbox is sent over an authenticated, encrypted channel. Directories that hold configuration and credentials are refused to the public outright, and no part of this site accepts an uploaded file.

No system is beyond compromise, and we would rather say so than imply otherwise. Please do not send anything confidential through a web form — including passwords, card numbers or identification documents. We will never ask you for them.

This site is for businesses and the people who run them. It is not directed at children, and we do not knowingly collect information from anyone under sixteen. If you believe a child has sent us something, tell us and we will delete it.

When what we do changes, this page changes with it, and the date at the top changes too. We will not quietly broaden what we collect and leave the wording as it was.

This page is the means by which we tell you. The current version always lives at this address, and the date above it is the date it became true — so checking here is enough, and we will not need to reach you another way.