1. The short version
- We collect what you give us through forms, booking, email, phone, text, and chat. We also collect some data automatically through cookies and similar tools.
- We use it to answer you, schedule calls, provide and bill for our services, keep the site working and secure, and market our services. That includes ads on Google and Meta (Facebook/Instagram).
- We do not sell your personal information for money. Some advertising cookies and pixels may count as "selling" or "sharing" under California law. You can opt out at Your Privacy Choices. We also honor the Global Privacy Control (GPC) browser signal.
- We never sell or share your mobile number or text-messaging consent with third parties or affiliates for their own marketing.
- You can ask to see, correct, or delete your data. Email hello@digitalbestpractice.com. See Section 10 for deletion steps.
2. Who this policy covers
This policy covers personal information we collect about you when you:
- visit digitalbestpractice.com and any page or landing page we run (the "Site");
- fill out a form, book a meeting, chat, call, text, or email us;
- see or click our ads on Google, Meta, or other platforms;
- become a client, or act as a contact for a client or prospect.
What it does not cover: When we run marketing for a client, we may handle data about that client's customers. Examples are leads from the client's ads, review-request contact lists, and the client's analytics. We handle that data on the client's behalf, as a service provider or processor, and only as our agreement with the client allows. The client's own privacy policy governs that data. If you are a customer of one of our clients, please contact that business directly.
3. Information we collect
| Category (CCPA category) | Examples | Where it comes from |
|---|---|---|
| Identifiers and contact details | Name, email, phone number, business name, job title, website URL, mailing or billing address | You, through forms, booking, email, phone, text, chat |
| Commercial and client information | Services you asked about, proposals, contracts, invoices, payment status, budget and ad-spend ranges you share | You; our records |
| Payment information | Card or bank details. Our payment processor handles these; we do not store full card numbers | You, through the payment processor |
| Messages and recordings | Form messages, emails, chat transcripts, text messages, call notes. Call recordings only with notice to you on the call | You |
| Internet and device activity | IP address, browser and device type, pages viewed, referring URL, clicks, time on page, ad-click IDs (such as Google gclid or Meta fbclid), cookie IDs |
Automatically, through cookies, pixels, and server logs |
| Approximate location | City or region inferred from IP address (not precise GPS) | Automatically |
| Inferences | Which services you might be interested in, based on pages you visit and forms you submit | Created by us from the data above |
| Professional information | Your role at your company and your company's industry and size | You; public business sources (e.g., your company website, Google Business Profile, LinkedIn) |
| Business account access (clients only) | Access to ad accounts, analytics, Google Business Profile, website or CMS, granted through the platform's own sharing tools wherever possible | You, as the client |
Sensitive personal information. We do not ask for, and do not want, sensitive personal information such as Social Security numbers, government IDs, health information, or precise geolocation. Please do not send it through our forms, chat, or text. We do not use or disclose sensitive personal information to infer characteristics about you.
4. How we use your information
- To respond and schedule: answer inquiries, send quotes and proposals, and book and remind you about consultations.
- To provide services: onboard clients, deliver and report on work, manage accounts, invoice, and collect payment.
- To communicate: send service messages and, where you agreed, marketing emails and texts (see Section 8).
- For analytics: understand how the Site is used and which pages, ads, and campaigns bring in inquiries.
- For advertising: measure our ads and show our ads to people who visited our Site or who resemble our visitors (remarketing and similar audiences). See Section 6.
- For security and legal compliance: prevent spam and fraud, protect our systems, enforce our Terms of Service, keep required records, and comply with the law.
- To improve: improve our Site, services, and customer experience.
We will not use your personal information for purposes that are materially different from these without telling you first.
5. How we disclose your information
We disclose personal information only as follows:
- Service providers and contractors. These include hosting, website, forms, scheduling, email, phone and texting, chat, CRM, payment processing, accounting, and analytics providers. Some of our client services are fulfilled by vetted subcontractors, such as specialist designers, developers, writers, and listing and citation specialists. They receive only the information they need to do the work. They must keep it confidential and may use it only for us.
- Advertising and analytics partners, such as Google and Meta, through cookies, pixels, and server-side tools like the Meta Conversions API. See Section 6.
- Platforms you ask us to work in. For example, we submit a client's business details to Google, Meta, and online directories as part of listing and profile services.
- Legal and safety reasons: to comply with law, a subpoena, or a court order, or to protect our rights, our clients, or others.
- Business transfers: in a merger, acquisition, financing, or sale of assets, subject to this policy.
- With your consent or at your direction.
Mobile and SMS data: We do not sell, rent, or share mobile phone numbers, text-messaging opt-in data, or consent with any third parties or affiliates for their marketing or promotional purposes. We share them only with the providers that deliver our messages for us.
6. Cookies, pixels, and advertising
We and our partners use cookies, pixels, tags, local storage, and similar technologies. Full details, categories, and controls are in our Cookie Policy. In summary:
- Strictly necessary tools keep the Site working and secure.
- Analytics tools, such as Google Analytics 4 through Google Tag Manager, help us understand Site traffic.
- Advertising tools include Google Ads conversion tracking and remarketing and the Meta Pixel with the Meta Conversions API. They measure our ads and show you our ads on other websites and apps.
- Embedded features such as our scheduling tool, reviews widget, maps, video, and chat may set their own cookies.
Google. We may use Google Analytics features based on advertising, such as remarketing, Google Analytics demographics and interests reporting, and integrations with Google Ads. Google and other third-party vendors use first-party and third-party cookies to show our ads based on your past visits to our Site and other sites. You can opt out of personalized Google ads at adssettings.google.com. You can opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on. Learn how Google uses data at policies.google.com/technologies/partner-sites.
Meta. Third parties, including Meta, may use cookies, web beacons, and other storage technologies to collect or receive information from our Site and elsewhere on the internet. They use that information to provide measurement services and to target ads. When we use the Meta Conversions API, we may send Meta event data from our server. This can include contact details, such as email or phone, that are hashed (scrambled) before sending, so Meta can match the event to an account. You can control ads from Meta in your Facebook/Instagram Ad Preferences.
Industry opt-outs: optout.aboutads.info (Digital Advertising Alliance), optout.networkadvertising.org (NAI), and, for European visitors, youronlinechoices.eu.
Do Not Track. Browsers' older "Do Not Track" signals have no common standard, so we do not respond to them. We do honor Global Privacy Control (GPC) as a request to opt out of sale and sharing. See Section 9.
We do not knowingly allow third parties to collect personal information about your online activity across different websites over time, except as described here and in our Cookie Policy.
7. Scheduling, chat, and calls
- Booking. When you book a meeting, our scheduling provider collects your name, email, and any answers you give, and adds the event to our calendar. That provider's privacy policy also applies.
- Chat. If our Site offers chat, the chat provider records the conversation so we can reply. Some chat replies may be generated by an automated assistant (AI) rather than a person. When that is the case, the chat will say so. You can ask for a human at any time. Do not share sensitive information in chat.
- WhatsApp. If you contact us through WhatsApp, WhatsApp/Meta's terms and privacy policy also apply.
- Calls. We do not record calls without telling you at the start of the call.
8. Email and text messages
- Email. If you contact us or become a client, we may email you about your inquiry or account. We may also send occasional marketing emails, and every one includes an unsubscribe link. We honor unsubscribe requests within 10 business days, as required by the federal CAN-SPAM Act. Unsubscribing from marketing does not stop service or billing emails for an active account.
- Text messages (SMS/MMS). We text you only if you gave consent, for example by checking an unchecked SMS box on a form, or as needed to respond to a message you sent us. Message frequency varies. Message and data rates may apply. Reply STOP to opt out and HELP for help. You may also opt out by any reasonable means, such as telling us in a message, by email, or on a call. Consent to texts is never a condition of buying anything from us. Carriers are not liable for delayed or undelivered messages. See our Terms of Service, SMS section.
9. Your California privacy rights
We are based in California and give these rights to California residents. As a matter of policy, we will try to honor reasonable requests from residents of other states, too. These rights come from the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, "CCPA"), and are subject to legal exceptions.
Your rights:
- Right to know what personal information we collected about you, where it came from, why we use it, and who we disclose it to, plus a copy of the specific pieces.
- Right to delete personal information we collected from you.
- Right to correct inaccurate personal information.
- Right to opt out of sale or sharing. "Sharing" means disclosing personal information for cross-context behavioral advertising. We do not sell personal information for money. However, our use of advertising cookies and pixels, such as Google Ads remarketing and the Meta Pixel, may be considered "selling" or "sharing" under the CCPA. You can opt out at Your Privacy Choices / Do Not Sell or Share My Personal Information or by turning on Global Privacy Control in your browser. When we detect GPC, we treat it as a valid opt-out for that browser and show that your opt-out request was honored.
- Right to limit use of sensitive personal information. We do not use sensitive personal information for purposes that would trigger this right.
- Right to non-discrimination. We will not deny service, charge different prices, or give a different quality of service because you used your rights.
Disclosures in the last 12 months:
| Category | Disclosed for a business purpose to | "Sold" or "shared" to |
|---|---|---|
| Identifiers and contact details | Service providers and contractors (including subcontractors) | Advertising partners (e.g., Google, Meta), only through cookies, pixels, or hashed matching |
| Commercial and client information | Service providers and contractors | Not sold or shared |
| Internet and device activity | Service providers; analytics providers | Advertising partners (e.g., Google, Meta) |
| Approximate location | Service providers; analytics providers | Advertising partners (e.g., Google, Meta) |
| Inferences | Service providers | Advertising partners, limited to audience membership |
| Professional information | Service providers and contractors | Not sold or shared |
| Payment information | Payment processor | Not sold or shared |
| Sensitive personal information | Not collected on purpose | Not sold or shared |
We do not knowingly sell or share the personal information of anyone under 16.
How to make a request:
- Email hello@digitalbestpractice.com with the subject "Privacy Request"; or
- Call (909) 631-8152
[CONFIRM: public business phone]; or - Use the form on our Your Privacy Choices page.
Verification. To protect you, we will ask for information to confirm your identity before we provide or delete data. Usually that means confirming the email or phone number you used with us. An opt-out of sale or sharing does not require verification.
Authorized agents. You may use an authorized agent. We may ask for your signed permission and ask you to verify your identity directly with us.
Response time. We will confirm receipt within 10 business days and respond within 45 calendar days. If we need more time, we may extend that by another 45 days and will tell you. We process opt-outs as soon as feasible, and no later than 15 business days.
Shine the Light. California Civil Code § 1798.83 lets California residents ask about disclosures of personal information to third parties for their own direct marketing. We do not make those disclosures. You can still email us with questions.
CCPA applicability note. Some CCPA duties apply only to businesses that meet certain size or data-volume thresholds. We provide these rights and choices whether or not those thresholds apply to us.
10. How to delete your data (Data Deletion Instructions)
You can ask us to delete the personal information we hold about you at any time. This includes data received through our Facebook/Instagram ads, lead forms, Meta tools, or Google tools.
- Email hello@digitalbestpractice.com with the subject line "Delete My Data."
- Include your name and the email address and/or phone number you used with us. If you came from a Facebook or Instagram lead form, include that, too.
- We will verify the request, delete or de-identify your data from our systems and tell our service providers and contractors to do the same, and confirm by email, normally within 45 days.
What we may keep. The law sometimes requires or allows us to keep certain records. Examples are invoices and tax records, signed contracts, a record of your opt-out so we don't contact you again, and data needed for security or legal claims. We keep only what is necessary and only for as long as necessary.
Data held by Google or Meta. We cannot delete data that Google or Meta collected under their own policies. You can manage or delete it in your Google Account (myaccount.google.com) and in Facebook/Instagram settings (Settings & privacy → Accounts Center → Your information and permissions).
11. How long we keep data
We keep personal information only as long as we need it for the purposes above:
| Data | Typical retention |
|---|---|
| Inquiries and leads who never became clients | Up to [24] months after last contact |
| Client account, contract, and project records | Length of the relationship plus [7] years (tax, accounting, and legal) |
| Marketing opt-outs and suppression lists | As long as needed to honor the opt-out |
| SMS consent records | At least [5] years after consent ends (to document consent) |
| Chat transcripts and call notes | Up to [24] months |
| Analytics and advertising data | As set in each tool, typically [14] months for Google Analytics; ad platforms keep data under their own policies |
12. Security
We use reasonable administrative, technical, and physical safeguards. For example, the Site uses encrypted HTTPS (SSL/TLS) on all pages and forms, we limit access to people who need it, we use multi-factor authentication where available, and contractors have to keep data confidential. We never ask for payment card numbers, Social Security numbers, or passwords through Site forms. Client platform access is granted through each platform's own user-permission tools wherever possible. No system is perfectly secure, so please contact us right away if you think your information has been compromised.
13. Children
Our Site and services are for businesses and adults. They are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child gave us information, email hello@digitalbestpractice.com and we will delete it.
14. Visitors outside the United States
We operate in the United States and serve U.S. businesses. If you visit from elsewhere, your information will be processed in the United States. If we ever target ads or tracking at visitors in the European Economic Area, United Kingdom, or Switzerland, we will ask for consent before setting non-essential cookies, as the law there requires.
15. Links to other sites
Our Site links to other sites and platforms, such as Google, Meta, review sites, and directories. Their privacy practices are their own, so please review their policies.
16. Changes to this policy
We may update this policy. We will post the new version here with a new "Last updated" date. If we make a material change, we will put a notice on the Site or email active clients before it takes effect.
17. Contact us
Digital Best Practice LLC
Attn: Privacy — Justin R. Stillwell, Founder & CEO
14726 Ramona Ave, Chino, CA 91710 [CONFIRM: public business/mailing address]
Phone: (909) 631-8152 [CONFIRM]
Email: hello@digitalbestpractice.com (privacy and support), justin@digitalbestpractice.com
