Privacy Policy

This policy explains what personal information Method 21 collects, why we collect it, who we share it with and what rights you have over it. It applies to method21.com and to the inquiries, proposals and client work that follow from it.

Last updated: 26 August 2026

Who Is Responsible for Your Information

Method 21 is the controller of the personal information described here. We are a digital marketing agency based in Houston, Texas.

The Information We Collect

We collect only what we need to answer an inquiry and deliver work. There are three categories.

We do not collect payment card numbers on this website. Invoicing is handled separately and card details, where used, are processed by the payment provider rather than stored by us.

Why We Collect It

Each category has one purpose and we do not repurpose data for something you would not expect.

• To Respond to You
  If you ask us a question or request a quote, we need your contact details to reply.
• To Deliver Services
  Client work requires ongoing communication and access to the systems and data a project depends on.
• To Keep the Site Running and Secure
  Server logs let us diagnose faults and identify abuse.
• To Understand How the Site Is Used
  Analytics and advertising measurement show which pages are read, which campaigns produce inquiries and where the site frustrates people.
• To Meet Legal and Accounting Obligations
  Contracts and invoices have to be retained.

Where the EU or UK GDPR applies, our lawful bases are legitimate interests for responding to inquiries and securing the site, contract performance for client work, legal obligation for record keeping and consent for analytics and advertising cookies where consent is required.

Does Method 21 Sell Your Personal Information?

We do not sell personal information. Advertising measurement tools like the Meta pixel and Google Ads tags can count as sharing under some state laws; every one of them is listed in the Cookie Policy, all of them can be blocked, and we honor Global Privacy Control signals and browser opt outs as opt out requests.

Who We Share Information With

We share personal information only with service providers who process it on our behalf, and only to the extent they need it.

We may also disclose information where the law requires it, or where it is necessary to establish or defend a legal claim. If Method 21 is ever sold or merged, client and inquiry records would transfer as part of that business.

How Long We Keep It

• Inquiries That Do Not Become Projects:
  up to two years, so we can pick up a conversation that resumes later.
• Client Records:
  for the life of the engagement and seven years afterwards, which covers contractual and tax record keeping.
• Server Logs:
  a rolling window measured in weeks, then overwritten.

Does This Site Use Cookies or Tracking?

Yes. The site runs analytics, advertising measurement and lead tracking tools, each listed in the Cookie Policy along with the cookies it sets and how to control or block it. Where a consent banner is required for your region, these tools do not fire until you consent.

M21 Platform and Google User Data

M21 Platform is the client reporting application operated by Method 21 and described at M21 Platform. This section applies to that application rather than to this website, and it governs data obtained through Google APIs.

A client, or a Method 21 staff member acting with the client's permission, connects the client's own Google accounts to M21 Platform through Google's consent screen. Nothing is accessed until that consent is given, and consent is granted per product rather than in a single block.

What the application accesses. Only the products a client chooses to connect, and only the data needed to produce their reports.

How it is used. Data from connected accounts is used for one purpose, which is producing that client's own reports and dashboards inside M21 Platform. Name and email address are used to identify the account and to send report notifications. The application does not modify anything in a connected account. Campaigns, budgets, bids, properties and listings are read and reported on, never edited.

How it is stored. Retrieved data is held in access-controlled infrastructure operated for Method 21 so that historical reports remain available across reporting periods. It is visible only to the client it belongs to and to the Method 21 staff assigned to that client. Access tokens are stored encrypted.

Who it is shared with. Nobody. Data obtained through Google APIs is not sold, is not shared with third parties, is not used for advertising or advertising targeting, and is not used to develop, improve or train generalized artificial intelligence or machine learning models. It is not transferred to any other application.

Limited Use. M21 Platform's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Withdrawing access and deleting data. A connection can be removed at any time from inside M21 Platform, or from the user's own Google account permissions page. Either action immediately stops further access. Data already retrieved is deleted on request, and is deleted when a client engagement ends. To request deletion, contact us using the details under Contact About Privacy below.

Your Rights

Depending on where you live, you have some or all of the following rights. We honor them for everyone who asks, regardless of location.

• Access
  Ask what personal information we hold about you.
• Correction
  Ask us to fix anything inaccurate.
• Deletion
  Ask us to delete it, subject to records we are legally required to keep.
• Portability
  Receive a copy in a usable format.
• Opt Out
  Tell us to stop sending you marketing email, at any time.
• Appeal
  If we decline a request, ask us to reconsider.

Texas residents hold these rights under the Texas Data Privacy and Security Act. California residents hold comparable rights under the CCPA as amended by the CPRA, including the right not to be discriminated against for exercising them. Residents of the EU and UK hold them under the GDPR.

To exercise any of them, call (832) 429-6983 or write to us at the address above. We will respond within 45 days. If we need longer we will tell you why before that deadline passes. We may need to verify your identity first, so that we do not disclose your information to someone else.

How We Protect Information

Our sites run over encrypted HTTPS connections. Access to client systems and records is limited to the people working on that account, and administrative access requires individual accounts rather than shared credentials. No system is perfectly secure, and we do not claim otherwise, but we treat client data as the confidential business information it is.

Do You Collect Information From Children?

No. Our services are sold to businesses. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, call us and we will delete it.

Changes to This Policy

This policy changes when our practices change, and before the change takes effect where that is possible. The date at the top of this page always reflects the current version.

Contact About Privacy

Call (832) 429-6983, use our contact page or write to the address above. The principal handles privacy questions directly.