Blue Ridge Consulting Group

Privacy Policy.

We collect only what we need to do our work, and we don't sell your data.

Last updated: March 2026

Overview

Blue Ridge Consulting Group (“BRCG,” “we,” “us,” or “our”) operates this website at brcg.co. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have over it. We're a B2B growth agency — we collect only what we need to do our work, and we don't sell your data.

Information we collect

Information you provide directly. When you fill out a contact form, book a call, or subscribe to our newsletter, we collect your name, business email address, company name, job title, and any message content you include. This is the primary way we receive personal information.

Analytics data. We collect standard web analytics through Google Analytics 4 (GA4), including pages visited, session duration, referral source, device type, and general geographic location (country/region level). This data is anonymized and aggregated — we cannot identify individual visitors from it.

CRM tracking. HubSpot tracks interactions with our website and emails on a contact-level basis once you submit a form. This includes page visits, email opens, and link clicks associated with your email address.

How we use your information

We use the information you provide to respond to inquiries, schedule consultations, send relevant marketing communications, and manage our client relationships. Specifically:

  • Service delivery. Contact and project information is used to scope, deliver, and communicate about our services.
  • HubSpot CRM. Contact records are stored and managed in HubSpot. We use HubSpot to track our pipeline, send automated follow-up sequences, and manage client communications.
  • Marketing communications. With your consent, we may send you newsletters, case studies, or other relevant content. You can unsubscribe at any time using the link in any email we send.
  • Website improvement. Aggregate analytics data is used to understand how our site performs and where we can improve the experience.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

Cookies and tracking technologies

We use the following cookies and tracking technologies on this site:

  • Google Analytics 4 (GA4). Analytics cookies to measure traffic and behavior. GA4 is configured with IP anonymization enabled. Data is retained for 14 months by default.
  • HubSpot. HubSpot sets cookies (__hstc, hubspotutk, __hssc, __hssrc) to track contact-level behavior once you submit a form. These persist for up to 13 months.
  • Essential cookies. We may set session cookies required for the site to function correctly (e.g., form submission security tokens). These expire when you close your browser.

You can control cookie preferences through your browser settings. Blocking analytics cookies will not affect your ability to use the site. Blocking HubSpot cookies may prevent form submissions from being tracked in our CRM.

Third-party services

We use the following third-party services that may process your personal data on our behalf:

  • HubSpot — CRM, email marketing, and form handling. HubSpot's privacy policy is available at legal.hubspot.com/privacy-policy.
  • Google Analytics 4 — Website analytics. Google's privacy policy is available at policies.google.com/privacy.
  • Vercel — Website hosting and infrastructure. Vercel may process request logs containing IP addresses.
  • Sanity — Headless CMS for website content management. Content entered into our CMS is not personal data.

Data retention

We retain contact information in HubSpot for the duration of our business relationship and for a reasonable period thereafter — typically up to 3 years after our last interaction, unless you request deletion sooner. Analytics data in GA4 is retained for 14 months.

If you become a client, we retain project-related communications and deliverables for up to 7 years to comply with standard business record-keeping requirements.

Your rights (GDPR & CCPA)

Depending on your location, you may have the following rights regarding your personal data:

  • Access. Request a copy of the personal data we hold about you.
  • Correction. Request correction of inaccurate or incomplete data.
  • Deletion. Request deletion of your personal data (“right to be forgotten”), subject to our legal record-keeping obligations.
  • Opt-out of marketing. Unsubscribe from marketing emails at any time via the link in any email, or by contacting us directly.
  • Data portability. Request your data in a machine-readable format where technically feasible.
  • Non-discrimination (CCPA). California residents will not be discriminated against for exercising any CCPA rights.

To exercise any of these rights, email privacy@brcg.co with your request. We will respond within 30 days.

Data security

We implement industry-standard security measures to protect your personal data, including HTTPS encryption in transit, access controls on our CRM and internal systems, and limited access to personal data on a need-to-know basis. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. For material changes, we will notify active contacts by email where feasible.

Contact

Questions, requests, or concerns about this policy? Contact our privacy team at privacy@brcg.co. For general inquiries, use hello@brcg.co.