Privacy on First&Third campaign sites.

Last updated November 2, 2026

This notice describes the practices specific to the First&Third campaign site at go.firstandthird.com. The site is operated by First And Third, Inc. ("First&Third," "we," "us," or "our") and is intended for business users in the United States. For First&Third's other websites and services, see our general privacy policy.

Information we collect

Information you provide

When you continue past the first step of a campaign application, we save the answers completed through that step, including your name, company or brand name, work email address, launch stage, and, when provided, store URL. If you continue through later steps or submit the application, we also collect the remaining answers shown in the form, such as launch readiness, target timing, budget range, and your project description. We may use an incomplete application to respond to your inquiry. Please do not submit sensitive personal information through this form.

If you schedule a meeting after submitting the form, the information requested by Calendly—such as your name, email address, selected time, and any scheduling answers—is submitted directly to Calendly and made available to First&Third for arranging the meeting.

Technical and security information

Cloudflare delivers and protects this site. As part of ordinary web requests, Cloudflare may process information such as your IP address, network and browser details, device information, requested URL, date and time, and security signals. Cloudflare Turnstile also processes technical signals when you submit the form to distinguish people from automated abuse.

For information about how Cloudflare processes personal information through Turnstile, see the Cloudflare Turnstile Privacy Addendum.

Calendly

The confirmation page includes an embedded Calendly calendar. When it loads, your browser connects directly to Calendly. Calendly may collect device and usage information and may use cookies or similar technologies under its privacy notice. You can also open the booking page directly instead of using the embedded view.

Analytics and advertising measurement

We use Google Tag Manager to operate Google Analytics 4 and Google Ads measurement on this campaign site. These services may process information about pages viewed, interactions with buttons and the application form, approximate location, browser and device details, referral information, and campaign or ad identifiers such as a Google click ID. We use this information to understand campaign performance, diagnose conversion friction, and attribute accepted applications and later sales outcomes to the marketing that generated them.

At launch, analytics storage and advertising-measurement storage are enabled. Ad personalization is disabled. When a recognized campaign or ad identifier is present, the site may retain a limited first- and latest-touch attribution record for up to 90 days and attach it to an accepted application. The application answers and attribution record are stored separately. Each accepted application also records which landing-page version you used, its full URL, and a submission identifier. Campaign parameters and this context are included in the internal lead notification. Full URLs are kept in the private application record; our standard analytics events use the page path and version label and do not include your name, email address, or application answers.

Advertising measurement

Subject to applicable law and your privacy choices, when you submit an inquiry we may use contact information you provide, such as your email address, to measure whether our advertising resulted in that inquiry. For Google Ads enhanced conversions, the information is normalized and protected using SHA-256 hashing before transmission to Google. Google may compare the hashed information with signed-in Google account data to attribute the inquiry to an advertising interaction. We use this information for conversion measurement; this does not subscribe you to marketing, and we do not use it through this implementation for ad personalization or Customer Match.

Where applicable law requires prior consent, including in the European Economic Area, United Kingdom, and Switzerland, we do not send this contact information for advertising measurement unless a valid consent signal permits it. Hashing protects the information in transit to Google but does not make it anonymous.

How we use information

We use information to:

• deliver, secure, and troubleshoot the site;
• prevent spam, fraud, and other abuse;
• evaluate your inquiry and respond about project fit and next steps;
• measure campaign visits, engagement, accepted applications, and attributed sales outcomes;
• notify the appropriate First&Third team member about a submission;
• arrange a meeting when you choose to schedule one; and
• comply with law, enforce our rights, and protect people and services.

Submitting an application does not add you to a marketing mailing list.

When we disclose information

We disclose information only as reasonably necessary for the purposes above, including to these service providers:

• Cloudflare for hosting, request delivery, security, Turnstile verification, form processing, and temporary campaign-form storage;
• Resend for delivering the internal email notification generated by a form submission;
• Zapier for receiving application answers and associated campaign attribution and automating application follow-up;
• Calendly when you load or use the embedded scheduling experience; and
• Google for Google Tag Manager, Google Analytics 4, and Google Ads campaign measurement.

We may also disclose information to professional advisers, to comply with law or legal process, to protect rights and safety, or in connection with a business transaction. We do not sell personal information collected through this campaign site or share it for cross-context behavioral advertising.

Retention

An incomplete campaign-form record is scheduled for deletion 30 days after it was last updated. A submitted campaign-form record is scheduled for deletion 90 days after it is received. Related email messages, automation records, meeting records, and security logs may be retained longer when reasonably needed for communication, scheduling, security, legal compliance, or ordinary business records. Calendly, Cloudflare, Resend, and Zapier retain information under their own policies and account settings. Deleting the primary campaign-form record does not automatically delete copies held in email or automation services.

Your privacy choices

Depending on where you live, you may have rights to request access to, correction of, or deletion of personal information, and to appeal certain decisions. Because this campaign site does not sell personal information or use campaign-site data for personalized advertising, there is currently no sale or sharing opt-out to apply here.

This campaign site does not currently provide separate privacy or cookie settings. You can limit cookies and similar browser storage through your browser settings. You can also use Google's browser add-on to opt out of Google Analytics and Google's ad settings to manage Google advertising controls. Blocking measurement storage may prevent us from connecting an application or later sales outcome to the ad that generated it, but it does not prevent you from using the site or submitting the form.

To make a privacy request, email privacy@firstandthird.com. We may need to verify your identity and will respond as required by applicable law.

Security

We use reasonable technical and organizational safeguards designed to protect submitted information. No internet transmission or storage system can be guaranteed completely secure.

Children

This business-to-business campaign is not directed to children under 18, and we do not knowingly collect personal information from them through this site.

Changes to this notice

We may update this notice as the campaign site, its vendors, or applicable requirements change. The date at the top shows when it was last updated.

Contact us

Questions or privacy requests may be sent to privacy@firstandthird.com or by mail to:

First And Third, Inc.
318 Avenue I #471
Redondo Beach, CA 90277