Privacy Policy
Last updated September 28, 2026
This policy explains what personal information Spencer Labs collects, why we collect it, who we share it with, and the choices you have. It covers spencerlabs.co, the forms on it, and the Never Miss A Review and website services we provide. HostRev has its own privacy policy published at hostrev.co.
1. Who is responsible for your data
Spencer Labs Ltd. Co., trading as Spencer Labs, is the controller of the personal information described in this policy. Contact us at spencerlabsco@gmail.com or by post at 128 S 1st W St, Paris, ID 83261 with any privacy question or request.
2. Information we collect
Information you give us
- Contact details — your name, business name, email address, phone number, and postal address when you contact us or become a customer.
- Business information — the job-tracking signal you use and the customer contact information tied to each job, so we can send review requests to the right person automatically.
- Correspondence — the content of emails, messages, and calls with us.
SMS consent and text messages
When you submit a form and check the SMS consent box, we record that consent along with the phone number and timestamp. We use it to text you about your inquiry and, if you become a customer, about your account. See the Terms of Service for full text-messaging terms, including how to opt out.
Payment information
Payments are processed by a third-party payment processor. Card numbers are entered directly with the processor and are never received or stored on our systems. We receive only what the processor passes back to us: the billing name and email, the last four digits of the card, its expiry, the amount, and whether the payment succeeded.
Information collected automatically
Our site uses Cloudflare Web Analytics, which reports aggregate traffic — page views, referrers, country, and device type. It does not use cookies, does not fingerprint visitors, and does not build a profile of you across sites. We also capture UTM campaign parameters (such as utm_source) from the page you arrive on, to understand which ad or link brought you here; these are not linked to an identity unless you go on to submit a form. Our hosting provider keeps standard server logs, including IP addresses, for security and troubleshooting.
We do not use advertising cookies or third-party tracking pixels on this site.
Access to your business systems
Delivering Never Miss A Review means connecting to your job-tracking system so we know when a job is complete. We access that connection only as needed to run the service you've asked for, we do not use the customer data that flows through it (such as a customer's name or phone number on a review request) for our own purposes, and we hold it under the confidentiality terms of our agreement with you. For that data, you are the controller and we act as your processor. If you start a free trial, this also includes the list of customers from the past 6 to 9 months you provide for the trial's reactivation campaign — we use it only to send the review-request messages that campaign consists of, and for no other purpose.
3. Why we use it, and our legal basis
- To provide the services you have purchased — performance of our contract with you.
- To respond to enquiries — steps taken at your request before entering a contract.
- To take payment and keep accounting records — performance of our contract and compliance with legal obligations.
- To send the text messages you've consented to — your consent, and performance of our contract once you're a customer.
- To secure and improve our site and services — our legitimate interest in operating a safe, working business.
We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not send marketing email or texts to people who have not asked for it.
4. Who we share it with
We share personal information only with service providers who help us run the business, and only to the extent they need it:
- GoHighLevel — our forms, SMS/text delivery, and customer records platform
- Payment processor — payment processing and subscription billing
- Cloudflare — website hosting, DNS, security, and privacy-preserving analytics
- Google (Workspace) — email and document storage
- Hosting providers — for websites we host under the $197/mo plan
- Professional advisers — accountants and lawyers, where necessary
We may also disclose information where the law requires it, to protect our legal rights, or to a successor entity if the business is sold. In that last case you will be notified.
5. How long we keep it
- Enquiries that do not become customers — 24 months, then deleted.
- Customer records and correspondence — for the engagement and 7 years afterwards, to meet tax and record-keeping obligations.
- Financial and transaction records — 7 years, as required by law.
- SMS consent records — for as long as you may receive texts from us, plus 4 years, to demonstrate consent was given.
- Server logs — typically 90 days.
6. How we protect it
The site is served over HTTPS. Access to your business systems and data is restricted to those who need it, protected by multi-factor authentication, and credentials are stored in an encrypted password manager. Access is revoked at the end of an engagement unless an active plan keeps it in place.
No system is perfectly secure. If a breach affecting your personal information occurs, we will notify you and any relevant regulator as the law requires.
7. Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, object to or restrict how we use it, receive it in a portable format, and withdraw consent where we relied on it — including opting out of texts at any time by replying STOP.
California residents have rights under the CCPA to know what personal information is collected, to delete it, to correct it, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA.
To exercise any right, email spencerlabsco@gmail.com. We respond within 30 days and may need to verify your identity first. There is no charge.
8. International transfers
We operate from the United States and our service providers are primarily US-based, so information you give us is processed in the United States.
9. Children
Our services are for businesses. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, email us and we will delete it.
10. Changes to this policy
We update this policy when our practices change. The "last updated" date above always reflects the current version, and we will notify customers by email before any material change takes effect.
11. Contact
Privacy questions and requests: spencerlabsco@gmail.com
Spencer Labs Ltd. Co.
128 S 1st W St, Paris, ID 83261