What I collect on this site, and how to get it deleted

This page is the honest version of how allgusto.com treats the people who visit it and the people who write in. I run All Gusto. When you use the contact form, I collect a short set of business details so I can answer you about HubSpot work. That submission writes to All Gusto's own HubSpot portal. I do not sell it. If you want it changed or deleted, you ask me, and I do it.

This is not a privacy policy for a client's HubSpot portal. If we already work together, the records inside your portal are yours. They are covered by your HubSpot subscription and by the Statement of Work, not by this page. This page is for the marketing site.

In scope: what the live contact form collects, why, where the record goes, the scripts this site loads, that I do not sell the contact information, and how to ask me to delete it. Out of scope: a Data Protection Officer, an EU representative, a law firm letterhead, GDPR recitals I cannot stand behind, and California "do not sell or share" language I have not verified against a statute. If a later version needs those, I will say so in writing. I will not invent them here.

What the contact form actually collects

I opened the live form on Contact and the same form in the homepage Get in Touch modal on 31 August 2026. Required fields are Business Email, First Name, and Last Name. Phone Number is on the form and is not marked required. There is a free-text field labeled "What's your biggest challenge in sales and marketing?" That field is optional. The site asks for a business email. A consumer mailbox is rejected in the browser and is not sent.

When a real submission goes through, the browser posts email, firstname, lastname, phone if you filled it, and message if you filled it, plus the page URL and page title as HubSpot form context. The post goes to HubSpot Forms for portal 23793461. That is All Gusto's HubSpot portal, the same portal ID HubSpot puts on the page headers.

The form also has a hidden "Company Website" field. It is a honeypot. If a bot fills it, the page shows "Message sent" and does not post to HubSpot. A submission that fires in under a few seconds of first focus is treated the same way. Those are spam checks. They are not extra contact fields I keep.

I do not collect payment card numbers on this site. There is no checkout on allgusto.com.

Why I collect it, and where it goes

I collect that information so I can reply. The usual next step is an email from me, sometimes a call, about whether HubSpot implementation, a portal audit, a migration, or something else is even the right work. I am not building a newsletter list off this form, and I am not running a partner referral marketplace with your name on it.

The record lands in All Gusto's HubSpot as a form submission. HubSpot is the system I use to keep that contact, see that you wrote in, and write back. HubSpot's own privacy policy describes how HubSpot handles customer data when it acts as a processor for a customer like All Gusto. I opened that policy. It is here: HubSpot Privacy Policy. Their Data Processing Agreement, which I also opened, says HubSpot processes Customer Personal Data as a processor on the customer's instructions: HubSpot Data Processing Agreement.

I read the mail. I am the person who does the work. There is not a junior queue and there is not an offshore pod sitting on inbound. If you write in, you are writing to me.

I will also see whatever you typed in the challenge field. Treat that box like an email to me. Do not paste credentials, customer lists, or anything you would not want sitting in a CRM.

I do not sell it

I do not sell the contact information you send me. I do not list it, rent it, or hand it to another HubSpot partner so they can pitch you. I do not put your email into a co-marketing deal.

That is a business fact about All Gusto. It is not a California Consumer Privacy Act notice, and I am not using "sell" or "share" as those words are defined in that statute. I have not done the legal analysis that page would need, so I am not publishing that analysis.

I may use the record to answer you, to keep a thread if we talk again, and to write a Statement of Work if we decide to work together. If a lawyer, a bank, or a government makes a lawful demand I have to meet, I will meet it. I am not going to pretend otherwise.

Your information is not a lead I farm out. If we do not work together, you can still ask me to delete the contact, and I will.

What the site loads besides the form

allgusto.com is a HubSpot CMS site on portal 23793461. The pages I opened load three kinds of third-party tooling in addition to the form post.

HubSpot's tracking script is in the HTML (`js.hs-scripts.com/23793461.js`). HubSpot uses that class of script to measure visits to a customer's site. HubSpot's privacy policy covers what HubSpot does with website visitor data, including log files and tracking code. I have not verified, in the live portal, whether HubSpot Intent data sharing is switched on. Treat that switch as unverified.

Google Analytics is in the HTML as measurement ID `G-SC0HY8J09X`. The page configures that ID. I did not open the Google Analytics admin, so I have not verified ads linking. Google's privacy policy for what Google collects through its services, including analytics on other people's sites, is here: Google Privacy Policy.

The contact page response I fetched was served through Cloudflare. That response set `__cf_bm` and `_cfuvid` cookies. Cloudflare's privacy policy is here: Cloudflare Privacy Policy. HubSpot documents that HubSpot-hosted sites use Cloudflare. I am describing the cookies I actually received, not a cookie table I invented.

I do not run a cookie banner on the pages I opened, and I did not find a live privacy or terms link in the footer. That is a gap this page is meant to close. It is not an argument that the site is cookieless. It is not.

How to change it or delete it

Email derek@allgusto.com, or use the contact form and say you want the record changed or deleted. Tell me the business email you used. I will look it up in All Gusto's HubSpot and handle it.

If you want it deleted, I will delete the contact in that portal, subject to anything I am required to keep for a signed Statement of Work, an invoice, or a lawful demand. I do not have a self-serve privacy portal, a ticket queue, or a 45-day SLA theater. I am one person. I will do the deletion when you ask.

If you emailed me directly instead of using the form, say so. Mail sits in my inbox. I will search it.

This page does not reach into a client's HubSpot. If you are an employee at a company that hired All Gusto, and you want a record removed from that company's portal, ask your operator. I will not pull records out of a client portal because someone filled in this site's form.

What this page is not

This is not legal advice. It is not HubSpot's policy. It is not a promise about how HubSpot, Google, or Cloudflare run their own companies. Those companies publish their own terms. I linked the ones I opened.

This is not a description of client work. I will not name a client here, and I will not describe a portal in a way you could recognize. Who we are is on About. The terms say the site is information, and that writing in is not a contract until there is a Statement of Work.

I will update this page when the form, the scripts, or the practice changes. The date at the bottom is when I last checked the live site for this draft.

FAQ

Do you sell my email?

No. I do not sell the contact information from this site, and I do not hand it to another HubSpot partner. If that ever changed, this page would have to change first, and I would owe you a straight sentence about it. It has not changed.

Where does the form go, exactly?

To All Gusto's HubSpot portal, ID 23793461, as a HubSpot form submission. I opened the live page source on 31 August 2026. The submit URL is HubSpot's Forms API for that portal. After it lands, I read it and I reply. HubSpot's processor terms for customer data are in the HubSpot DPA I opened.

How do I get you to delete it?

Email derek@allgusto.com from the address you used, or write in through contact and say delete. I will find the contact in our HubSpot and delete it unless I am required to keep a copy for a signed SOW, billing, or a lawful demand. There is no portal login for this. There is me.

Why do you require a business email?

Because this site is for marketing and RevOps leads who run HubSpot at a company, not for a consumer list. The form says Business Email. The script rejects a free mailbox before it posts. If you only have a personal address and you still need to reach me, email derek@allgusto.com and say so.

Is this the privacy policy for my company's HubSpot?

No. This page covers allgusto.com. Your company's HubSpot is your company's system. HubSpot's product privacy and your own notices cover the people in that portal. A Statement of Work covers the work I do inside it. Do not send me a deletion request for a client portal through this form and expect me to go looking.

What cookies and scripts should I assume are on the site?

As of the 31 August 2026 fetch: HubSpot's tracking script for portal 23793461, Google Analytics `G-SC0HY8J09X`, and Cloudflare cookies `__cf_bm` and `_cfuvid` on the response. I have not published a full cookie table from a logged-out browser session, so treat named HubSpot and Google cookies as unverified beyond those scripts being present. You can block scripts in your browser. Some of the site will still load. The form may not.

Do you keep this forever?

I have not published a retention number because I have not measured one I can stand behind. I keep a contact while it is useful for answering you or for work we agreed in an SOW. If you ask me to delete it, I delete it, with the exceptions above. I will not invent "we delete after 18 months."

Who do I contact?

Derek Reynolds, All Gusto, LLC. Email derek@allgusto.com. The contact form is the same inbox in practice. I have not published a mailing address on the live site, so I am not inventing one here.

Last checked against the live site: 31 August 2026.