Privacy Policy

EDDM 360 Hybrid Marketing ("EDDM 360", "we", "us") provides done-for-you Every Door Direct Mail campaigns. This policy explains what information we collect through our website, client portal, and campaign tracking tools, how we use it, and the choices you have. Questions? Email us at info (at) eddm360 (dot) com.

Information you give us

• Contact and quote requests. When you fill out our contact or intake forms, book a call, or become a client, we collect details like your name, email address, phone number, business name, and business address — the information we need to respond, prepare quotes, and run your campaigns. Where you arrived from a marketing page, we also record which page and campaign brought you (UTM tags).
• Account and campaign records. If you become a client, we maintain your portal login, campaigns, design proofs, approvals, invoices, and a record of your acceptance of our Terms of Service and this policy (what you agreed to, when, and from which device) so we can deliver the service and document the agreement.
• Payment information. Payments are processed by Stripe. Your card details go directly to Stripe — we never see or store full card numbers.

Information collected automatically

• Website analytics (Google Analytics). Our public pages use Google Analytics 4 to count visits and understand which pages people use. It sets cookies (such as _ga) and collects pages visited, the campaign tags that brought you here, your device and browser type, and an approximate location derived from your connection. We have disabled Google's advertising-personalization features, we strip identifiers out of web addresses before they reach Google, and the signed-in client portal is not tracked at all. If your browser sends the Global Privacy Control opt-out signal, Google Analytics does not load for you.
• Proposal pages. When we send you a quote, it opens on a private proposal page. Each time that page is opened we record the time, roughly how long it stayed open, the device type (phone, tablet or computer), the connection's IP address and the approximate town it resolves to. We use this to know whether a proposal reached you and when to follow up, and we keep it with your quote. It is seen only by our team.
• Advertising measurement (Meta Pixel). Our public pages also load the Meta (Facebook) Pixel so we can tell whether our ads on Facebook and Instagram bring visitors here. It sets cookies (such as _fbp) and shares with Meta the pages you visit on this site, your device and browser type, and an approximate location derived from your connection; if you have a Facebook or Instagram account, Meta may link those visits to it under Meta's own privacy policy. The signed-in client portal is not tracked, and if your browser sends the Global Privacy Control opt-out signal, the pixel does not load for you.
• Sign-in cookies. The client portal uses cookies solely to keep you signed in. These are required for the portal to work.
• Live chat (Tidio). If you use the optional chat widget, the chat provider (Tidio) sets its own cookies and receives what you type in the chat, under its own privacy policy. We also keep our own copy of the conversation, so that an enquiry you start in chat reaches us as a proper record rather than only living in the chat tool. If you don't open the chat, nothing is stored.

Mail tracking links and QR codes

Postcards we produce carry QR codes and short links that pass through our redirect service on the way to the advertised website. When one is scanned or clicked, we log the time, the device type (phone, tablet, or computer), the browser, the page that referred the visit, and the approximate town, state and country the visitor's internet connection is registered to, with that town's rough map position (rounded to about a kilometer). The visitor's IP address is put through a one-way scramble (a salted hash) before anything is stored — we never store the address itself, and we don't record street-level location. The redirect sets no cookies and does not follow visitors across other websites.

We use these scan statistics to show the business that mailed the postcard how its campaign performed. Per-scan detail is deleted within 24 months; only daily totals are kept after that. Some printed links use Bitly as the redirect provider instead — Bitly logs those scans under its own privacy policy.

Connected Google accounts (clients)

Clients can connect their Google Analytics and Search Console so we can report the traffic lift after each mail drop. That connection is read-only: we retrieve aggregate statistics such as weekly visit counts, visits by town, and brand-search impressions. We never post to or change anything in a connected account, the sign-in tokens are stored encrypted, and you can disconnect at any time from your portal or your Google account settings, which ends our access.

EDDM 360's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: we use that data only to provide these reporting features to you — never for advertising, and we never sell it.

How we use it

• Responding to inquiries and preparing quotes you request.
• Delivering campaigns: route selection, design, printing, USPS delivery, and reporting.
• Reporting campaign results — scan counts and website lift — to the client whose campaign generated them, in aggregate form.
• Sending transactional emails about your account — proof approvals, campaign status, mail-drop notifications, and invoices.
• Billing, accounting, and keeping our records accurate.
• Improving our website and service, and preventing abuse of our forms.

What we share — and what we don't

We do not sell your personal information. We share information only with service providers who help us run the business, and only what they need to do their job:

• Printing and mail-fulfillment partners (to produce and deliver your campaigns via USPS)
• Stripe (payments and invoicing)
• Supabase (our database) and Netlify (website hosting)
• Resend (sends our transactional email)
• MailerLite (our newsletter and marketing follow-up emails)
• Google (website analytics, and the analytics connections described above)
• Meta (the Facebook/Instagram ad-measurement pixel on our public pages)
• Tidio (the optional live chat)
• Bitly (short-link redirects, where used)
• Dropbox (transferring design files)

We may also disclose information if required by law, or as part of a business transfer such as a merger or acquisition.

Security and retention

Data is encrypted in transit, and client portal data is protected by per-account access controls — each client can only see their own campaigns, proofs, and invoices. We keep personal information for as long as needed to provide the service and meet legal and accounting obligations, then delete or anonymize it. Per-scan tracking detail is deleted within 24 months (daily totals are kept). Chat conversations are deleted within 90 days, except where a chat became an enquiry — that copy is kept with the enquiry. Records of contracts and invoices are kept as long as the law requires.

Your choices and rights

• You can request a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it (subject to records we must keep, like invoices) by emailing info (at) eddm360 (dot) com.
• We honor the Global Privacy Control browser signal by not loading analytics or the Meta advertising pixel for visitors who send it. The live chat is optional — if you don't open it, it stores nothing about you.
• Transactional emails (proofs, invoices, campaign status) are part of the service while you're a client; any marketing email we send includes an unsubscribe link.
• Depending on where you live, you may have additional privacy rights under local law. We honor verified requests consistent with the law that applies to you.

Children

Our service is for businesses and is not directed to children under 13. We do not knowingly collect personal information from children.

Changes to this policy

If we make material changes, we'll update the effective date above and, for significant changes affecting clients, notify you by email or ask you to re-accept in the client portal.

Contact

EDDM 360 Hybrid Marketing · info (at) eddm360 (dot) com