Our Privacy Policy

Last Updated: 01Dec2025

DIGITAL& (“we,” “our,” “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our website, use our services, or interact with us in any way.

This Privacy Policy is designed to comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and all applicable U.S. state privacy laws, including those in Virginia, Colorado, Connecticut, Utah, Texas, Montana, Oregon, and Tennessee, as well as relevant federal privacy regulations.

By accessing our website or using our services, you acknowledge this Privacy Policy.

This Privacy Policy applies to DIGITAL& (“the Company”).

DIGITAL& acts as the data controller for personal information collected through our website and marketing activities.

For full contact information, see the Contact Us section of this privacy policy.

We collect personal information in several ways, depending on how you interact with our website and services.

A. Information You Provide Directly

This includes information you submit:

  • Contact forms
  • Newsletter signups
  • Calendly scheduling
  • Event registrations
  • Uploaded files
  • Email correspondence
  • Business inquiries 

Examples include your name, email, phone number, company name, and any information you choose to share with us.

B. Information Collected Automatically

When you visit our website, we automatically collect:

  • IP address
  • Device identifiers
  • Browser and operating system
  • Website interactions
  • Scroll depth, click events, session recordings
  • Heatmaps and engagement metrics (Plerdy or Clarity)
  • Referring URLs
  • Pages viewed
  • Time on site
  • Cookies and similar technologies 

Collected through tools such as GA4, GTM, Meta Pixel, LinkedIn Insight Tag, Bing UET, Plerdy, and Clarity.

C. Advertising & Audience Data

If you interact with our digital ads, we may receive:

  • Conversion events
  • Retargeting identifiers
  • Ad engagement data
  • Interest-based categories
  • Matched or custom audience segments 

From advertising platforms including Google Ads, Meta Ads, LinkedIn Ads, and Microsoft Advertising.

D. CRM & Client Data

If you engage with us as a client or prospect, we may store:

  • Contact details
  • Company and project information
  • Meeting notes
  • Communications
  • Files or documents provided

E. System & Storage Information

Personal information may be stored or processed in secure cloud-based systems, including analytics platforms, data warehousing systems, and CRM tools that support our business operations.

F. Sensitive Personal Information

DIGITAL& does not intentionally collect or process sensitive personal information as defined under the GDPR or CPRA.

We use personal information for the following purposes:

A. Service Delivery and Operations

  • To operate, maintain, and improve our website and digital services
  • To respond to inquiries and communicate with you
  • To schedule meetings and manage appointments
  • To provide and deliver our marketing and advertising services
  • To fulfill contractual obligations with clients and partners

B. Analytics, Personalization, and Experience Improvement

  • To analyze website usage and measure performance
  • To understand how visitors interact with our content
  • To personalize your experience on our website
  • To develop new services and improve our offerings

C. Advertising, Marketing, and Retargeting

  • To run digital advertising campaigns
  • To measure campaign performance
  • To create custom and lookalike audiences
  • To perform retargeting and interest-based advertising
  • To send marketing emails or newsletters (with your consent where required)

D. Security, Safety, and Abuse Prevention

  • To detect, prevent, and respond to fraud or security threats
  • To protect our website, systems, and users
  • To maintain the integrity of our services

E. Legal, Regulatory, and Compliance Purposes

  • To comply with applicable laws, regulations, and legal obligations
  • To establish, exercise, or defend legal claims
  • To maintain appropriate business and financial records

F. Other Purposes With Your Consent

Where required by law, we may use personal information for additional purposes with your explicit consent.

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:

A. Contract – GDPR Article 6(1)(b)

We process personal data as necessary to:

  • Respond to inquiries
  • Provide our services
  • Communicate with clients and prospects
  • Manage appointments and scheduling
  • Perform contract-related obligation

B. Legitimate Interests – GDPR Article 6(1)(f)

We process personal data to pursue our legitimate interests, including:

  • Operating, maintaining, and improving our website
  • Performing analytics and measuring website performance
  • Marketing and business development
  • Creating advertising audiences and measuring ad performance
  • Retargeting and interest-based advertising
  • Preventing fraud and maintaining security
  • Managing CRM records
  • Improving our services and user experience

We balance our legitimate interests with your privacy rights and freedoms.
You have the right to object to processing based on legitimate interests.

C. Consent – GDPR Article 6(1)(a)

We rely on consent for:

  • Non-essential cookies and similar technologies
  • Retargeting and ad personalization where required
  • Sending marketing emails to users in the EEA/UK
  • Collecting analytics data that requires prior consent

You may withdraw your consent at any time through our Cookie Management Platform or by contacting us.

D. Legal Obligations – GDPR Article 6(1)(c)

We process personal data to:

  • Comply with tax, accounting, and financial laws
  • Respond to lawful requests and legal processes
  • Maintain compliance and proper business records

E. Automated Processing & Profiling

DIGITAL& does not make decisions based solely on automated processing that produce legal or similarly significant effects under GDPR Article 22.

However, we do use:

  • Interest-based categories
  • Retargeting
  • Lookalike audiences
  • Advertising segmentation
  • Analytics and performance modeling

These are used only for marketing and measurement purposes and do not produce legal effects.

We share personal information only as described in this Privacy Policy and only for legitimate business purposes, service delivery, advertising, or legal compliance.

A. Service Providers (Processors)

We share personal information with third-party vendors who process data on our behalf (“processors”) to support our operations, including:

  • Website hosting and cloud storage
  • Email service providers
  • Customer relationship management (CRM) tools
  • Scheduling tools
  • Analytics and measurement services
  • Security and fraud prevention services

These processors are contractually bound under GDPR Article 28 to use personal data only as instructed by DIGITAL&.

B. Advertising and Marketing Partners

We share personal information with advertising platforms who act as independent controllers, including:

  • Google Ads (if applicable)
  • Meta  (if applicable)
  • LinkedIn (if applicable)
  • Microsoft Advertising (if applicable)

We share limited personal information (e.g., cookie identifiers, device IDs, hashed emails where applicable) to:

  • deliver and measure advertising
  • create custom or lookalike audiences
  • perform retargeting
  • improve ad performance

Under California law (CPRA), this constitutes “sharing” for cross-context behavioral advertising.”

Users may opt out at any time.

C. Analytics Providers

We share usage and device data with analytics services such as:

  • Google Analytics
  • Plerdy (if applicable)
  • Microsoft Clarity (if applicable)

These tools help us understand site performance and user behavior.

D. Business Operations and CRM Integrations

We may share necessary personal information with:

  • HubSpot (CRM)
  • Calendly (scheduling)
  • Email and ticketing systems
  • Payment processors (if applicable)

E. Legal, Compliance, and Protection

We may disclose personal information:

  • to comply with legal obligations
  • to respond to lawful requests from authorities
  • to protect the rights, property, and safety of DIGITAL&, our users, or others
  • to detect, investigate, or prevent fraud or security incidents

F. Mergers or Corporate Transactions

If DIGITAL& undergoes an acquisition, merger, or asset sale, personal information may be transferred as part of that event, in compliance with applicable privacy laws.

G. No Sale of Personal Information

DIGITAL& does not sell personal information for monetary consideration.

We may “share” personal information for advertising purposes as defined under CPRA, but we do not sell data.

We use cookies and similar tracking technologies to:

  • Ensure the website functions
  • Understand how users interact with the site
  • Personalize experiences
  • Enable advertising and retargeting
  • Measure campaign performance

Where required by law (GDPR, UK GDPR, and certain U.S. states), we do not load non-essential cookies until you provide consent.

Cookie Declaration (CMP Reference)

We use a Cookie Management Platform (CMP) that provides a complete, automatically updated Cookie Declaration. This declaration lists every cookie and similar technology used on our site, along with its provider, purpose, duration, and category. You can view or update your cookie preferences at any time through our CMP, which also allows you to withdraw consent for non-essential cookies whenever you choose.

We do not sell personal information for monetary consideration.
However, we may share personal information for the purpose of cross-context behavioral advertising as defined under the California Privacy Rights Act (CPRA). This may include sharing identifiers or device data with advertising partners to support retargeting, audience creation, and campaign measurement.

You may opt out of this type of sharing at any time through:

  • Our “Do Not Sell or Share My Personal Information” link
  • Our Cookie Management Platform (CMP)
  • Browser-level opt-out signals such as Global Privacy Control (GPC)

We honor applicable opt-out preferences as required under California and other U.S. state privacy laws.

Depending on where you live, you may have certain rights regarding your personal information. These rights may include:

  • Access – You may request a copy of the personal information we hold about you.
  • Correction – You may request that we correct inaccurate or incomplete information.
  • Deletion – You may request that we delete your personal information, subject to certain exceptions.
  • Portability – You may request a copy of your information in a portable format.
  • Restriction or Objection – Where applicable, you may request that we limit or stop certain types of processing.
  • Withdraw Consent – If we rely on consent, you may withdraw it at any time.
  • Opt Out of Sale/Sharing or Targeted Advertising – You may opt out of the use of your information for targeted advertising or retargeting.
  • Right to Appeal – For certain U.S. states, you may appeal a decision if we deny a rights request.

To exercise these rights, please contact us using the details provided in the Contact Us section of this privacy policy. We may need to verify your identity before processing your request.

We retain personal information only for as long as necessary to:

  • Provide our services and operate our business
  • Fulfill the purposes described in this Privacy Policy
  • Comply with legal, tax, and regulatory requirements
  • Resolve disputes and enforce our agreements

Retention periods may vary depending on the type of data and how it is used. When personal information is no longer needed, we securely delete or anonymize it in accordance with applicable laws and our internal policies.

You may opt out of the use of your personal information for targeted or cross-context behavioral advertising at any time. Options include:

  • Using our “Do Not Sell or Share My Personal Information” link
  • Updating your preferences in our Cookie Management Platform (CMP)
  • Enabling browser-level signals such as Global Privacy Control (GPC)
  • Adjusting ad settings on individual platforms (e.g., Google, Meta, LinkedIn)

We honor valid opt-out requests and recognized opt-out signals as required under the CPRA and other applicable U.S. state privacy laws.

Because DIGITAL& operates in the United States, personal information may be transferred from your location to the U.S. or other countries that may have different data protection laws than your home jurisdiction.

When we transfer personal data from the European Economic Area (EEA), the United Kingdom, or other regions with data transfer restrictions, we use lawful safeguards such as:

  • Standard Contractual Clauses (SCCs) approved by the European Commission or UK authorities
  • Data Processing Agreements with our service providers
  • Supplementary measures where required
  • Transfers to providers certified under recognized transfer mechanisms, where applicable

These safeguards are designed to ensure your personal information receives a level of protection consistent with applicable laws.

If you would like more information about our data transfer mechanisms, please contact us using the details in the Contact Us section of this privacy policy.

We take reasonable technical and organizational measures to protect your personal information. This includes encryption, access controls, system monitoring, and trained personnel. While no method of transmission or storage is completely secure, we work to protect your information and maintain appropriate safeguards.

Our website and services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child in violation of applicable laws such as COPPA, we will delete it as soon as possible. If you believe a child has provided us with personal information, please contact us using the details in the Contact Us section of this privacy policy.

If you have questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, you can contact us at:

DIGITAL&
1857 E. Cheyenne Lane, Bloomington, IN 47401
Email: info@digitaland.co

We will respond to your request as required by applicable privacy laws.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make updates, we will revise the “Last Updated” date at the top of this page. Significant changes will be posted on our website or communicated directly when required by law.

Your continued use of our website or services after any updates means you acknowledge the revised Privacy Policy.

This section applies to California residents under the California Consumer Privacy Act (CCPA/CPRA).

Categories of Personal Information We Collect

We collect the following categories of personal information:

  • Identifiers (name, email, IP address)
  • Internet or device activity (pages viewed, interactions, referring pages)
  • Commercial information (inquiries, purchases, subscriptions)
  • Inferences (preferences or interests)
  • Professional or business information (if provided)

We collect this information for the business purposes described in our Privacy Policy.

Sale or Sharing of Personal Information

We do not “sell” personal information for money.

We may “share” personal information for cross-context behavioral advertising (for example, through Meta, Google, LinkedIn, or other ad platforms).

You may opt out at any time through our “Do Not Sell or Share My Personal Information” link or through our CMP.

Your CPRA Rights

California residents have the right to:

  • Know what personal information we collect
  • Receive a copy of personal information
  • Delete personal information
  • Correct inaccurate personal information
  • Opt out of the sale or sharing of personal information
  • Limit the use of sensitive personal information (we do not use sensitive data in a way that triggers this right)
  • Be free from discrimination for exercising these rights

Submitting CPRA Requests

You may submit requests through:

We will verify your identity before fulfilling your request.

This section applies to residents of states with privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and Tennessee.

Your State Privacy Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold
  • Delete personal information
  • Correct personal information
  • Obtain a copy of your personal information in a portable format
  • Opt out of targeted advertising
  • Opt out of the sale of personal data (we do not sell data for money)
  • Opt out of profiling in furtherance of decisions that produce legal or similarly significant effects (we do not engage in this)

How to Submit a Rights Request

You can submit a request via:

If we deny your rights request, you may submit an appeal by replying to our decision or contacting us at:

DIGITAL&
1857 E. Cheyenne Lane, Bloomington, IN 47401
info@digitaland.co

We will provide a written response explaining the outcome of your appeal.