This policy explains what UpTown Media Services collects, why, and what you can do about it. We have written it in plain language on purpose. If anything here is unclear, call us and ask — you will get a person.
The short version: we collect what we need to answer you and to run the service. We do not sell your information, we do not share it with advertisers, and we do not use it to train AI models.
1. Who we are
UpTown Media Services is a local marketing company based in Denver, Colorado. We manage the online presence of small businesses. For the information described here, we are the "controller" — the party that decides why and how it is used.
2. What we collect
- What you give us. Name, business name, email, phone number, and whatever you write in a form, an email or a WhatsApp message.
- What the form records. Which page you sent it from, the language you were browsing in, and the campaign parameters in the link (if any).
- Client information. If you become a client: your business details and access to the accounts you authorize us to manage.
- Technical data. Standard server logs — IP address, browser, pages visited, timestamps — kept for security and troubleshooting.
We do not collect Social Security numbers, government IDs, financial account numbers, health information, biometrics, or precise location. If a form ever asks you for any of those, it is not ours.
3. Phone calls and text messages
This section matters, so it is separate.
When you give us your phone number through a form on this site, you are agreeing that we may call or text you about your enquiry. Message and data rates may apply. Message frequency varies.
You can stop it at any time. Reply STOP to any text and we stop texting. Tell us on a call and we stop calling. Neither one affects anything else, and we will still answer if you contact us.
We do not use automated dialers or prerecorded messages, we do not text you about anything other than what you contacted us about, and we never share or sell your phone number. Consent to be contacted is not a condition of buying anything from us.
4. Email
We reply to enquiries. We do not add people to a marketing list because they asked a question. If we ever send a newsletter, every message will carry a one-click unsubscribe and our postal address, and unsubscribing will be honored within ten business days.
5. What we do not do
- We do not sell your personal information. Not to anyone, at any price.
- We do not share it with advertisers or data brokers.
- We do not use your data, or your clients' data, to train AI models.
- We do not run advertising trackers or third-party marketing pixels on this site.
- We do not buy contact lists.
6. Client accounts and the data inside them
When you hire us, we work inside accounts that belong to you: your Google Business Profile, your social accounts, your website. Any customer data in those accounts remains yours. For that data we act as a service provider, not as an owner: we use it only to do the work you hired us for, never for our own purposes, and never to build a list.
You remain the account owner throughout. We operate as a manager. When our work together ends, we remove our access and nothing is deleted.
7. Your rights
Wherever you live, you can ask us to:
- See what we hold about you.
- Correct anything that is wrong.
- Delete it.
- Get a copy in a portable format.
- Opt out of any sale or profiling — neither of which we do.
If you are a Colorado resident, the Colorado Privacy Act gives you these rights explicitly, along with the right to appeal if we refuse a request. California residents have equivalent rights under the CCPA as amended by the CPRA. We do not discriminate against anyone for exercising them: your price does not change and the service does not get worse.
To make a request, email us and say what you want. We confirm within ten business days and complete it within forty-five, and we will tell you if we need a one-time extension. We may ask you to verify your identity first — not to make it difficult, but because handing your data to someone impersonating you would be worse.
Browser opt-out signals. This site honors Global Privacy Control (GPC). If your browser sends that signal, we treat it as a valid opt-out request without you needing to do anything else.
8. Who else sees your information
Only the service providers we need to operate, and only the minimum each one requires:
- Web hosting — stores the site and the database.
- Email delivery — sends the messages we send you.
- Payment processing — for clients only. We never see or store your full card number.
- The platforms you ask us to manage — Google, Meta, and your website host.
Each of those has its own privacy policy. None of them is permitted to use your information for their own purposes.
We will disclose information if the law requires it. If that ever happens and we are permitted to tell you, we will.
9. Cookies
This site uses only what it needs to work: a session cookie when you log in, and a security token on forms. If analytics is enabled, it measures visits in aggregate and is configured not to share data with other services.
There are no advertising cookies, no retargeting pixels and no cross-site tracking. Your browser can block or delete cookies at any time and the site will still work, although you will not be able to stay logged in.
10. How long we keep things
- Enquiries that do not become clients: up to 24 months, then deleted.
- Client records: for the length of the relationship and 7 years after, which is what tax and accounting rules require.
- Server logs: 90 days.
- Email delivery records: 12 months.
A deletion request is honored earlier than these periods except where the law requires us to keep a record.
11. Security
The site is served over HTTPS. Passwords are stored hashed, never in readable form. Third-party access tokens are encrypted. Admin access is limited to the people who need it and protected by rate limiting and account lockout. We use multi-factor authentication on every account that supports it.
No system is perfect. If we ever have a breach affecting your personal information, we will notify you and the relevant authorities without undue delay, and we will tell you what happened plainly rather than burying it.
12. Children
This is a service for businesses. We do not knowingly collect information from anyone under sixteen. If you believe a child has given us information, tell us and we will delete it.
13. Where your information is held
Our systems are hosted in the United States. If you contact us from outside the U.S., you are sending your information to the U.S., where privacy laws differ from those in your country.
14. Changes
If we change this policy we update the date at the top. If a change is significant and you are a client, we email you about it rather than relying on you to notice.
15. Contact
Privacy questions go to a person, not a form. Email or call us using the details in the footer of this site. If you are unhappy with how we handled a request, Colorado residents may appeal to us directly and, if still unsatisfied, may contact the Colorado Attorney General.