Home / Privacy
Policy

Privacy policy.

Plain-English summary: we collect what you give us, we use standard tracking to understand how the site is used, we never sell your data, and you can ask us to delete anything we hold at any time.

Last updated: May 2026  ·  Effective: May 2026

John Potter Media LLC ("John Potter Media", "we", "our", or "us") operates the website at johnpottermedia.com and provides web design, SEO, paid media, and related digital marketing services. This privacy policy explains what data we collect, why we collect it, who we share it with, how long we keep it, and the rights you have over it.

If you only read one section, read this one: we do not sell your personal information. We do use standard analytics and advertising tracking on this website (the same kind used by virtually every business website), which is described in detail below. You can opt out of nearly all of it.

1. Who we are

John Potter Media LLC is a US-based digital marketing studio with offices in Wakefield, Massachusetts (978‑808‑3428) and Jacksonville, North Carolina (910‑359‑4700). We serve small businesses, contractors, and non‑profits primarily across Massachusetts, New Hampshire, and North Carolina. For privacy inquiries, the data controller of record is John Potter Media LLC and the contact is privacy@johnpottermedia.com.

2. Information we collect

We collect two kinds of information: information you give us directly and information collected automatically when you use the website.

Information you give us directly: When you fill out a contact form, request a consultation, or send us email, we collect your name, email address, phone number, company name (if provided), and the contents of your message. If you become a client, we collect additional information needed to do the work, including business details, billing information, account credentials you choose to share with us, and any creative assets you provide.

Information collected automatically: When you visit the website, certain data is collected automatically by analytics and security tools running in your browser, including:

  • IP address (a portion of which may be used to estimate your city/region)
  • Browser type, operating system, device class (mobile/desktop/tablet)
  • Pages viewed, time on each page, navigation paths
  • Referring URL (the page or search engine that brought you here)
  • Click‑through identifiers from advertising platforms (such as Google's gclid or Facebook's fbclid) when present in the URL
  • UTM campaign parameters (utm_source, utm_medium, utm_campaign, etc.)
  • Cookie identifiers used by the analytics and advertising tools listed in Section 4

Form submission records: When you submit a form, we keep a server-side record of your submission, including the fields you entered, the timestamp, your IP address (used for spam mitigation and abuse prevention), and an approximate location derived from the IP. These records are stored on our hosting provider's servers and are not publicly accessible.

3. How we use information

  • To respond to inquiries — we read what you sent and reply, usually within four business hours.
  • To deliver client work — once you engage us, we use your information to do the project, communicate progress, send invoices, and provide support.
  • To improve the website — we look at aggregate analytics to understand which content is useful, where people drop off, and where the site needs work.
  • To attribute marketing — when you click a Google or Facebook ad, we record the click identifier so we know which campaigns produce real leads. This lets us spend ad budget where it actually works.
  • To prevent abuse — IP addresses, browser fingerprints, and submission timing are checked to filter automated form spam. We do not use this information for any other purpose.
  • To meet legal obligations — including tax, accounting, and records-retention requirements that apply to a US business.

What we do not do: we do not sell your personal information, we do not rent it or trade it, we do not share it with third parties for their independent marketing purposes, and we do not use it to make automated decisions that have legal effects on you.

4. Third-party services running on this site

The following third-party tools are loaded on johnpottermedia.com. Each tool has its own privacy policy, linked below. By using this site you agree that data may be processed by these services as described in their policies.

  • Google Analytics 4 (Google LLC) — measures page views, sessions, traffic sources, and engagement. Uses first-party cookies (_ga, _ga_*). IP addresses are truncated before storage. Google's privacy policy · opt out.
  • Google Ads (Google LLC) — measures ad click-through and conversion attribution. Uses the gclid click identifier and the conversion cookies set by Google. Google Ads policy · ad settings.
  • Google Tag Manager (Google LLC) — loads and orchestrates the other tracking tags listed in this section. Does not itself collect personal data, but the tags it fires do.
  • HubSpot (HubSpot, Inc.) — customer relationship management. If you submit a form, the data may be passed into our HubSpot CRM for follow-up and to maintain a record of our communication. HubSpot privacy policy.
  • Meta Pixel (Meta Platforms, Inc.) — measures conversions from Facebook and Instagram ad campaigns. Uses the _fbp cookie and the fbclid URL parameter. Meta privacy policy.
  • Cloudflare (Cloudflare, Inc.) — content delivery network and security layer. All traffic to the site passes through Cloudflare, which records connection metadata for performance and abuse prevention. Cloudflare privacy policy.
  • Cloudflare Turnstile (Cloudflare, Inc.) — a CAPTCHA alternative loaded on contact forms to detect automated submissions. Replaces traditional reCAPTCHA. Turnstile information.
  • YouTube (Google LLC) — when you click a YouTube video on this site, the YouTube player is loaded from youtube.com and may set its own cookies. We use a click-to-play "facade" specifically so that no YouTube cookies are set unless you choose to play a video. YouTube policy.
  • ip-api.com — server-side geolocation lookup performed only when you submit a contact form, to add a rough city/region note to the inquiry record. Only the IP address is sent; no personal information from the form is included.

5. Cookies and similar technologies

This site uses cookies set by the third-party services in Section 4. Most are first-party cookies in the technical sense (set on the johnpottermedia.com domain by JavaScript) but are read and used by the services listed.

Strictly necessary: session cookies used by the admin dashboard, form-token cookies that protect against spam.

Analytics: the _ga family of cookies set by Google Analytics 4 (typically expires after 13 months).

Advertising: the _fbp cookie set by Meta Pixel and conversion cookies set by Google Ads.

You can manage cookies in your browser settings — most browsers let you block third-party cookies entirely, clear existing cookies, or run in a private window that doesn't persist them.

6. How long we keep information

  • Form submissions: retained indefinitely for our records, unless you ask us to delete them.
  • Client records: retained for the duration of the engagement plus seven years for tax and accounting purposes.
  • Analytics data: retained per the default Google Analytics 4 settings (14 months at the user/event level; aggregate data longer).
  • Spam / abuse logs: retained up to 90 days, then automatically pruned.
  • Server logs: retained by our hosting provider per their standard policy (typically 30–90 days).

7. Your rights

Regardless of where you live, you can email us at privacy@johnpottermedia.com at any time to:

  • Get a copy of the personal information we hold about you
  • Correct information that's wrong
  • Ask us to delete the information we hold
  • Opt out of receiving any communication from us
  • Ask a question about how we use your data

California residents (CCPA / CPRA): in addition to the rights above, you have the right to know the categories of personal information we collect, the sources we collect it from, and the third parties we share it with — all of which are listed in this policy. You also have the right to request that we do not sell or share your personal information, though as stated above, we do not sell personal information at all.

Virginia, Colorado, Connecticut, Utah and similar state laws: residents of these states have substantially the same rights described above. To exercise them, email privacy@johnpottermedia.com.

EU / UK residents: we do not actively market to or process data on individuals in the EU or UK. If you submit a form from those regions, we will respond to a request from you and will honor a deletion request promptly. We do not transfer personal data outside the United States as a routine practice; the third-party services listed in Section 4 may handle data in their own infrastructure under their own policies.

8. Children's privacy

This website is not intended for use by children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact privacy@johnpottermedia.com and we'll delete it.

9. Data security

We use industry-standard security measures to protect information in transit and at rest, including TLS encryption (HTTPS) on all pages, password hashing where applicable, web-application firewalls via Cloudflare, server-side spam-mitigation layers (form tokens, rate limiting, content heuristics, and Cloudflare Turnstile), and access controls on internal systems. No method of transmission over the internet is 100% secure, but we treat your data with the same care we'd expect for our own.

10. Links to other sites

This site may link to third-party websites (such as social media profiles, portfolio examples, or articles we reference). We are not responsible for the privacy practices of those sites; please review their own privacy policies when you visit them.

11. Changes to this policy

If we change this policy materially, we will update the "Last updated" date at the top of this page. For substantial changes, we may also post a notice on the homepage. We recommend checking this page periodically; continued use of the site after a change constitutes acceptance of the updated policy.

12. Contact

Questions, requests, or concerns about this policy? Email privacy@johnpottermedia.com or write to:

John Potter Media LLC
Attention: Privacy
Wakefield, Massachusetts  ·  Jacksonville, North Carolina
(978) 808-3428  ·  (910) 359-4700

This policy is provided for informational purposes and reflects our actual practices to the best of our knowledge. It is not legal advice. If you require a privacy policy for regulatory compliance in a specific jurisdiction, you should have it reviewed by qualified legal counsel.