Sherpa Consulting Agency, S.A. (“we”, “our”, “us”) is committed to protecting the privacy of our clients, users, and website visitors. This Privacy Policy explains how we collect, use, store, and protect personal information when you interact with our website www.sherpaconsultingagency.com, our services, or our Facebook App integrations.
By using our website or services, you agree to the terms of this Privacy Policy.
1Information We Collect
We may collect the following types of information:
1.1 Information You Provide Directly
- Name
- Email address
- Phone number
- Company name
- Marketing or lead form responses
- Any information submitted through contact forms or CRM integrations
1.2 Information Collected Automatically
When you visit our website, we may collect:
- IP address
- Device information
- Browser type
- Pages visited
- Cookies and tracking technologies
1.3 Facebook Lead Ads & Meta API Data
When you interact with our Facebook or Instagram ads, or authorize our app through Meta, we may collect:
- Lead form responses
- Email, phone number, name
- Campaign and ad set metadata
- Ad engagement metrics
This data is collected only with your explicit consent provided through Facebook/Instagram.
1.4 Data from Google APIs
When an authorized Sherpa Consulting Agency account connects Google services to Sherpa OS, we access, on behalf of clients who hired us under a service agreement:
- Google Ads: account and campaign identifiers, settings and status, performance metrics (impressions, clicks, conversions, cost) and the status of conversion actions.
- Google Analytics 4 (read-only): the list of properties the agency account can access and aggregated daily event counts (for example, page views and lead-form submissions).
- Google Tag Manager (read-only): metadata of the published version of each container.
We do not access or store data that identifies the end users of our clients' websites, and we never modify Google Analytics or Google Tag Manager configurations.
2How We Use Your Information
We use the information we collect to:
- Deliver our digital marketing and software development services
- Sync leads into CRM tools or third-party platforms
- Respond to your inquiries
- Improve our advertising campaigns
- Optimize user experiences
- Send marketing communications (with your consent)
- Fulfill our legal obligations
Data received from Google APIs is used exclusively to operate and report our clients' advertising campaigns and to detect when a client's website stops sending analytics or conversion data (for example, after tracking code is removed), so our team can fix it.
We never sell your personal information.
3How We Share Your Information
We may share your data only with:
- Trusted service providers (CRM platforms, analytics tools)
- Contractors assisting in delivering our services
- Facebook/Instagram via API integrations
- Authorities if required by law
Sherpa OS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, use it for advertising, or share it with third parties outside the client service relationship.
All partners are required to comply with data protection standards.
4Data Security
We take appropriate administrative, technical, and physical measures to protect personal data, including:
- Secure servers
- Encrypted data transfers
- Access controls
- Compliance with GDPR, CCPA, and international privacy standards
However, no system is 100% secure and we cannot guarantee absolute protection.
5Data Retention
We retain personal information only as long as necessary for business purposes or legal compliance. When no longer required, data is securely deleted.
6Data Deletion Instructions
If you have interacted with our Facebook App or submitted information through Facebook Lead Ads and wish to request deletion of your personal data, you can remove your data directly through your Facebook account under:
Settings & Privacy → Apps and Websites → Active Apps → Select our App → Remove
You can revoke Sherpa OS's access to your Google account at any time at https://myaccount.google.com/permissions. OAuth credentials are stored encrypted at rest and deleted when the connection is removed or the client relationship ends.
7Your Rights
Depending on your jurisdiction, you have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion
- Object to processing
- Withdraw consent
- Request data portability
To exercise any of these rights, contact: info@sherpaconsultingagency.com
8International Data Transfers
Your information may be transferred to and processed in countries outside your jurisdiction. We ensure such transfers comply with applicable data protection laws.
9Children’s Privacy
We do not knowingly collect data from persons under 18. If data is inadvertently collected, we will delete it upon request.
10Updates to This Policy
We may update this Privacy Policy periodically. Updated versions will be posted on our website with the “Last Updated” date.
11Contact Information
If you have any questions about this Privacy Policy or data handling practices, contact us at:
Sherpa Consulting Agency, S.A.Email: info@sherpaconsultingagency.com
Website: sherpaconsultingagency.com