Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

When you interact with our website or engage us for services, you may provide personal information including:

• Contact and quote forms: Your name, email address, phone number, business name, and project details
• Newsletter sign-up: Your email address
• Client engagements: Billing information, project files, brand assets, and communications related to your project

We do not store credit card numbers directly. Payment processing is handled by Stripe, a PCI DSS-compliant payment processor.

1.2 Information Collected Automatically

When you visit our website, certain information is collected automatically through analytics and monitoring tools:

• Google Analytics (GA4): Page views, session duration, referral source, device type, and approximate location (anonymized)
• Server logs: IP address, browser type, pages visited, and timestamps
• Cookies: See Section 4 below

1.3 Information From Third Parties

We may receive limited information from third-party sources such as referral partners or advertising platforms (e.g., Google Ads conversion tracking). This data is used solely to measure the effectiveness of marketing campaigns and is not sold or shared beyond that purpose.

2. How We Use Your Information

We use the information we collect to:

• Respond to inquiries and quote requests
• Deliver contracted services
• Send invoices and process payments
• Communicate with you about your project, account, or services
• Improve our website and services through analytics and error monitoring
• Comply with legal obligations
• Send marketing communications (only with your explicit consent — you can opt out at any time)

Legal Basis for Processing (GDPR)

For visitors and clients in the EU or UK, we process personal data under the following legal bases:

• Consent: Marketing emails and newsletter subscriptions
• Contractual necessity: Delivering services you have engaged us for, processing payments, and project communications
• Legitimate interest: Website analytics, error monitoring, and improving our services — balanced against your privacy rights
• Legal obligation: Tax and billing record retention, responding to legal process

3. How We Share Your Information

We do not sell your personal data. Period. We share information only with service providers who help us operate our business, and only to the extent necessary:

We may also disclose information to comply with applicable law, respond to legal process, or protect our rights. We do not share data with advertising networks for targeting purposes.

4. Cookies & Tracking

Cookies are small text files stored on your device when you visit a website. We use them in the following categories:

• Essential cookies: Required for the site to function properly (e.g., session management, security)
• Analytics cookies: Help us understand how visitors use our site (Google Analytics). These collect anonymized data about page views, session duration, and referral sources.
• Functional cookies: Store your preferences such as theme (light/dark mode)

You can control cookies through your browser settings. Disabling certain cookies may affect site functionality.

5. Data Retention

We retain personal information as follows:

• Contact form submissions: Retained for 12 months after last contact, then deleted
• Client project data: Retained for 2 years after contract completion
• Analytics data: Subject to Google Analytics retention settings (currently 14 months)
• Email list data: Retained until you unsubscribe or request deletion
• Billing records: Retained as required by applicable tax and financial regulations

6. Your Rights

California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to know: Request the categories and specific pieces of personal information we have collected about you, the sources of that information, and the business purpose for collecting it
• Right to delete: Request deletion of your personal information, subject to certain legal exceptions
• Right to correct: Request correction of inaccurate personal information
• Right to opt out of sale/sharing: We do not sell or share your personal information for cross-context behavioral advertising
• Right to non-discrimination: We will not discriminate against you for exercising any of these rights

You may designate an authorized agent to make a request on your behalf by providing written authorization. We will respond to verified requests within 45 calendar days.

Other US Residents

Depending on your state of residence, you may have similar rights to those listed above. Contact us at privacy@digitalomicsmarketing.com to exercise your rights.

EU/UK Residents (GDPR)

If you are located in the EU or UK, you have the following rights under the General Data Protection Regulation:

• Right to access your personal data
• Right to rectification (correcting inaccurate data)
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with your local data protection supervisory authority

How to Exercise Your Rights

To exercise any of these rights, email privacy@digitalomicsmarketing.com with the subject line “Privacy Request.” We will respond within one calendar month for GDPR requests and 45 calendar days for CCPA requests. We may need to verify your identity before processing your request.

Do Not Track

Our website does not currently respond to “Do Not Track” browser signals. You can opt out of analytics tracking by using browser extensions such as the Google Analytics Opt-out Browser Add-on.

7. International Data Transfers

DigitalOmics Marketing is based in the United States. If you are accessing our website from outside the US, your information will be transferred to and processed in the United States.

Our service providers (listed in Section 3) are primarily based in the United States. For transfers of personal data from the EU/UK, we rely on the EU-U.S. Data Privacy Framework where applicable and standard contractual clauses approved by the European Commission. By using our website or engaging our services, you acknowledge this transfer.

8. Security

We take reasonable measures to protect your information, including:

• HTTPS encryption on all pages
• Row-level security on all database tables (Supabase RLS)
• Rate limiting on all forms to prevent abuse
• Automated dependency scanning for vulnerabilities
• Error monitoring for early detection of issues
• Payment data handled exclusively by Stripe (PCI DSS compliant) — we never store card numbers

In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

9. Children's Privacy

Our services are not directed at children under 13 (or under 16 for GDPR purposes). We do not knowingly collect personal information from minors. If we become aware that we have collected data from a minor, we will delete it promptly. If you believe a minor has submitted personal data through our site, please contact us at privacy@digitalomicsmarketing.com.

10. Third-Party Services

Our website may contain links to third-party sites and integrates third-party services (listed in Section 3 above). We are not responsible for the privacy practices of these third parties. We encourage you to review each provider's privacy policy when using their services.

11. Email Marketing

We send marketing emails only with your explicit consent (e.g., newsletter sign-up). All marketing emails:

• Include an unsubscribe link — we honor unsubscribe requests within 10 business days as required by the CAN-SPAM Act
• Include our physical mailing address: 16107 Kensington Dr. No 175, Sugar Land, TX 77479
• Are sent through Resend, our email delivery provider. Your email address is stored in our own database (Supabase) on a confirmed opt-in basis — we email you a confirmation link and add you to the list only if you click it
• Clearly identify DigitalOmics Marketing as the sender

You can unsubscribe at any time by clicking the link in any marketing email or by emailing privacy@digitalomicsmarketing.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted at this URL with an updated “Last Updated” date. For material changes, we will provide 30 days' advance notice via email to registered users. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us:

DigitalOmics Marketing
16107 Kensington Dr. No 175, Sugar Land, TX 77479
Email: privacy@digitalomicsmarketing.com
General inquiries: Contact page

Also see our Terms of Service.