Privacy policy.

BCM Results is one person, Brandon Medina, working from Massachusetts in the United States. This page says in plain words what this site collects about you, where it goes, what I do with it and how to have it removed.

Last updated: September 21, 2026.

Who is collecting it

I am Brandon Medina. I run BCM Results by myself, with no staff and no sales team. The only address for anything on this page is [email protected]. When I write "I" below, that is me, personally, reading and handling what you send.

What the forms collect

Contact details are collected when you submit a form or approve an AI-assisted request. Hosting and analytics also process information when you browse, as described below. The forms on this site, depending on the page, ask for:

• Your name and your business name.
• Your email and, on some forms, your phone. Most phone fields are optional; the Google Maps audit form requires one.
• Your website or Google listing and your city.
• Your industry and your current monthly marketing spend, chosen from a list.
• Your notes on what you need help with, and how you found me.

The newsletter form asks for a first name and an email only. Every form also has a hidden field people never see; if a bot fills it in, the message is dropped.

Where it is stored

Submitted details are stored in this site's Cloudflare D1 database and copied to Cloudflare KV for handling enquiries and newsletter signups. The record includes what you submitted, its source page or tool, a time and a receipt used to prevent duplicate submissions. Newsletter records are kept separately from enquiries; sending an enquiry does not subscribe you.

The application uses a keyed hash of the connecting IP address to limit submissions to five distinct requests per UTC day across forms, newsletter and AI tools. It does not put raw IP addresses or browser identifiers into these submission records. The daily limit resets each day; the underlying receipt records do not automatically expire after a day. Cloudflare separately processes request information to host and protect the site.

A push notification contains a receipt reference, not your name, email or message. I read the submitted details in the site's private storage. There is no public tool for reading enquiries or subscribers.

What I use it for

Three things, nothing else:

1. Replying to you. I reply within 2 business days, and it is me replying.
2. The free marketing analysis you asked for. To write it I look at the website and the Google listing you gave me, the way any customer would.
3. The newsletter, only if you signed up for it on the newsletter page. Sending a lead form does not put you on any list.

I do not add you to a follow up sequence, and I do not upload your email anywhere to build an ad audience.

Analytics, session recordings and cookies

The site offers Google Analytics 4 to measure visits and Microsoft Clarity to understand clicks, scrolling and page interactions through heatmaps and session recordings. Neither vendor's analytics script loads until you select "Accept analytics". Clarity's project-level Cookies setting is off so the site's consent choice controls whether analytics storage is granted. If you accept, those services process usage and device information and may use cookies or similar identifiers before any form submission. Advertising consent remains denied. Analytics are separate from the private enquiry records.

Accepting and rejecting are both available in the analytics choice. You can change your choice using "Analytics settings" in the footer. Your choice is stored in your browser for up to 180 days; clearing browser storage resets it. Rejecting after acceptance clears accessible first-party Google Analytics and Clarity cookies and reloads the page without their scripts. It does not erase data already collected by those providers. A Global Privacy Control signal keeps these optional analytics off. If JavaScript or browser storage is unavailable, the forms still work and analytics do not start automatically.

Clarity masks form inputs. The AI request-review dialog is also explicitly marked for masking because it displays the details you are about to send. See Microsoft's data collection documentation and cookie information. You can block analytics in your browser; browsing and sending a request do not depend on analytics being available.

The live city badge

Some pages show a small badge with an approximate city supplied by Cloudflare from the incoming request. This does not request your device's precise location. The city endpoint does not save the result in the enquiry database. Because the badge becomes part of the page, enabled session-recording analytics may observe that displayed text.

What I do not do

I do not sell or rent your submitted contact details. Service providers process information to operate the site: Cloudflare hosts it and stores submissions, the notification service carries receipt alerts, and Google and Microsoft process the analytics described above. Do not include passwords, payment details or other sensitive information in a request.

How to be removed, and how long I keep it

Email [email protected] from the address you used to request a copy, correction, removal or newsletter unsubscribe. Removing a submission requires clearing its active records from both Cloudflare D1 and KV; deleting only one copy is not sufficient. I handle these requests manually and confirm by reply. Submission records currently have no automatic expiry. Hosting backups and analytics records have separate provider retention settings; this page does not promise immediate erasure from backups or identify anonymous analytics sessions from an email address.

Children

This site is for owners of local businesses. It is not aimed at anyone under 18, and I do not knowingly collect anything from a child. If you believe a child sent me something, email me and it comes out the day I read your message.

Changes to this policy

If the way the site collects or stores something changes, this page changes with it and the date at the top moves. I do not email about policy updates; this page is the record.

Related pages

The agreement itself, with the scope, the flat rate, the 90 day billing pause and the exclusivity clause, is on the terms of service page. What I do and how to start is on the home page. Questions about anything above: [email protected].