Privacy Policy

1. Scope of This Policy

This Privacy Policy applies to:

• dreamlightmarketing.com
• go.dreamlightmarketing.com
• DreamLight-branded landing pages, forms, surveys, calendars, chat tools, and communication systems
• Email, text, telephone, chat, and other communications with DreamLight
• Services and technology that DreamLight operates for its own business purposes

We also operate marketing, communication, CRM, calendar, chatbot, AI voice, and automation systems for client businesses.

When you interact with a system operated for one of our clients, the client business may determine why your information is collected and how it is used. The client’s own privacy policy may also apply. This Privacy Policy does not replace a client business’s privacy notice.

2. Information We Collect

Depending on how you interact with us or our services, we may collect the following categories of information.

Contact information

This may include:

• First and last name
• Email address
• Telephone number
• Business name
• Job title or role
• Mailing address, when needed
• Preferred communication method

Business and inquiry information

This may include:

• Website address
• Industry
• Business location
• Current marketing or communication systems
• Business goals
• Service interests
• Information provided during an audit, consultation, demonstration, onboarding process, or sales conversation

Form, survey, and appointment information

This may include:

• Form and survey responses
• Appointment date and time
• Time zone
• Scheduling notes
• Rescheduling or cancellation information
• Calendar preferences
• Communication consents and preferences

Communications

This may include:

• Emails
• Text messages
• Chat messages
• AI-chatbot conversations
• Telephone-call information
• Support requests
• Social-media messages
• Notes and records relating to follow-up

Call recordings and derived information

Where call recording or transcription is enabled and permitted by law, telephone or voice interactions may be:

• Recorded
• Transcribed
• Summarized
• Categorized
• Analyzed using automated or AI-powered tools
• Reviewed by authorized personnel

We may also collect call metadata, such as the telephone number, date, time, duration, routing information, outcome, and appointment status.

A separate recording notice may be provided before recording begins. A statement in this Privacy Policy is not intended to replace any recording notice or consent required during the call.

Website and device information

This may include:

• IP address
• Browser and device type
• Operating system
• Pages viewed
• Links clicked
• Date and time of visits
• Referring website or advertising source
• Approximate location derived from an IP address
• Cookie identifiers
• Advertising and attribution information
• Form and funnel activity

Email and SMS activity

This may include:

• Whether a message was delivered
• Whether an email was opened
• Links clicked
• Replies
• Opt-in and opt-out records
• Consent date, source, and form version
• Messaging history

Payment information

If we accept payments, payment information may be collected and processed by a third-party payment processor. DreamLight may receive transaction details, billing status, and limited payment-related information, but we do not intend to store complete payment-card numbers.

Information received for client services

Our clients may provide information to us or give us access to information in their CRM, advertising account, website, calendar, contact list, phone system, or other business platform.

Public and third-party business information

For business-to-business outreach, we may receive professional or business contact information from:

• Public business websites
• Business directories
• Social-media or advertising platforms
• Referral partners
• Client businesses
• Technology integrations
• Other lawful business sources

3. How We Use Information

We may use information to:

• Respond to inquiries
• Conduct free audits, consultations, and demonstrations
• Schedule, confirm, reschedule, and manage appointments
• Provide and manage our services
• Create and maintain CRM records
• Configure websites, landing pages, forms, calendars, workflows, pipelines, and communication tools
• Operate AI receptionists, chatbots, and automated assistants
• Route inquiries to the appropriate person or business
• Send requested information
• Send appointment confirmations, reminders, and service communications
• Follow up with leads
• Send marketing communications where permitted
• Measure website, funnel, advertising, and campaign performance
• Attribute leads and conversions
• Improve our systems, services, scripts, and customer experience
• Provide technical support
• Maintain business, accounting, tax, legal, and contractual records
• Detect fraud, abuse, security incidents, or misuse
• Protect our business, clients, users, and legal rights
• Comply with applicable law and valid legal requests

We do not use this section to treat the submission of a phone number as automatic consent to recurring promotional texts or automated marketing calls.

4. Information We Process for Client Businesses

DreamLight may configure, host, administer, or support systems for client businesses.

These systems may include:

• Advertising campaigns and lead forms
• Landing pages and websites
• Booking calendars
• Customer relationship management systems
• AI voice agents and chatbots
• SMS and email follow-up
• Appointment reminders
• Missed-call text-back
• Lead-nurturing campaigns
• Pipelines and reporting
• Review requests
• Lead-reactivation campaigns

When you submit information through a client-branded system, the client business will generally receive or have access to that information.

Depending on the arrangement, DreamLight may act as a service provider, contractor, processor, marketing agency, or technology administrator for the client. We may access the information as necessary to configure, maintain, troubleshoot, secure, and provide the requested services.

Questions about a client business’s use of your information should generally be directed to that client. We may assist the client with a request when required by our agreement or applicable law.

5. AI, Chatbots, and Automated Tools

Some communications may be handled in whole or in part by:

• AI-powered voice agents
• AI chatbots
• Automated assistants
• Automated email or text workflows
• Automated scheduling tools
• Lead-routing or categorization tools
• Transcription or summarization services
• AI-generated responses

An AI assistant may collect information, answer general questions, route an inquiry, qualify a lead, schedule an appointment, or support follow-up.

AI-generated responses may not always be complete or accurate. You may request human assistance when it is available.

We do not use automated tools to make legally significant decisions involving employment, housing, lending, insurance, healthcare eligibility, education, or similar consequential matters unless separately disclosed and reviewed.

We do not use call, chat, or form content to train our own generalized AI model unless we provide a separate notice. Third-party AI providers may process information according to the applicable agreement, account settings, and their legal obligations.

6. Phone Calls, Recordings, and Transcripts

We may receive or place telephone calls in connection with inquiries, appointments, demonstrations, services, or follow-up.

Where recording or transcription is enabled:

• We will provide an appropriate notice when required
• Recordings or transcripts may be processed by telecommunications, CRM, transcription, or AI providers
• Authorized DreamLight personnel or the relevant client business may review them
• They may be used for scheduling, quality, training, support, recordkeeping, security, and follow-up
• They may be retained according to our retention practices or client instructions

Recordings and transcripts, when created, are retained only as long as reasonably necessary for the purposes described in this Policy, to meet legal or contractual requirements, or according to applicable client instructions.

If you do not wish to be recorded, tell the agent or assistant. We will follow the applicable process for the call and jurisdiction.

7. SMS, Telephone, and Email Communications

Responding to requests

When you contact us, submit a form, or book an appointment, we may respond through the method you used or requested.

Text messages

We send recurring promotional text messages or covered automated marketing communications only when we have obtained the consent required for those communications.

SMS programs may include appointment confirmations, reminders, requested follow-up, service notifications, or promotional messages, depending on the consent provided.

• Message frequency varies
• Message and data rates may apply
• Reply STOP to opt out
• Reply HELP for assistance or email [email protected]
• Consent to promotional SMS is not a condition of purchase

We honor valid opt-out and consent-revocation requests. After an opt-out, we will stop sending messages covered by the request.

Mobile information, SMS opt-in data, and consent records will not be sold or shared with third parties or affiliates for their own marketing or promotional purposes. We may disclose this information to telecommunications carriers, messaging platforms, aggregators, and service providers as necessary to operate the messaging program.

Wireless carriers are not responsible for delayed or undelivered messages.

Email

We may send service-related and marketing emails.

You may unsubscribe from marketing emails using the unsubscribe link in the message or by contacting us. We may continue to send non-promotional communications relating to active services, transactions, security, legal matters, or requests you made.

8. Cookies, Analytics, and Advertising Technologies

Our websites and tools may use cookies, pixels, tags, local storage, and similar technologies.

These technologies may support:

• Website functionality
• Form and calendar operation
• Security
• Remembering preferences
• Analytics
• Funnel and conversion measurement
• Advertising attribution
• Limiting repeated ads
• Retargeting or interest-based advertising, if enabled

Providers may include:

• GoHighLevel or LeadConnector
• Google, including Google Workspace and calendar services
• Meta, Facebook, or Instagram
• Zoom
• Namecheap and other domain or website infrastructure providers
• Website hosting providers
• Calendar providers
• Chat and communication providers

You can control some cookies through your browser. Blocking cookies may affect certain website features.

Do Not Track

Some browsers offer a Do Not Track setting. Because there is no universally accepted standard for traditional Do Not Track signals, our website does not currently respond to those signals.

Where required by applicable law and supported by our systems, we will honor applicable legally recognized opt-out preference signals.

9. How We Disclose Information

We may disclose personal information in the circumstances described below. We do not disclose personal information except as needed to operate our business, provide requested services, follow your instructions, protect legal or safety interests, or comply with applicable law.

Service providers

We may disclose personal information to trusted service providers that help us operate our landing pages, forms, customer relationship management systems, appointment scheduling, phone services, SMS and email communications, AI-assisted tools, automations, analytics, advertising, payment processing, cloud storage, security, technical support, and other business operations.

We may also disclose information to contractors and professional advisers who support our business. These parties may process information only as necessary to provide services to us or our clients, follow our instructions, or as otherwise permitted by law.

Client businesses

When DreamLight operates or supports a system on behalf of a client business, information collected through that system may be provided to or made available to the client and its authorized personnel. The client may have its own privacy practices governing how it uses that information.

At your direction

We may disclose information to another person or organization when you request, direct, or authorize us to do so.

Business transactions

Information may be disclosed in connection with a proposed or completed merger, financing, acquisition, sale, restructuring, or transfer of all or part of our business, subject to appropriate confidentiality and data-protection measures.

Legal, safety, and security purposes

We may disclose information when we reasonably believe it is necessary to:

• Comply with applicable law
• Respond to a valid legal request
• Protect our rights or property
• Protect our clients or users
• Investigate fraud, abuse, or security incidents
• Enforce an agreement
• Prevent harm

10. Sale, Sharing, and Targeted Advertising

We do not sell personal information for money.

We may disclose online identifiers, device information, and website activity to analytics or advertising providers if those technologies are enabled. Certain privacy laws may describe some advertising-related disclosures as “sharing,” “sale,” or targeted advertising even when no money is exchanged.

If an applicable law gives you the right to opt out of these activities, you may submit a request by emailing [email protected] with the subject line “Privacy Request.”

We do not sell or share SMS opt-in information or text-messaging consent for unrelated third-party marketing.

11. Sensitive and Health Information

Our general websites, landing pages, forms, chat tools, AI assistants, and SMS systems are not intended to collect:

• Medical records
• Diagnoses
• Treatment information
• Insurance information
• Social Security numbers
• Financial account credentials
• Government identification numbers
• Other highly sensitive or regulated information

Please do not submit this information through an ordinary inquiry, lead, chat, calendar, or SMS form.

DreamLight Marketing LLC is a marketing and automation provider. We do not claim that every DreamLight or third-party system is HIPAA-compliant.

We will accept or process protected health information only when the workflow has been specifically approved, a Business Associate Agreement has been executed where required, and the relevant systems, vendors, safeguards, access controls, and contractual arrangements have been reviewed.

12. Data Retention

We retain information only for as long as reasonably necessary to:

• Respond to inquiries
• Provide services
• Maintain client and business records
• Manage contracts
• Comply with legal, tax, accounting, or security obligations
• Resolve disputes
• Enforce agreements
• Follow client instructions

Retention varies by category:

• General inquiry records are retained while an inquiry is active and afterward as reasonably necessary for follow-up, recordkeeping, dispute resolution, or legal compliance.
• Client CRM information is retained for the service relationship and afterward as directed by the client, required by contract or law, or reasonably necessary to close the account and preserve required records.
• Call recordings and transcripts, when enabled, are retained only as long as reasonably necessary for the stated business purpose, client instructions, or legal and contractual requirements.
• SMS messages and consent records may be retained as needed to document consent, opt-outs, messaging history, and legal or carrier compliance.
• Payment and accounting records are retained for the periods required by applicable tax, accounting, contractual, and legal obligations.
• Analytics data is retained according to our business needs and the settings and retention controls of the applicable analytics provider.

When information is no longer needed, we may delete, de-identify, aggregate, archive, or restrict it.

Residual copies may remain temporarily in backups, logs, legal archives, or third-party systems. We cannot always guarantee immediate or complete deletion from every backup or provider system.

13. Data Security and Security Incidents

We use reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information we process.

These safeguards may include access controls, authentication, vendor controls, account permissions, monitoring, and security procedures.

No internet transmission, storage system, or security measure is completely secure. We therefore cannot guarantee absolute security.

If we identify a security incident involving personal information, we will investigate and provide notifications when required by applicable law.

14. Your Choices and Privacy Rights

You may contact us to request:

• Access to information we maintain about you
• Correction of inaccurate information
• Deletion of information
• A copy of certain information
• Withdrawal of consent, where applicable
• Marketing-email opt-out
• SMS opt-out
• Information about our privacy practices
• An applicable targeted-advertising or sale/sharing opt-out

We may need to verify your identity or authority before completing a request.

We may deny or limit a request when permitted or required, including when information must be retained for security, legal, tax, accounting, contractual, fraud-prevention, client-service, or recordkeeping purposes.

If the information is controlled by one of our clients, we may direct your request to the client or assist the client with its response.

Depending on where you live and whether an applicable privacy law covers DreamLight, you may have additional rights, including an appeal right. We will not unlawfully discriminate against you for exercising an applicable privacy right.

Submit privacy requests to:

15. Children’s Privacy

Our websites and services are intended for business owners, decision-makers, and adults. They are not directed to children.

We do not knowingly collect personal information online from children under 13. We also do not intentionally solicit information from anyone under 18 through our general business website.

If you believe a minor has submitted information to us, contact us. We will take reasonable steps to delete or restrict it, subject to legal requirements, security needs, backups, and technical limitations.

Client businesses that serve minors are responsible for implementing any notices, permissions, or parental-consent processes required for their services.

16. International Visitors

DreamLight’s website and services are directed primarily to users and businesses in the United States.

The fact that a website is accessible from another country does not mean that we intentionally offer services in that country.

If we begin intentionally offering services to, or monitoring individuals in, another jurisdiction, we may provide additional disclosures and rights as required.

17. Changes to This Policy

We may update this Privacy Policy as our services, technologies, vendors, or legal obligations change.

We will post the updated version and revise the effective or last-updated date.

For material changes, we may provide additional notice on the website, through the relevant service, or by direct communication when appropriate or required.

18. Contact Us

For privacy questions or requests, contact: