Privacy Policy

Effective Date: September, 2025 

Mamba Agency (doing business as Mamba SEO) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, share, and safeguard your personal information when you visit our website (mamba.agency) or use our services. It also explains your rights regarding your personal data and how you can exercise those rights. By using our website, you agree to the practices described in this Policy.

Information We Collect

We collect both information that you provide to us directly and data that is collected automatically when you interact with our site:

Personal Information You Provide: When you fill out our contact forms or sign up for our newsletter, we collect the information you submit. This may include your name, email address, phone number, company/organization, and any other details you choose to provide (for example, the content of your message or inquiry). We will also collect your email preferences if you subscribe to our communications (e.g., opting in to receive our newsletter). All such information is provided by you voluntarily.

Usage Data (Automatic Collection): When you visit our website, we automatically collect certain information about your device and how you use the site. This data may include your IP address, browser type, device type, operating system, referring website, the pages you viewed, the dates/times of access, and other technical information about your visit. We gather this usage data through cookies and similar tracking technologies to better understand how visitors navigate our site and to improve your experience. (See Cookies and Tracking Technologies below for more details on this.) For example, the LinkedIn Insight Tag (described below) may collect data such as the URL of the page you visit, the referrer URL, your IP address, your device and browser characteristics (user agent), and a timestamp of the visitbyonoy.com. This kind of information helps us analyze site traffic and user behavior in an aggregated manner.

Cookies and Similar Technologies: We use cookies, pixels, and web beacons to collect and store data when you use our site. Cookies are small text files placed on your browser that help us recognize you and remember your preferences. They also enable the functionality of the analytics and marketing tools we use (described in the next section). You have control over cookies – you can adjust your browser settings to refuse or delete cookies, but note that some parts of our site may not function properly without them.

How We Use Your Information

We use the collected information for the following purposes:

To Respond to Inquiries and Provide Services: If you contact us through a form or email, we will use your contact details and information provided to respond to your request or inquiry. For example, if you request a consultation or ask a question, we will use your information to communicate with you and provide the requested information or service.

To Send Newsletters and Marketing Communications: If you sign up for our newsletter or opt in to receive marketing emails, we will use your name and email address to send you our newsletter, industry updates, marketing materials, or other information we think may be of interest to you. You can unsubscribe from these communications at any time by clicking the "unsubscribe" link in the email or by contacting us (see Contact Us below).

To Improve Our Website and Services: We use usage data and analytics to understand how visitors use our website, which pages are most popular, how users navigate the site, and where we can improve. This helps us optimize our site’s layout, content, and functionality. For instance, we analyze aggregate trends (such as total visitor counts, traffic sources, and page visit patterns) to make our content more useful and to troubleshoot any performance issues.

To Analyze Performance and ROI of Marketing Efforts: We utilize certain tracking tools (like Google Analytics and the LinkedIn Insight Tag) to measure the effectiveness of our marketing campaigns. For example, if we run advertising on LinkedIn, the LinkedIn Insight Tag helps us track conversions (like how many users who clicked our LinkedIn ads filled out a form on our site)byonoy.com. This information guides our marketing strategy and spend. Similarly, Google Analytics provides reports on website traffic that help us assess our SEO and content performance.

To Manage Leads and Client Relationships: The personal information collected via contact forms may be stored in our Customer Relationship Management system (HubSpot) so that we can keep track of communications with you, follow up on your requests, and provide better client service. HubSpot also helps us ensure that if you are an existing client or lead, we remember your preferences and history with our agency.

To Ensure Security and Compliance: We may use information (including IP addresses and other identifiers) to maintain the security of our website, systems, and data. This includes monitoring for fraudulent or malicious activity and preventing unauthorized access. We also use data as needed to comply with legal obligations, such as keeping records for compliance or responding to lawful requests by authorities.

With Your Consent: If we ever need to use your personal information for a purpose that is not listed here, we will explain the purpose at the time of obtaining your consent, and we will only use it with your permission. You have the right to withdraw any such consent at any time.

Cookies and Tracking Technologies

How We Use Cookies: We use cookies and similar tracking technologies to collect automatic data about your browsing of our site. These technologies help us personalize your experience, remember your preferences, and analyze usage of our website. In some cases (where law requires), we will obtain your consent before using non-essential cookies (for example, through a cookie consent banner when you first visit our site).

Third-Party Analytics and Tracking Tools: We use the following third-party services on our website, which set cookies or use similar technologies to collect data:

Google Analytics: Google Analytics is a web analytics service provided by Google. It uses cookies to collect information about how visitors use our site, such as which pages are visited, how long users stay, and how they arrived at our site. Google Analytics helps us understand website traffic and usage patternssolar-quality-summit.com. The information generated by these cookies (which may include your abbreviated IP address, in countries where IP anonymization is enabled) is transmitted to and stored by Google, which may be on servers in the United States or other countries. We use this information to compile aggregate reports and to improve our website. Google may also use the data for its own analytics purposes. We have set Google Analytics to retain collected data for a limited period (the default retention period is 14 months)solar-quality-summit.com. You can opt-out of Google Analytics by installing the Google Analytics opt-out browser add-on, or by adjusting your cookie settings to refuse analytics cookies.

HubSpot: We use HubSpot (a customer relationship management and marketing platform by HubSpot, Inc.) on our site. HubSpot helps us manage contact form submissions, email subscriptions, and provides analytics on user engagement. The HubSpot tracking code may set cookies to recognize you if you return to our site and to track your interactions (such as pages you visit, forms you submit, etc.). HubSpot collects information such as your IP address and other online identifiers through its tracking cookieslegal.hubspot.com legal.hubspot.com. The data collected via HubSpot is stored in HubSpot’s servers and allows us to analyze website use (e.g., seeing what pages a lead visited before submitting a form) and to personalize our marketing communications. For example, if you have previously interacted with our site, HubSpot helps us tailor follow-up emails relevant to your interests. HubSpot acts as a service provider to us, and we use the information it provides solely for our internal business purposes (analytics and managing our communications with you). You can opt out of or block HubSpot tracking by refusing cookies in your browser or via our cookie consent tool.

LinkedIn Insight Tag: Our site includes the LinkedIn Insight Tag, a tracking technology provided by LinkedIn (LinkedIn Corporation for U.S. users, or LinkedIn Ireland Unlimited Company for users in the EU). This tag places a cookie in your browser that allows LinkedIn to collect data about your visit to our site for the purposes of conversion tracking and retargeting solar-quality-summit.com byonoy.com. The data collected through the LinkedIn Insight Tag includes information such as the pages you visit on our site, the URL and referrer, your IP address, device and browser characteristics, and timestamps of your visitsbyonoy.com. LinkedIn uses this information to provide us with aggregated reports about the effectiveness of our LinkedIn ads (for example, how many people filled out our form after clicking an ad) and to help us retarget ads to you on LinkedIn (if you are a LinkedIn member). We do not receive personal details about your LinkedIn identity; we only see anonymized or aggregated data. LinkedIn may combine data from your visit to our site with data from your LinkedIn account (if you are logged in) to show you relevant ads. All data collected through the Insight Tag is encrypted. The LinkedIn cookie typically has a lifespan of 6 months. We only use the LinkedIn Insight Tag with your consent (where applicable law requires it)byonoy.com. You can opt out of LinkedIn Insight Tag tracking by using your LinkedIn account settings (under Ads settings, you can adjust data sharing and advertising preferences) or by blocking cookies.

Your Choices: Most web browsers automatically accept cookies, but you can modify your browser settings to decline some or all cookies, or to alert you when cookies are being set. Please note that disabling cookies may affect the functionality of our site (for example, videos might not load, or you may have to re-enter preferences). In addition to browser controls, you can use opt-out mechanisms provided by some of our third-party analytics providers. For instance, Google provides a opt-out plugin for Google Analytics, and LinkedIn provides settings in your profile to opt out of targeted ads. We honor such choices and any global privacy controls as required by applicable law.

How We Share Your Information

We value your privacy. We do not sell your personal information to third parties, and we do not share your information with third parties for their own direct marketing purposes. In other words, your personal data is not traded or monetized by us. We also do not share your personal information for cross-context behavioral advertising (targeted advertising) without your consentgitkraken.com.

However, we do share certain information with third parties in the following circumstances, to run our business and provide services to you:

Service Providers: We may share your information with trusted third-party service providers who perform services on our behalf. These include the companies and software tools that power our website and operations, such as:
- HubSpot: which manages our contact forms, newsletters, and marketing analytics (as described above). When you submit a form, the information you provide (like your name, email, and message) is transmitted to HubSpot’s systems. HubSpot processes that data for us, for the purpose of storing the information and enabling us to respond and follow up. HubSpot also tracks website usage data for analytics (e.g., pages visited, as mentioned earlier). HubSpot acts under our instructions and is contractually obligated to protect your data.
- Analytics and Advertising Partners: such as Google (for Google Analytics) and LinkedIn (for the Insight Tag). These partners receive usage data through the cookies and scripts on our site. They process that data to provide us with reports or advertising services. For example, Google Analytics may process your usage information to compile web analytics reports for ussolar-quality-summit.com, and LinkedIn will process the Insight Tag data to provide us with ad conversion information. We have appropriate agreements in place with these providers (where applicable) to safeguard your information. They are not allowed to use your personal data for any purpose other than providing the agreed services to us. (Please refer to their privacy policies for more details on how they handle information: e.g., see Google's Privacy Policy and LinkedIn's Privacy Policy.)
Email and IT Providers: We may use third-party platforms for sending out our newsletter or other communications (for instance, if we use an email marketing service or our website hosting provider). These providers would have access to your email address and any necessary information to perform their functions (e.g., sending you an email on our behalf). They are not permitted to use your data for their own purposes.

Legal Requirements and Protection: We may disclose personal information if required to do so by law or in response to valid legal requests (such as a subpoena, court order, or government inquiry). We may also share information if we believe in good faith that such disclosure is necessary to comply with the law, protect our rights or property, protect your safety or the safety of others, or investigate fraud or security issues. For example, if required to meet national security or law enforcement requirements, we might have to provide data to authorities in accordance with applicable laws.

Business Transfers: If Mamba Agency (Mamba SEO) is involved in a merger, acquisition, sale of assets, financing, or other transfer of business ownership, personal information may be transferred to the involved third party as part of that transaction. We would ensure that any such party is bound to protect your personal data in line with this Privacy Policy. In the event of a business transfer, we will provide notice (e.g., via our website) if your personal data becomes subject to a new privacy policy.

With Your Consent: In any other scenario not covered above, if we need to share your information, we will only do so if you have given us explicit consent. You have the right to revoke such consent at any time.

No Sale of Personal Data: To reiterate, we do not sell personal information. We also do not share personal information for behavioral advertising in a way that is considered a "sale" or "share" under certain privacy laws. For example, under the California Consumer Privacy Act (CCPA), "sell" is broadly defined to include sharing personal data with third parties for valuable consideration, and "share" can include sharing for targeted advertising. We do not engage in such practicesgitkraken.com. Any data sharing we do is solely for the purposes stated above (providing our services, analytics, etc.), and with appropriate safeguards and agreements in place. If this practice ever changes, we will update this Policy and honor any legal requirements such as providing opt-out mechanisms.

International Data Transfers

We are a global service provider and the third-party services we use may be located in countries outside of your own. In particular, our website is operated from [insert your organization’s base location if known, e.g., the United States or EU], and many of our service providers are based in the United States. This means that if you are located in the European Economic Area (EEA), the United Kingdom, or another region with data protection laws, your personal information may be transferred to and processed in countries outside your home jurisdiction, including the United States.

When we transfer personal data out of the EEA/UK, we take steps to ensure that an adequate level of protection is afforded to it. Specifically, such transfers are done in compliance with applicable data protection laws (GDPR for Europe). Our service providers like Google, HubSpot, and LinkedIn have committed to protect European data by implementing appropriate safeguards. These safeguards may include:

Standard Contractual Clauses (SCCs): We sign the European Commission’s approved standard data protection clauses with recipients of the data where required. These clauses contractually bind the recipient to protect personal data according to EU standardsbyonoy.com.

Adequacy Decisions: In some cases, data may be transferred to countries that the European Commission has determined provide an adequate level of data protection (so-called "adequacy decisions"). For example, if a service provider is certified under frameworks recognized by the EU (such as a successor to the Privacy Shield, or the new EU-U.S. Data Privacy Framework), or if they are located in a country with an adequacy decision, transfers are permitted.

Other Safeguards: We may rely on other permitted legal mechanisms for international transfer and will always ensure that your rights and protections travel with your data.

You can contact us (see Contact Us below) if you have questions about the safeguards we have in place for international data transfers, or to request information about any specific mechanism.

Data Retention

We retain personal information for only as long as necessary to fulfill the purposes for which it was collected, as described in this Policy, unless a longer retention period is required or permitted by law. In practice, this means:

Contact Information: If you submit a contact form or inquiry, we will retain the information you provided (such as your name, contact info, and message) for as long as is needed to respond to and complete your request, and for a reasonable period thereafter in case further communication is necessary. If you become a client, we may retain your information for the duration of our business relationship. If you do not become a client, we may still keep your inquiry information for some time in case you have follow-up questions, but we will not keep it longer than necessary.

Newsletter Subscription: If you sign up for our newsletter or marketing emails, we will retain your email and related information until you unsubscribe or ask us to delete your data. Upon unsubscribing, we will remove you from our mailing list immediately, but we might retain your email on a suppression list (to ensure we respect your opt-out) or as required to demonstrate compliance with laws (e.g., proving that we had consent to send emails prior to your opt-out, if applicable).

Analytics Data: Data collected through Google Analytics, HubSpot, LinkedIn Tag, and other tracking cookies is retained according to those services' standard retention policies. For example, our Google Analytics data is set to be retained for approximately 14 months before it is automatically deleted from Google's serverssolar-quality-summit.com (this is a commonly used default retention period). Aggregated analytics reports may be kept longer than the raw data. HubSpot may retain website visit logs and analytics for a similar period, though we primarily use aggregated insights. We do not store raw log files with personal identifiers indefinitely; server logs (if any) are typically rotated and deleted after a short period unless needed for security analysis.

Legal Compliance and Protection: In some cases, we may need to retain certain information for longer if it’s necessary for legal compliance or legitimate business purposes. For instance, records of transactions or communications may be retained to comply with financial regulations or to resolve any disputes. Also, if required by law (such as tax laws or regulatory requirements) to keep data for a specified period, we will do so.

When we no longer have a legitimate need to process your personal information, we will securely delete or anonymize it. If deletion is not feasible (for example, because the data has been stored in backup archives), we will securely store the data and isolate it from further processing until deletion is possible.

Data Security

We take the security of your personal information seriously. We have implemented appropriate technical and organizational security measures to protect your data from unauthorized access, alteration, disclosure, or destruction. These measures include, for example:

Encryption of data in transit (our website is served over HTTPS, which means information you submit is encrypted between your browser and our server).
Firewalls and network security controls to prevent external attacks.
Access controls ensuring that only authorized personnel and service providers who need to know personal information (for the purposes described in this Policy) have access to it. Our team members are trained on the importance of privacy and security.
Regular updates and patching of our systems and software to protect against vulnerabilities.
Monitoring for potential security breaches and having incident response plans in place.

Please note, however, that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security. You should also take care with how you handle and disclose your personal information and avoid sending sensitive information via unencrypted email. If you have reason to believe that your interaction with us is no longer secure (for example, if you suspect a vulnerability on our site), please contact us immediately.

Your Privacy Rights

Depending on your location and the applicable privacy laws, you have certain rights regarding your personal data. We are committed to honoring your rights and have processes in place to enable you to exercise them. Below, we outline the rights that may apply to you:

Rights for Individuals in the European Economic Area (EEA), United Kingdom, and Similar Jurisdictions

If you are located in the EEA, UK, or another jurisdiction with similar data protection laws (such as those based on the GDPR), you have the following rights with respect to your personal data:

Right to Access: You have the right to request confirmation of whether we are processing personal data about you, and to obtain a copy of the personal information we hold about youbyonoy.com. This allows you to understand what data we have collected and to verify that we are processing it lawfully. We will provide you with a copy of your data in a commonly used electronic format, unless you request otherwise.

Right to Rectification: You have the right to request that we correct or update any inaccurate or incomplete personal data we hold about you. We encourage you to contact us if your information changes or if you believe any of the data is incorrect, and we will rectify it.

Right to Erasure (Right to be Forgotten): You have the right to request that we delete your personal data, provided certain conditions are met. You can ask us to erase your information, for example, if it is no longer necessary for us to retain it for the purposes it was collected, or if you withdraw your consent and no other legal basis for processing applies. We will honor such requests to the extent required by applicable law. Please note there are some exceptions – for instance, we might need to retain certain information to comply with a legal obligation or to establish, exercise, or defend legal claims.

Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances. This means we would hold onto the data but not actively use it. For example, if you contest the accuracy of the data or have objected to our processing (see below), you may request restriction while we verify the issue. Another example is if we no longer need the data but you need us to keep it for a legal claim, we will mark it as restricted so it’s not used for other purposes.

Right to Data Portability: You have the right to receive the personal data that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit that data to another controller (for example, to another service provider), where technically feasible. This right applies when the processing is based on your consent or on a contract with you, and the processing is carried out by automated means. We will assist with data portability requests by providing your data in a suitable format (typically CSV or JSON files).

Right to Object: You have the right to object to our processing of your personal information in certain situations. In particular, you have the right to object to processing your data for direct marketing purposes at any time. If you object, we will stop using your data for marketing. You also have the right to object when we are processing your data based on legitimate interests (or those of a third party), and you believe such processing impacts your fundamental rights and freedoms. In such cases, we will reconsider our processing in light of your objection, unless we have compelling legitimate grounds to continue (such as a legal requirement).

Right to Withdraw Consent: If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time. For example, if you consented to receive our newsletter, you can unsubscribe (withdraw consent) at any time, and we will stop sending it. Withdrawing consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, and it will not affect processing of your personal data conducted in reliance on lawful processing grounds other than consent.

Right to Lodge a Complaint: If you believe that we have infringed your data protection rights or processed your information unlawfully, you have the right to lodge a complaint with a supervisory authority in your country (for EU/EEA residents) or with the UK Information Commissioner’s Office (for UK residents). We would appreciate the chance to address your concerns directly before you do this, so we encourage you to contact us first, but this is your legal right. For example, in Portugal you may contact the National Data Protection Commission (CNPD), in the UK the ICO, in France the CNIL, etc., depending on your location.

To exercise any of your above rights, please contact us at data@mamba.agency with your request. We may need to verify your identity before fulfilling certain requests (this is to protect your information from unauthorized access). We will respond to your request within the timeframe required by law (generally within one month for GDPR-related requests, with the possibility to extend that period if necessary, and as soon as practicable for others). There is usually no fee for making such requests, but if a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on it as permitted by law (we will explain our reasoning in such case).

California Privacy Rights (CCPA/CPRA)

If you are a resident of California, you are protected by the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). Under the CCPA/CPRA, California residents have specific rights regarding their personal information:

Right to Know: You have the right to request that we disclose what personal information we have collected about you in the 12-month period prior to your request. This includes the categories of personal information we collected, the categories of sources of that information, the business or commercial purpose for collecting it, and the categories of third parties with whom we share personal informationgitkraken.com gitkraken.com. You also have the right to request the specific pieces of personal information we collected about you (essentially a data portability request similar to above).

Right to Delete: You have the right to request that we delete the personal information we have collected from you (and direct our service providers to do the same), subject to certain exceptions. Once we receive and confirm your verifiable request, we will delete (and notify our service providers to delete) your personal information from our records, unless an exception applies. For example, we may retain information needed to complete a transaction you requested, to detect security incidents, to comply with legal obligations, or other CCPA-recognized exceptions.

Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you. Upon verifying your identity and the accuracy issue, we will correct the information as you direct.

Right to Opt-Out of Sale or Sharing: We do not sell personal information, and we do not share your personal information with third parties for cross-context behavioral advertising purposesgitkraken.com. Therefore, the “Do Not Sell or Share My Personal Information” right is not applicable in our case because we do not engage in data sales or sharing as defined by the CCPA. We have not sold any personal information in the past 12 months. If our practices change in the future, we will update this policy and provide a means for you to opt-out. (Note: "Sharing" under CPRA refers to sharing data for targeted advertising. As described above, while we do use the LinkedIn Insight Tag for advertising analytics, we do not share your personal data in a way that identifies you to advertisers, and we rely on your consent for using that tag. We treat such data according to CCPA's requirements and do not monetize it.)

Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. This means, for example, we will not deny you services, charge you a different price, or provide a different level of quality of service just because you exercised your privacy rights. The CCPA prohibits businesses from retaliating against employees or job applicants for exercising these rights as well.

If you are a California resident and wish to exercise any of the above rights (to know, delete, or correct), you or your authorized agent can submit a verifiable consumer request to us. To do so, please contact us at data@mamba.agency with the subject line "California Privacy Rights Request" and let us know what you are requesting. In order to protect your information, we will need to verify your identity – this may involve confirming personal details we already have on file, or asking for additional information as necessary to reasonably verify you (for example, we might ask for confirmation of your email address or other information associated with your interactions with us). Any information you provide for verification will only be used to verify your identity or authority to make the request.

We will acknowledge your request within 10 business days and aim to respond to verified requests within 45 calendar days, as required by CCPA. If we need more time (up to a total of 90 days), we will inform you of the reason and extension in writing. Our response will cover the information requested or the action taken (such as deletion), or if we must deny the request due to an applicable exception, we will explain the basis for the denial. For deletion requests, we will specify the manner in which we deleted your data (or, if an exception applies, the reason we cannot delete certain data). For requests to know, we will provide the information for the preceding 12 months from the date of your request.

If you have any questions about your California rights or our privacy practices, you can also contact us at the email provided in the Contact Us section below.

Shine the Light (California Civil Code §1798.83): Separately from CCPA, California’s "Shine the Light" law allows users who are California residents to annually request information about our disclosure of certain categories of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their own direct marketing purposes without consent. Therefore, we believe our practices fall under the exemption in §1798.83(c)(2) for companies that only share data with third parties for their own uses consistent with one of the exceptions (like for service providers). If you have questions about this, you may contact us for more information.

Children's Privacy

Our website and services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 years old. If you are under 13, please do not submit any personal information through our site. If we learn that we have inadvertently collected personal data from a child under 13 (or under the applicable age of consent in certain jurisdictions, which may be 16 in the EEA for example), we will promptly take steps to delete such information from our records. Parents or guardians who believe that we might have information about a minor child should contact us, and we will ensure that the data is removed.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please do not hesitate to contact us:

Email: data@mamba.agency

(This email can be used for any privacy-related inquiries, including requests to access or delete your data, to withdraw consent, or to ask for more information about our data practices.)

We will respond to your inquiry as soon as reasonably possible, and at most within any timeframe required by law. Your privacy is very important to us, and we welcome your feedback.

Changes to this Privacy Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make significant changes, we will notify users by posting a prominent notice on our website or by other appropriate means. The "Effective Date" at the top of this Policy will indicate when the latest changes were made. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Your continued use of our website after any changes to this Privacy Policy constitutes your acceptance of the updated terms (to the extent permitted by law). If we seek to use your personal data for a new purpose not originally disclosed, we will endeavor to notify you and, if required, obtain your consent.

Thank you for reading our Privacy Policy. We are dedicated to safeguarding your personal information and upholding your privacy rights. If you have any further questions or concerns, please contact us at data@mamba.agency.