Privacy Policy

Effective Date: September 13, 2026  |  Last Updated: September 2026

1. Overview

Good Bread Media LLC ("we," "us," or "our") operates goodbreadmedia.com (the "Site") and provides websites, text messaging and follow-up software, local search engine optimization, and review and reputation management tools to contractors and home service businesses. This Privacy Policy explains what information we handle, why, and what rights you have under applicable law, including the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and other applicable privacy laws.

The short version: we handle information about visitors to this Site and about the contractors we work with. Where a client uses our chat, text messaging, follow-up, or review tools, we also handle information about that client's leads and customers, on the client's behalf. Section 3 explains how.

2. Information We Collect

Browsing the Site does not require an account. The following may be collected:

• Usage data: Pages visited, time on site, browser type, device type, operating system, and referring URL, collected via our hosting provider (Vercel) as standard server log data.
• IP address: Captured by Vercel as part of standard server logs, and by Google as part of advertising conversion measurement described in Section 5.
• Advertising and conversion data: We run Google Ads and use Google's conversion tracking tag on this Site to measure which advertisements lead to inquiries. See Section 5.
• Client information: If you hire us, we collect the information needed to provide and bill the Services, which may include your name, business name, email address, telephone number, billing details, access to accounts you share with us, and the content you supply, such as your logo, photographs of your work, and your license number.
• Text messaging and consent records: If you give us your mobile number and agree to receive text messages, your phone number, the date, time, and source of your opt-in, the disclosure you agreed to, your opt-out requests, and the messages we exchange.
• Calls and correspondence: If you call or email us, we keep the emails and messages exchanged with you and notes of the call.

3. Information We Handle for Our Clients

Most of the Services involve information about our clients' own leads and customers. When someone texts a business through the chat on its website, calls the business and receives an automatic text reply, fills in a form on its website, or is followed up with or asked for a review, their name, telephone number, email address, and the messages exchanged may be stored in that client's account on the software platform we provide. A client may also import their own customer list.

We handle that information only on our client's instructions and only to provide the Services to that client. For it, the client is the controller (or the "business" under the CCPA) and we act as their processor or service provider. We do not sell it, use it for our own marketing, or combine it with information from other clients.

If you contacted a business through a website or phone number we run, or received a text, email, or review request on a business's behalf, and want to know what is held about you or ask for it to be deleted, contact that business. You can also contact us, and we will pass your request to them and help them answer it.

4. Lawful Basis for Processing (GDPR)

For individuals in the European Economic Area (EEA), United Kingdom, and other GDPR-applicable jurisdictions, we rely on the following lawful bases where we act as a controller:

• Legitimate interests (Article 6(1)(f)): Server log data and aggregate measurement are processed to operate and secure the Site and to understand whether our marketing works. We have assessed that these interests are not overridden by your fundamental rights.
• Consent (Article 6(1)(a)): Advertising and conversion tracking cookies, and any optional analytics, are set on the basis of consent where consent is required in your jurisdiction. You may withdraw consent at any time.
• Contract / pre-contractual steps (Article 6(1)(b)): When you hire us, or contact us about hiring us, we process your information to provide what you asked for and to bill it.
• Legal obligation (Article 6(1)(c)): Retaining billing and tax records.

5. Cookies and Tracking

This Site runs Google Ads conversion tracking (tag AW-820564620) on every page. This sets cookies and shares limited information with Google so we can measure which advertisements produce inquiries, and it may be used by Google for advertising measurement and remarketing under Google's own policies.

• Google Ads conversion tracking: Set by Google on our instruction, to attribute inquiries to advertising campaigns.
• Local storage: Where used, your browser's local storage may remember your cookie consent preference. This data is not transmitted to our servers.

You can manage or block cookies through your browser settings, and you can opt out of personalised Google advertising through Google's own ad settings. See our Cookie Policy for a full breakdown.

6. How We Use Information

• To operate, secure, and improve the Site
• To measure which of our advertising campaigns produce inquiries
• To respond to inquiries, including by text message where you have agreed to receive them
• To provide, support, and bill the Services our clients purchase, including handling client customer information as described in Section 3
• To keep records of your communication preferences, consent, and opt-out requests
• To protect the security of the Site and the Services and prevent fraud
• To comply with legal, tax, and accounting obligations

We do not sell, rent, or trade personal information, and we do not share it with third parties for their own marketing purposes.

7. How We Share Information

Service providers. We rely on third parties to deliver the Site and the Services. They may use personal information only to provide their services to us, and must keep it confidential and secure. The main categories are:

• Hosting: Vercel, Inc. (United States), which holds standard server log data for this Site.
• Advertising: Google LLC, for advertising and conversion measurement on this Site.
• Client website platform: A third-party platform that hosts the websites our clients publish. We will tell you the current name of this provider on request.
• Software, messaging, and reputation management: Third-party platforms and text messaging providers we use to run website chat, missed-call text replies, follow-up, and review requests on our clients' behalf. We will tell you the current names of these providers on request.
• Text messaging aggregators and providers: Used solely to deliver the text messages you have agreed to receive and to process opt-out and help requests.
• Payments: A third-party payment processor that handles client payments. Card details are handled by that processor and are not stored by us.

Legal requirements. We may disclose information if required to do so by law, legal process, or a valid request from law enforcement or a court, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business transfers. If Good Bread Media LLC is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, and it will remain protected under the terms of this Privacy Policy.

All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the text message services.

These providers are located in or transfer data to the United States. If you access the Site or our services from the EEA or UK, your information may be transferred to and processed in the United States, under Standard Contractual Clauses or another approved transfer mechanism where required.

8. Data Retention

Server log data held by Vercel is subject to Vercel's retention schedules, typically 30 to 90 days for access logs. Text messaging consent and opt-out records are retained for at least five years after your last interaction with us, so we can show consent and honor opt-outs. Client account and billing records are retained for as long as the account is active and afterwards for as long as required for tax, accounting, and legal purposes.

Information we handle on a client's behalf, as described in Section 3, is kept for as long as we provide the Services to that client, and is then deleted or returned at the client's direction unless the law requires us to keep it.

9. Your Rights (EEA and UK, GDPR)

• Right of access (Art. 15): Request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): Request correction of inaccurate personal data.
• Right to erasure (Art. 17): Request deletion of your personal data where there is no compelling reason to continue processing it.
• Right to restriction (Art. 18): Request that we restrict processing of your personal data in certain circumstances.
• Right to data portability (Art. 20): Request a machine-readable copy of personal data you have provided to us.
• Right to object (Art. 21): Object to processing based on legitimate interests, including for direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: You have the right to lodge a complaint with your national data protection authority. In the EU, find your authority at edpb.europa.eu; in the UK, contact the ICO at ico.org.uk.

10. California Residents (CCPA/CPRA Rights)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA:

• Right to know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to delete: You may request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to correct: You may request correction of inaccurate personal information.
• Right to opt out of sale or sharing: We do not sell personal information for money. We do run Google Ads conversion tracking on this Site, and that advertising data may be used by Google for advertising audiences, which the CPRA can treat as "sharing" for cross-context behavioral advertising. You can opt out. See Section 11 below.
• Right to non-discrimination: We will not discriminate against you for exercising any CCPA rights.

To submit a California privacy request, contact us at compliance@goodbreadmedia.com with the subject line "California Privacy Request."

11. Do Not Sell or Share My Personal Information

There are three ways to opt out, and any one of them is enough:

• Email us. Write to compliance@goodbreadmedia.com with the subject line "Do Not Sell or Share." We will suppress advertising measurement associated with you and confirm when it is done. You do not need to be a California resident to ask, and we will not ask you why.
• Use a browser opt-out signal. We honour the Global Privacy Control (GPC). If your browser or an extension sends a GPC signal, we treat it as a valid opt-out request for that browser, with no further action needed from you.
• Turn it off at Google. Because the advertising measurement on this Site is Google's, you can also control it directly at myadcenter.google.com, or block third-party cookies in your browser.

Opting out does not change what you can see or do on this Site, and we will not treat you differently for it.

12. Text Messaging and Mobile Information

When you give Good Bread Media LLC your mobile number and agree to receive text messages, we collect your phone number, your consent record (the date, time, source, and the disclosure you agreed to), and the messages we exchange. We use that information only to send you the messages you agreed to receive, respond to you, process opt-out and help requests, and keep the consent records the law requires.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors in support services, such as the messaging platform and mobile carriers that deliver our messages and customer service, is permitted, and they may not use it for any other purpose. All other categories of sharing described in this Privacy Policy exclude text messaging originator opt-in data and consent, and this information will not be shared with or sold to any third party.

You will receive text messages only if you have opted in, using a separate, optional checkbox for non-marketing messages and for marketing messages, and we keep a timestamped record of every opt-in. Messages relate directly to the services you asked about, and we do not send marketing or promotional messages without your specific consent. You can opt out at any time by replying STOP; opt-outs by text are processed immediately and confirmed with one final message. Get help by replying HELP, calling (404) 868-8490, or emailing compliance@goodbreadmedia.com. Message frequency varies, up to 4 messages per month for each program. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. We comply with the TCPA and CTIA guidelines. Our full text messaging terms are in Section 9 of our Terms & Conditions.

The same rule applies to text messages our clients send to their own customers through our Services: we handle that information only on the client's behalf, as described in Section 3, and never share mobile opt-in data or consent with third parties for marketing or promotional purposes.

13. Data Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encryption of data in transit, access controls and authentication on the systems that hold it, limiting access to people who need it, and keeping text messaging consent records separate from marketing use. We follow applicable breach notification laws if a security incident affects your information.

No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.

14. Your Choices

Wherever you live, you can:

• Ask to access, correct, or delete the personal information we hold about you
• Ask how we process your information
• Opt out of text messages at any time by replying STOP
• Opt out of marketing emails by using the unsubscribe link in any marketing email
• Withdraw your consent to future communications at any time

To make a request, contact us using the details in the Contact section below. Residents of the EEA, UK, and California have the additional rights described in Sections 9 and 10.

15. Third-Party Links

The Site may link to websites run by third parties. We are not responsible for their privacy practices, and this Privacy Policy applies only to information collected by Good Bread Media LLC. Please review the privacy policies of any site you visit.

16. Children's Privacy

The Site is not directed to children under the age of 13 (or 16 in jurisdictions where a higher age applies). We do not knowingly collect personal information from children. If you believe a child has provided personal information through the Site, please contact us and we will take prompt steps to remove it.

17. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be posted on this page with a revised effective date. Where required by law, we will notify you of significant changes. Continued use of the Site following any update constitutes acceptance of the revised Policy.

18. Contact

If you have questions about this Privacy Policy, wish to exercise your rights, or have a privacy concern, please contact us:

Good Bread Media LLC
8735 Dunwoody Pl #6896, Atlanta, GA 30350
Phone: (404) 868-8490
Email: compliance@goodbreadmedia.com
Hours: Open 24 hours
Website: www.goodbreadmedia.com