Privacy Policy — Cannonball Club

Who we are and what this policy covers

Cannonball Club operates this website and member services for its Philadelphia and Huntingdon Valley locations. This policy describes website, inquiry, membership and related service information. Other sites you choose to visit have their own policies.

Information we collect and why

You provide contact details, membership applications, vehicle and storage information, service and event requests, communications, preferences, and any photos or documents you upload. We use these to respond to you, assess applications, provide requested services, manage membership and communicate with you.

Membership and service records may include agreements, invoices, payment status, orders, reservations and access or visit records. Payment providers process payment details. We use these records to administer services, billing, security and access, resolve disputes and meet legal obligations.

Our servers and service providers receive technical information such as IP addresses, browser/device details, request times and diagnostic records to operate and protect the service. With your optional permission, Google and Meta also receive public-website usage information as described below. Information may come from you, your browser, staff records and the providers used for your services.

Essential storage and optional tracking

Login sessions, security controls, portal handoffs, and your saved privacy preferences support the service or choices you request. Rejecting optional tracking does not prevent you from browsing, submitting an inquiry or using your account.

Google Analytics and first-party social traffic measurement share the Analytics choice; Meta advertising is a separate choice. Both choices are default-off. We do not load optional browser tags or collect social arrivals until the corresponding current choice is allowed. Continuing to browse is not consent. Choices are stored for six months in first-party preference cookies; a local browser record stores the choice, notice version and time. Older consent versions require a new choice. Clearing cookies or using another browser may require you to choose again.

Use Privacy choices on public pages or the controls on this page to reject or change optional tracking. Saving reloads the page to remove loaded vendor scripts. Withdrawal stops future optional tracking and attempts to remove accessible first-party Google and Meta tracking cookies; it cannot undo data already sent or remove cookies on another provider's domain. Contact us for requests concerning earlier data.

We treat Global Privacy Control and Do Not Track as a refusal of both optional categories, even if an earlier choice allowed them. Declining advertising also opts out of this website's Meta advertising sharing. You do not need to sign in to make these choices. These browser choices do not change essential service processing or your separate email/SMS preferences.

Optional website tracking is restricted to eligible public URLs, not login, member, admin, service or staff invitation screens. URLs with query strings, fragments, or unsafe entry referrers are skipped. Leaving a tracked public document for an excluded route unloads the optional scripts.

With JavaScript disabled, no Google Analytics tag or server-side Meta PageView is sent. A Meta page-view image may load on an eligible public response only with a current prior advertising permission cookie and no Do Not Track or Global Privacy Control request header. The image suppresses the page URL and referrer, including fragments the server cannot inspect. Enable JavaScript to change saved choices, or clear this site's cookies to remove prior permission.

Providers and disclosures

Google Analytics: if allowed, Google receives public-site usage, browser/device and cookie information to help measure website use. We disable Google advertising signals and advertising personalization in our tag configuration. Google processes information under its own policies.

First-party social traffic: links posted on Instagram, Facebook, LinkedIn, YouTube and TikTok reach a selected public page even if you reject tracking. With current Analytics permission and no supported privacy refusal signal, a visible browser arrival records the platform, selected public page, time and a random single-arrival identifier. Our traffic dataset contains no personal identifiers, IP addresses, user-agent strings, raw referrers or arbitrary URL queries/fragments. No social-platform account connection or member attribution is involved. Reports show consented tracked arrivals, not unique people, impressions or exact click totals, and begin at launch without backfill.

Meta Pixel and Conversions API: only with current advertising permission, Meta receives eligible public page views (PageView) and confirmed public inquiry outcomes (Lead) for advertising measurement and audience building. Lead events use only a fixed category: membership, storage, or private_event. A membership application or private-event inquiry counts after a successful submission; storage counts only after both required HubSpot and local submission stages succeed. Failed requests, validation errors and button clicks do not count as leads.

Browser advertising delivery may include Meta cookie identifiers, the eligible public URL, IP address and browser/device information. Server delivery includes the eligible public URL, IP address, browser user agent, event time and a random event ID shared with the browser to prevent double-counting. Inquiry Leads also include the fixed inquiry category, not your form answers. Server delivery can work when the Pixel is blocked, but does not bypass your advertising choice or supported privacy signals. Meta may associate received information with your Meta account and use it under its own policies.

We do not enable advanced matching or send names, email addresses, phone numbers, birthdays, vehicle details, free-text answers, uploaded photos, payment details, CRM/member identifiers, invitation or referral tokens, or purchase events through this advertising integration. Information you intentionally submit to us and our service providers for an inquiry is handled separately to respond to your request; rejecting advertising does not prevent that necessary processing.

Disclosure to Meta for targeted advertising may constitute a sale, sharing, or targeted-advertising disclosure under some privacy laws, even without a monetary payment. You can turn it off using Do Not Sell or Share My Personal Information in the controls below. This describes the website integration, not a waiver of rights you may have under applicable law.

HubSpot supports contact, membership and inquiry administration. Resend and OpenPhone/Quo support email and SMS communications. Billing, accounting and payment providers include Square and QuickBooks where those services are used. Hosting, database and file-storage providers support the website and uploaded records. Data is disclosed to these providers as needed for their functions.

Sentry supports operational error diagnostics. Browser session replay and browser performance tracing are disabled. Browser reports are reduced by removing user, request, breadcrumb and extra-context fields and replacing error-message text; diagnostic processing remains separate from optional advertising and analytics.

We may also disclose relevant information when required by law, to protect rights, security and safety, or in connection with a business transfer subject to applicable protections. External links, payments and media you choose to open can send information to their providers under their own policies.

Retention, security and international processing

Retention depends on the record's purpose: active membership and service administration, resolving requests or disputes, maintaining security, and applicable accounting and legal requirements. Privacy preference cookies expire after six months. Provider-held analytics, advertising and diagnostic records are subject to the applicable account settings and provider policies. Contact us for information about a particular record or to request deletion.

When advertising is allowed, a random inquiry-attempt identifier is kept in browser session storage to avoid counting unchanged retries twice. It contains no form answers and is removed after a confirmed response, advertising withdrawal, or the end of the browser session. A bounded server cache retains advertising event identifiers for up to 48 hours to suppress repeated delivery; this does not describe the retention of your inquiry records or Meta-held data.

Social arrival records are retained for 180 days and removed through routine cleanup. A signed navigation token expires after 30 minutes; before consent it is held only in page memory after removal from the URL, with no optional analytics browser storage or collection. After permission, the token may be retained in that browser history entry to prevent refreshes and retries from inflating counts. Withdrawal clears that entry and stops future collection; it cannot undo an already recorded arrival. Following a social link again creates a separate arrival.

We use access controls and other safeguards to protect information, but no system or transmission is guaranteed secure. Do not include passwords, payment card details or other unnecessary sensitive information in inquiry forms or ordinary email.

Our services are operated in the United States. Providers may process information in the United States and other countries, where privacy protections may differ. Contact us for information about the providers and safeguards relevant to your data.

Your requests and choices

Depending on your location and applicable law, you may have rights to access, obtain a copy of, correct or delete personal information; object to or restrict processing; withdraw consent; opt out of sale, sharing or targeted advertising; appeal a decision; or complain to a privacy regulator. Some requests are subject to lawful exceptions, including records needed for security, contracts or legal obligations.

For a request, email james@cannonballstorage.com with the subject Privacy request, describe what you need, and provide enough information for us to locate the relevant records. Do not send identity documents or passwords unless a secure verification method is arranged. We may need proportionate verification for access or deletion, but not for this browser's advertising opt-out. Authorized agents can contact us with evidence of authority. If you disagree with a response, reply requesting a privacy appeal.

We will not deny website access or requested services merely because you reject optional tracking. Marketing messages have their own unsubscribe or opt-out instructions; service messages needed to administer a request or account may continue.

Where consent is required for optional tracking, we rely on your choice. Other processing supports requested services, contractual steps, security and business administration, or legal obligations, as applicable. Contact us if you need more detail about the basis for a particular use.

Children, changes and contact

Our services are intended for adults, not children under 18. If you believe a child has provided personal information, contact us so we can investigate and address it.

We update this policy when practices change and display the updated date. Material changes to optional tracking purposes require a new choice rather than silently reusing earlier permission.

Privacy contact: james@cannonballstorage.com. Postal address: Cannonball Club, 1105 Frankford Ave, Philadelphia, PA 19125.