Privacy Policy
Table of Contents
- 1. Introduction
- 2. Information We Collect
- 3. How We Use Your Information
- 4. SMS Messaging & Data
- 5. Email Marketing
- 6. Payment Processing
- 7. Third-Party Service Providers
- 8. Data We Process on Behalf of Clients
- 9. Cookies & Tracking
- 10. Data Retention
- 11. Your Privacy Rights
- 12. California Privacy Rights (CCPA/CPRA)
- 13. Virginia, Colorado, Connecticut Privacy Rights
- 14. International Users / GDPR
- 15. Children's Privacy
- 16. Data Security
- 17. Data Breach Notification
- 18. Do Not Track
- 19. Changes to This Policy
- 20. Contact Us
1. Introduction
Eternal Growth LLC ("we," "our," or "us") is a Florida single-member limited liability company that provides CRM management subscription services for service businesses. We operate the website eternalgrowthleads.com and deliver services including website creation, missed call text-back, reputation management, and unified conversation hub management, all powered by the GoHighLevel platform.
This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit our website, engage our services, or otherwise interact with us. It applies to all visitors, prospective clients, and active subscribers.
By using our website or services, you acknowledge that you have read and understand this Privacy Policy. If you do not agree with these practices, please discontinue use of our website and services.
2. Information We Collect
We collect the following categories of personal information:
Contact Information
- Full name, email address, and phone number submitted through website forms, chat widgets, or direct communications
Billing Information
- Name, billing address, and payment method details, all processed securely through Stripe. We never receive, store, or have access to your raw credit or debit card numbers.
Communication Records
- Emails, SMS text messages, and chat messages exchanged through the GoHighLevel platform or directly with us
Usage Data
- Pages visited, browser type and version, device type, IP address, referral source, time spent on pages, and click behavior, collected automatically through cookies, analytics tools, server logs, and embedded widgets
Marketing Preferences
- Email opt-in and opt-out status, SMS consent status, campaign engagement metrics (opens, clicks), and communication preference selections
3. How We Use Your Information
We use the personal information we collect for the following purposes:
- Service delivery — to set up, manage, and maintain your CRM subscription, build and host your website, configure automations, and provide the services you have purchased
- Payment processing — to process your monthly subscription payments, issue receipts, and manage billing inquiries through Stripe
- Marketing communications — to send promotional emails, service updates, case studies, and industry tips, only with your prior opt-in consent
- Customer support — to respond to your inquiries, troubleshoot issues, and provide technical assistance
- Legal compliance — to comply with applicable federal, state, and local laws, regulations, and legal processes
- Site improvement — to analyze website usage patterns, optimize user experience, test new features, and improve our service offerings
4. SMS Messaging & Data
If you provide your phone number and opt in via our website forms or other consent mechanisms, you may receive text messages from Eternal Growth LLC. We collect phone numbers for the following purposes:
- Transactional messages — account updates, appointment reminders, service notifications, onboarding follow-ups, and support responses
- Marketing messages — promotional offers, tips, and commercial content (requires separate, explicit opt-in consent)
Message frequency varies based on your interactions and subscription status. Message and data rates may apply depending on your mobile carrier and plan. You can opt out at any time by replying STOP to any message. Reply HELP for assistance or email connect@eternalgrowth.biz.
SMS consent is not a condition of purchasing any service or submitting any form on our website. Each type of SMS consent (transactional and marketing) is collected separately and independently.
We will never sell, share, rent, or disclose your phone number, SMS consent, or opt-in data to any third party for their own marketing purposes. Your phone number and related consent data are shared only with our SMS delivery provider (Twilio, operating as the underlying infrastructure for GoHighLevel) solely for the purpose of transmitting messages you have consented to receive. No third party will use your opt-in data to send you messages on their behalf.
5. Email Marketing
We send marketing emails only to individuals who have affirmatively opted in to receive them. You may receive emails about our services, industry insights, case studies, promotions, and updates related to your subscription.
You can unsubscribe at any time by clicking the "unsubscribe" link at the bottom of any marketing email or by contacting us at connect@eternalgrowth.biz. We will process your unsubscribe request within 10 business days in accordance with the CAN-SPAM Act.
We do not sell, rent, lease, or trade your email address to any third party for their marketing purposes. Email communications are sent through the GoHighLevel platform.
6. Payment Processing
Payment processing is handled by Stripe, Inc. (a PCI-DSS Level 1 certified payment processor) and FastPayDirect (GoHighLevel's integrated payment platform). When you subscribe to our services or make a payment — whether through our website, a payment link, or an invoice — your payment card details are submitted directly to the processor's secure servers.
Information collected at checkout: When you use a payment link or checkout page, we collect your first name, last name, email address, phone number, billing address, and payment method details. This information is used to process your payment, set up your subscription, communicate billing-related updates, and deliver the services you purchased.
We never receive, store, process, or have access to your full credit card number, debit card number, or CVV/CVC security code. We receive only a truncated card identifier (last four digits), card brand, expiration date, and billing address for record-keeping purposes.
Stripe may collect and process your payment information, billing address, and transaction data in accordance with their privacy policy, available at stripe.com/privacy. GoHighLevel's privacy policy is available at gohighlevel.com/privacy-policy. These processors' PCI-DSS compliance ensures that your payment data is handled with industry-standard security controls.
7. Third-Party Service Providers
We share personal information with the following third-party service providers who assist us in operating our business and delivering services. These providers are contractually obligated to use your information only for the purposes we specify and in accordance with this Privacy Policy.
- Stripe — payment processing and subscription billing (privacy policy)
- GoHighLevel — CRM platform, email delivery, SMS messaging, automation workflows, reputation management, and conversation hub (privacy policy)
- Twilio — SMS and voice message delivery infrastructure, operating as the underlying provider for GoHighLevel communications (privacy policy)
- Google Analytics — website traffic analysis, user behavior tracking, and conversion measurement (privacy policy)
- Cloudflare — website hosting, DNS, and security for eternalgrowthleads.com; Cloudflare processes IP addresses and request logs to serve and protect the site (privacy policy)
- Pexels — stock photography used on client websites; Pexels may collect usage data when images are loaded (privacy policy)
We do not sell your personal information to any third party. We share information with these providers only to the extent necessary for them to perform their designated functions on our behalf.
8. Data We Process on Behalf of Clients
Eternal Growth LLC provides CRM management services through which our clients collect and manage their own customers' personal data via the GoHighLevel platform. Our handling of that data is governed by each client's signed Software Services Agreement and our Client Services Terms.
Our role as data processor: When clients use the platform to store contacts, conversations, and pipeline data belonging to their customers, Eternal Growth acts as a data processor. We process client customer data only in accordance with the client's instructions and solely for the purpose of delivering the subscribed services.
Client's role as data controller: The client is the data controller for all personal data collected from their customers. The client is solely responsible for:
- Obtaining proper consent from their customers for data collection and communications
- Providing their own privacy policy to their customers
- Complying with all applicable privacy and data protection laws
- Ensuring that all customer data provided to or collected through the platform is lawfully obtained
Our commitments: Eternal Growth LLC will not use client customer data for its own marketing purposes, will not sell or rent client customer data to third parties, will not combine it with data from other sources, and will not access client customer data except as necessary to provide the subscribed services or as directed by the client. We share client customer data only with the service providers needed to deliver the services (Section 7), where required by law or legal process, and where reasonably necessary to enforce or defend the client's agreement.
Restricted data: Clients may not enter or upload protected health information, Social Security numbers, full payment card numbers, financial account credentials, government identification numbers, or other highly regulated data into the platform unless Eternal Growth agrees in writing in advance. The platform is not configured for HIPAA or PCI DSS compliance, and Eternal Growth does not act as a HIPAA business associate.
Data retention and export: Clients are responsible for exporting their own contacts, conversations, and calendar data before the termination date, using the export tools the platform provides. On the termination date, the client's account and its data are deleted, or scheduled for deletion, from the live platform. Copies held in the backup systems of the underlying providers persist for those providers' own retention periods. Full terms are in the client's Software Services Agreement and the Client Services Terms. We will provide reasonable assistance if a client receives a request from one of its own customers to access or delete personal information.
10. Data Retention
We retain personal information for specific periods based on the type of data and our legal obligations:
- Contact information (name, email, phone) — retained for the duration of your active client relationship plus 6 months following cancellation or last interaction
- Billing and financial records — retained for 7 years as required by IRS record-keeping requirements (26 U.S.C. § 6001)
- SMS consent records — retained for 5 years in accordance with FCC regulations and TCPA compliance requirements
- Communication logs (emails, SMS, chat transcripts) — retained for 3 years from the date of communication
- Website usage data — retained for 26 months, consistent with the Google Analytics default retention period
- Client account data (contacts, conversations, pipeline records inside a client's platform account) — retained while the subscription is active and deleted, or scheduled for deletion, on the termination date (see Section 8)
When personal information is no longer needed for the purposes described above and no legal retention requirement applies, we will securely delete or anonymize the data. Anonymized data that cannot reasonably be used to identify you may be retained indefinitely for analytical purposes.
11. Your Privacy Rights
Regardless of where you reside, you have the following general rights regarding your personal information:
- Right to access — request a copy of the personal data we hold about you
- Right to correction — request that we correct inaccurate or incomplete personal data
- Right to deletion — request that we delete your personal data, subject to applicable legal retention requirements
- Right to opt out — opt out of marketing communications (email and SMS) at any time, without affecting your ability to use our services
To exercise any of these rights, email us at connect@eternalgrowth.biz with the subject line "Privacy Rights Request." Please include your full name and the email address associated with your account so we can verify your identity. We will acknowledge your request within 10 business days and complete it within 30 days.
12. California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with the following specific rights:
- Right to know — you have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it
- Right to delete — you have the right to request that we delete any personal information we have collected about you, subject to certain exceptions (such as legal retention requirements, completing a transaction, or detecting security incidents)
- Right to opt out of sale or sharing — you have the right to opt out of the "sale" or "sharing" of your personal information as those terms are defined under the CCPA/CPRA
- Right to non-discrimination — we will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you services, charge you different prices, provide a different level of service, or suggest that you will receive a different level of quality because you exercised your privacy rights
We do not sell or share your personal information as defined by the CCPA/CPRA. We do not sell personal information to third parties for monetary or other valuable consideration. We do not share personal information with third parties for cross-context behavioral advertising purposes.
Do Not Sell or Share My Personal Information: Although we do not sell or share your personal information, you may submit a request at any time by emailing connect@eternalgrowth.biz with the subject line "Do Not Sell or Share My Personal Information."
Categories of personal information collected in the prior 12 months:
- Identifiers — name, email address, phone number, IP address
- Commercial information — subscription records, payment history, services purchased
- Internet or electronic network activity — browsing history on our site, pages visited, referral source, interactions with our website
- Communications data — content of emails, SMS messages, and chat conversations exchanged with us
How to submit a request: Email connect@eternalgrowth.biz with the subject line "CCPA Request" and include your full name and the email or phone number associated with your account. We will verify your identity before processing your request and respond within 45 days. If we need additional time, we will notify you of the extension (up to an additional 45 days) and the reason for it.
Authorized agents: You may designate an authorized agent to submit a request on your behalf. We will require the agent to provide proof of your signed authorization and may require you to verify your identity directly with us and confirm that you authorized the agent to act on your behalf.
13. Virginia, Colorado, Connecticut Privacy Rights
If you are a resident of Virginia, Colorado, or Connecticut, you may have additional privacy rights under the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), or the Connecticut Data Privacy Act (CTDPA), respectively.
These laws generally provide rights similar to those described in Sections 11 and 12, including the right to access, correct, and delete your personal data, as well as the right to opt out of targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects.
To exercise any rights under these state laws, contact us using the same process described in Section 11. We will respond in accordance with the applicable statutory timelines. If your request is denied, you may appeal the decision by emailing connect@eternalgrowth.biz with the subject line "Privacy Rights Appeal."
Please note that these laws may apply to our business based on specific processing thresholds. Regardless of whether we meet those thresholds, we extend the same privacy rights and protections to all of our users.
14. International Users / GDPR
Our services are designed for and intended for use by businesses based in the United States. Eternal Growth LLC does not target, market to, or knowingly collect personal data from individuals located in the European Union (EU) or European Economic Area (EEA).
All data collected through our website and services is stored and processed in the United States on servers operated by our third-party service providers (see Section 7).
If a client's customer data includes personal data of individuals residing in the EU or EEA, the client is solely responsible for ensuring compliance with the General Data Protection Regulation (GDPR) and any other applicable international data protection laws. This includes obtaining appropriate legal bases for processing, providing required disclosures to data subjects, and implementing any necessary data transfer mechanisms.
Eternal Growth LLC does not independently assess whether client customer data includes EU/EEA resident data and makes no representations regarding GDPR compliance for data processed on behalf of clients.
15. Children's Privacy
Our website and services are not directed to individuals under the age of 18. We do not knowingly collect, use, or disclose personal information from anyone under 18 years of age. We do not knowingly sell or share the personal information of minors.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at connect@eternalgrowth.biz. Upon verification, we will promptly delete such information from our records.
16. Data Security
We implement reasonable technical and organizational security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using TLS/SSL protocols
- Use of PCI-DSS compliant payment processing (Stripe)
- Access controls limiting employee and contractor access to personal data on a need-to-know basis
- Secure authentication for all administrative accounts and platforms
- Regular review of data handling practices and security procedures
However, no method of electronic transmission or data storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of any account credentials you use to access our services.
17. Data Breach Notification
In the event of a data breach involving your personal information, we will notify affected individuals within 30 days of discovering the breach, in accordance with Florida Statutes § 501.171 (Florida Information Protection Act). Notification will be provided via email to the address associated with your account, or by other means as permitted by law.
The notification will include a description of the breach, the types of information involved, steps we are taking in response, and recommended actions you can take to protect yourself. We will also notify applicable regulatory authorities as required by law.
For business clients, the Client Services Terms separately commit us to notify the client within 72 hours of confirming a security incident affecting the client's customer data in systems we control or administer.
18. Do Not Track
Some web browsers transmit "Do Not Track" (DNT) signals to websites. There is currently no universally accepted standard for how websites should respond to DNT signals. At this time, our website does not alter its data collection or tracking practices in response to DNT browser signals.
If you wish to limit tracking, you may disable cookies in your browser settings, install the Google Analytics Opt-out Browser Add-on, or use browser extensions designed to block tracking scripts.
19. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will revise the "Last Updated" date at the top of this page.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or services after the posting of changes constitutes your acceptance of the updated Privacy Policy.
20. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information below:
Eternal Growth LLC
Florida, United States
Email: connect@eternalgrowth.biz
Website: eternalgrowthleads.com
For privacy-related requests, please use the subject line "Privacy Inquiry" in your email so we can route your message appropriately. We aim to respond to all inquiries within 10 business days.