Skip to content
Terramand

Legal

Privacy notice

What we collect, why we collect it, and the choices you have. Written to be read, not to be survived.

Last updated September 2026

Draft — requires attorney review

This document is an internal working draft prepared during platform development. It has not been reviewed or approved by legal counsel, is not a statement of Terramand’s legal position, and must not be relied upon by visitors or clients. It will be replaced by a counsel-reviewed version before the site is published publicly.

Who we are

Terramand is a division of Surpless, Dunn & Co. ("SDC", "we", "us"). This notice covers the marketing site at www.terramand.com, any tools made available on it, and the client portal where it is enabled.

What we collect

Information you give us. When you submit a form on this site we collect what you enter: name, business email, phone number, company name, website URL, industry, city and state, and your message. We ask for the minimum needed to reply usefully.

Information collected automatically. Pages viewed, referring URL, campaign parameters (utm_source, utm_medium, utm_campaign, utm_content, utm_term), advertising click identifiers (gclid, fbclid) when present in the URL, and browser and device type. Approximate location may be derived from your IP address by our hosting provider's standard request logs.

Client engagement data. For clients, we process data from systems you connect — CRM records, advertising accounts, website analytics, review platforms, and, where configured, call tracking — under the terms of your service agreement.

Cookies and similar technologies

We use two first-party cookies:

  • tm_attr — stores your first-touch and latest-touch campaign attribution as JSON for 90 days, so we can tell which marketing brought you here.
  • tm_consent — records your analytics choice for 180 days.

Optional analytics scripts load only after you choose "Allow analytics" in the consent banner. If you decline, no measurement scripts are loaded and no analytics events leave your browser. You can change your mind by clearing cookies for this site.

We do not use third-party advertising retargeting pixels on this site without consent.

How we use information

  • To reply to your inquiry and arrange a strategy session.
  • To generate and deliver the output of any tool you use on this site.
  • To understand which marketing channels bring qualified inquiries, in aggregate.
  • To deliver, support and improve services for clients under contract.
  • To meet legal, tax and accounting obligations.

We do not sell personal information, and we do not share your contact details with other companies for their own marketing.

Where it is stored and who we share it with

  • Hosting. Form submissions are stored on Amazon Web Services infrastructure in the US East (Ohio) region (us-east-2).
  • Notification. A copy of each submission is emailed to Terramand staff so a person can reply.
  • CRM. Where our CRM (HubSpot) is connected, submissions are also recorded there. When it is not connected, they are held only in our own storage.
  • Analytics providers receive data only where you have consented.
  • Legal and safety disclosures where required by law.

How long we keep it

Inquiry records are retained while there is an active business relationship and for a reasonable period afterwards for accounting and legal purposes. Client engagement data is retained per your service agreement, and deleted or returned on request at the end of the engagement.

Your choices and rights

  • Access, correction and deletion — send a request through the contact form and we will act on verified requests.
  • Analytics consent — decline in the banner, or clear cookies to be asked again.
  • Marketing email — every marketing message carries an unsubscribe link.
  • Do Not Track / Global Privacy Control — we treat a GPC signal as a decline of non-essential analytics.

Residents of certain states and countries have additional rights. Contact us and we will honor applicable requests regardless of where you live.

Call recording

Where call tracking and recording are configured for a client, recording follows the consent laws of the relevant state. Disclosure language is agreed with the client before recording is turned on.

Children

This site is intended for business owners and operators. We do not knowingly collect information from anyone under 18.

Security

Data is encrypted in transit and at rest. Access is limited to staff who need it. No system is perfectly secure; we will notify affected parties of a material breach as required by law.

Changes

We will post the updated date at the top of this page when this notice changes materially.

Contact

Questions about this notice, or a request regarding your information, can be sent through the contact form.