Effective Date: September 5, 2026
Last Updated: September 5, 2026
At TBD, we respect your privacy and are committed to protecting personal data collected through our website, intake forms, and technical services. This Privacy Policy outlines how we collect, use, store, and safeguard your information in accordance with international standards, including the General Data Protection Regulation (GDPR) and applicable global privacy laws.
1. Data Controller and Contact Information
For the purposes of applicable data protection legislation, [Your Agency Name] is the Data Controller of personal information collected through our website forms and order processing.
If you have any questions regarding this Privacy Policy or how your data is handled, please contact us at:
- Business Name: [Your Agency Name ]
- Email: [TBD@agencyemail.com]
- Address / Location: [ TBD Business Address]
2. Information We Collect
We only collect data necessary to process your orders, communicate with you, and perform technical email troubleshooting services.
- Client Contact & Billing Information: Name, business email, and company details. Payments are processed securely via Stripe; we never store credit card numbers.
- Technical Infrastructure Metadata: Domain names, public DNS records, hosting provider names, and error logs provided in intake forms.
- Delegated Access Identifiers: Secondary user invites or partner admin permissions granted directly through your provider’s official collaboration tools.
3. How We Use Your Information
We process your data based on the following legal grounds under GDPR Article 6:
- Performance of Contract: To fulfill the technical services you purchase (e.g., configuring DNS records, investigating bounce logs, and adjusting security settings).
- Legitimate Interests: To communicate regarding order updates, prevent fraudulent activity, and maintain system security.
- Legal Obligations: To maintain accurate financial and accounting records as required by tax and business laws.
4. Strict Zero-Password and No-Inbox Access Policy
- Collaborator Access Only: We operate strictly using native collaborator, team invite, or delegated partner frameworks (e.g., Cloudflare Collaborator, Google Workspace Delegated Admin). We never ask for, collect, or store individual user account passwords.
- No Mailbox Content Access: Our services are performed strictly at the domain DNS and system administration level. We do not access, view, export, or store personal inbox messages, email content, or subscriber lists.
5. Data Retention and Access Revocation
Temporary Technical Access: Once technical work is marked as complete and verified, we immediately delete local reference notes and access tokens. Clients are required to revoke delegated account permissions on their hosting/email platforms upon ticket closure.
Administrative & Transactional Records: Intake forms and billing receipts are retained for standard accounting purposes (typically 5 to 7 years depending on legal jurisdiction requirements).
6. Third-Party Service Processors
We do not sell, rent, or trade your personal data. We share data only with trusted third-party service providers essential to running our business:
- Stripe: Payment gateway and transaction processing.
- WordPress Hosting Provider: Website hosting and database storage.
- Email Infrastructure (e.g., Google Workspace / Microsoft 365): Used solely to deliver transactional order updates and support communications to you.
All third-party processors maintain strict compliance with international security and data transfer standards.
7. Your Data Rights (GDPR and CCPA)
Depending on your geographic location, you hold the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where retention is no longer necessary for legal or contractual fulfillment.
- Right to Restrict Processing: Limit how we process your information under certain conditions.
- Right to Data Portability: Request transfer of your data to another service provider.
To exercise any of these rights, please submit a request to [TBD@agencyemail.com]. We will respond within 30 days.
8. Cookies and Tracking
Our website utilizes essential functional cookies necessary for site performance and form processing. We do not run invasive tracking pixels or third-party ad network cookies.
9. Policy Updates
We may update this Privacy Policy periodically to reflect changes in technical operations or legal requirements. Updated versions will be published on this page with an updated “Last Updated” date.
10. Service fullfilment
Services are fullfilled within 48 hours after the collaborator access is given.