Last updated: September 14, 2026

1. Who we are

Acorn To Oak Media Group, LLC is a digital marketing agency based in New Jersey. We are the controller of the personal information described in this notice, which means we decide why and how it is used.

Company: Acorn To Oak Media Group, LLC
Address: 560 Main St., Suite 1C, Loch Arbour, NJ 07711
Privacy contact: Melissa Ambrose, melissab@a2oak.com
Telephone: 732-864-6552

2. What this notice covers

This notice applies to a2oak.com and to the marketing services we operate for our own business. It explains what we collect about you, why, who we share it with, and what you can ask us to do about it.

It does not cover websites we build or manage for clients. Those sites publish their own privacy notices, and the client is the controller of information collected there.

3. Information we collect

We collect the following categories of personal information:

Identifiers. Real name, alias, postal address, email address, telephone number, IP address, and other online identifiers.
Professional information. Job title, employer, industry, and company size.
Commercial information. Products or services you have considered, inquired about, or purchased.
Internet activity. Pages viewed on our site, how you arrived, how long you stayed, and how often you return.
Inferences. Interests and preferences drawn from the above, used to judge whether what we offer is relevant to you.

We do not knowingly collect sensitive personal information such as financial account numbers, health information, biometric data, or precise geolocation, and we do not sell it.

4. How we identify website visitors

We use a visitor identification service supplied by Visual Visitor, LLC. When you visit a2oak.com and cookies are allowed, that service can match your visit to an existing record and tell us who you are, typically your first name, last name, email address, and a number of additional data points such as your employer and professional role.

It works by matching signals from your visit against an identity database built from publicly accessible sources, licensed third-party data, and data collected across the network of websites that use the same service. It does not require you to fill in a form.

We use it to understand which organisations are interested in our services, to prioritise sales follow-up, and in some cases to send marketing email. Where we email you as a result, you can unsubscribe from any message and we will stop.

Three limits apply:

Identification operates on visitors located in the United States only.
It runs only where cookies have been allowed. See section 5.
You can opt out of it entirely, including retrospectively. See section 14.

If you would rather we did not do this, decline cookies on the banner, or use the opt-out routes in section 14. Neither affects your ability to use the site.

5. Cookies and your consent

When you first arrive at a2oak.com you are shown a banner asking whether to allow cookies, with a link to this notice. Nothing in section 4 happens unless you allow them.

We use cookies and similar technologies for three purposes:

Necessary. Making the site work, remembering your cookie choice, and keeping it secure. These are always active.
Analytics. Understanding which pages are read and how people move through the site.
Identification and advertising. The visitor identification described in section 4, and measuring advertising we run on Google, Meta, and LinkedIn.

You can change your mind at any time by clearing cookies for a2oak.com in your browser, which will bring the banner back, or by contacting us using the details in section 20.

6. Where the information comes from

Directly from you, when you fill in a form, email us, call us, book a demo, or subscribe to something.
From your use of the site, through cookies and similar technologies, as described in section 5.
From our visitor identification provider, as described in section 4.
From publicly accessible sources, including company websites and professional social media profiles.
From third-party data providers who license business contact and intent data to us.

7. How and why we use it

We only use your personal information where we have a proper reason to do so:

To respond to enquiries and deliver services you have asked for. Performing a contract with you, or taking steps at your request before entering one.
To identify visitors and follow up on interest in our services. Your consent, given through the cookie banner, and our legitimate interest in developing our business.
To send marketing email about our services. Your consent, or our legitimate interest in marketing to business contacts. You can opt out at any time.
To measure and improve our website and advertising. Your consent, and our legitimate interest in understanding what works.
To keep records, handle disputes, and meet our legal duties. Complying with a legal obligation, and our legitimate interest in protecting the business.

Where we rely on legitimate interests, we have considered whether those interests are outweighed by your rights, and you can object at any time under section 15.

8. Marketing emails

Every marketing email we send carries a working unsubscribe link, a truthful subject line, and our postal address. If you unsubscribe we will stop sending marketing, though we may still contact you about something you have specifically asked for.

You can also unsubscribe by emailing melissab@a2oak.com at any time.

9. Who we share it with

We share personal information with service providers who process it on our behalf, under contract and only for the purposes we set. Those currently in use on a2oak.com include:

Visual Visitor, LLC. Website visitor identification and sales outreach automation.
HubSpot. Customer relationship management, forms, chat, and email.
Google. Analytics, tag management, and advertising measurement.
LinkedIn. Advertising measurement.
SendPulse. Email delivery.
GoDaddy. Website hosting.

We may also disclose personal information where the law requires it, to professional advisers, or to a buyer in connection with a sale of the business.

10. Information we have sold or disclosed

California law requires us to say plainly whether we sell or share personal information. Under the broad definitions those laws use, we do.

In the preceding twelve months we have sold or shared, or disclosed for a business purpose, the following categories of personal information: identifiers, professional information, commercial information, internet activity, and inferences drawn from them. This happens through the visitor identification and advertising arrangements described in sections 4, 5 and 9.

We have not sold or shared sensitive personal information, and we do not sell or share the personal information of anyone we know to be under 16.

You can stop this at any time. See section 14.

11. How long we keep it

We keep your personal information for as long as you are a client, or as long as we are in active contact with you about our services. After that we keep it only as long as we need it, to answer a claim, to meet a legal or tax obligation, or to honour a suppression request so we do not contact you again by mistake.

Marketing contacts who have not engaged with us for three years are removed.

12. Where it is held

Your personal information is stored on servers in the United States, operated by us and by the providers listed in section 9.

If you are in the European Economic Area or the United Kingdom, this means your information is transferred outside it. Where that happens we rely on appropriate safeguards, including the European Commission Standard Contractual Clauses in our contracts with providers. You can ask us for a copy of those safeguards using the details in section 20.

13. Keeping it secure

We use appropriate technical and organisational measures to protect personal information, including encryption in transit, access controls limiting who inside the business can see what, and contractual security obligations on our providers.

No system is perfectly secure. If a breach affects your personal information and the law requires us to tell you, we will.

14. California privacy rights

If you are a California resident, the CCPA as amended by the CPRA gives you specific rights:

Know what personal information we have collected about you, where it came from, why we collected it, and who we shared it with.
Delete personal information we hold about you, subject to some exceptions.
Correct personal information that is inaccurate.
Opt out of the sale or sharing of your personal information.
Limit our use of sensitive personal information, though as noted in section 3 we do not collect it.
Not be discriminated against for exercising any of these rights. We will not deny you service, charge you a different price, or give you a lower quality of service.

To opt out of the sale or sharing of your personal information, there are two routes, and you may want to use both:

Email us at melissab@a2oak.com with “Do Not Sell or Share” in the subject line, or call 732-864-6552. This stops us.
Use Visual Visitor’s opt-out at visualvisitor.com/opt-out/. This removes you from the identity database that powers the identification described in section 4, across every website that uses it, not just ours.

You may also authorise someone else to make a request for you. We will ask for proof that they are authorised, and we may need to verify your identity before acting.

15. Rights under the GDPR

Our visitor identification operates on United States visitors only, so it does not apply to people in the EEA or UK. Where we do hold personal information about you and the GDPR applies, you have the right to:

Ask for a copy of the personal information we hold about you.
Have inaccurate information corrected, and incomplete information completed.
Have your information deleted in certain circumstances.
Restrict how we use it while a question about it is resolved.
Receive it in a structured, commonly used, machine-readable format, or have it sent to another organisation.
Object to our use of it where we rely on legitimate interests, including objecting to direct marketing at any time, which we will always honour.
Withdraw consent at any time, where we rely on consent.

16. How to exercise your rights

Email melissab@a2oak.com or call 732-864-6552 and tell us what you would like us to do. There is no charge.

We will respond within 45 days of verifying your identity, and will tell you if we need a further 45 days. For GDPR requests we respond within one month, extendable by two months for complex requests.

We may ask you for information to confirm who you are. We will only use it to check your identity and to handle your request.

17. Children under 13

Our website and services are for businesses, and are not directed at children. We do not knowingly collect personal information from anyone under 13. If you believe we have, contact us and we will delete it.

18. Complaints

If you are unhappy with how we have handled your personal information, please tell us first. Most things are quicker to fix directly.

If you are in the EEA or UK you also have the right to complain to your national data protection authority. In the UK that is the Information Commissioner’s Office at ico.org.uk.

19. Changes to this notice

We review this notice at least once a year. When we change it we update the date at the top, and where the change is significant we will say so on the site.

20. How to contact us

For anything in this notice, including privacy requests:

Melissa Ambrose, Acorn To Oak Media Group, LLC
Email: melissab@a2oak.com
Telephone: 732-864-6552
Post: 560 Main St., Suite 1C, Loch Arbour, NJ 07711

Our identification provider is Visual Visitor, LLC, 7400 Baymeadows Way, Suite 230, Jacksonville, FL 32256. You can reach them at support@visualvisitor.com or (888) 586-7730, and opt out at visualvisitor.com/opt-out/.