← Surfside CRM

Privacy & tracking

This is a pre-launch privacy overview. The operating business must add its legal identity, privacy contact, retention schedule, and applicable notices before collecting production leads.

What the CRM stores

Contact details submitted by a visitor, lead stages, sales values, notes, and attribution data captured by connected forms or call-tracking services. Call recordings are not copied into this CRM.

Consent and attribution

The website tracker starts with attribution storage disabled. The website’s consent manager must explicitly enable it. Declining tracking still allows a contact request to be delivered. Sources that cannot be established are marked Direct / unknown.

Advertising platforms

Qualified and won events can be sent to configured Google and Meta accounts only where advertising-data consent has been recorded. Matching email addresses and phone numbers are hashed before transmission; hashing does not make data anonymous.

Access and deletion

Only authorized workspace members can access lead records. Contact your service provider for access or deletion requests. Production launch requires an operational deletion and retention process.