Privacy Policy

1. Introduction and Commitment to Privacy

Best Fit Digital ("Best Fit Digital," "we," "us," or "our") operates as a boutique digital marketing agency headquartered at 145 W Ostend Street, Suite 600, Baltimore, MD, 21230, US, and provides SEO, web design, paid advertising, lead generation, and LLM AI visibility services to clients throughout Maryland, Washington DC, and Northern Virginia. We are committed to safeguarding the privacy of every visitor to our website at bestfitdigital.co and every individual with whom we do business.

This Privacy Policy describes the categories of personal information we collect, how we use and disclose that information, and the rights and choices available to you regarding your data. It is designed to comply with applicable data protection laws, including the General Data Protection Regulation ("GDPR") for individuals located in the European Economic Area and the United Kingdom, and the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), for California residents. By accessing or using our website or services, you acknowledge that you have read and understood this Privacy Policy.

[UPDATE WITH ADDITIONAL JURISDICTION-SPECIFIC DISCLOSURES IF YOUR ORGANIZATION SERVES CLIENTS OUTSIDE THE UNITED STATES]

2. Information We Collect

We collect information that you provide directly to us, information collected automatically through your use of our website, and information received from third parties. The categories of information we may collect include:

• Identity and Contact Data: name, company name, job title, email address, mailing address, and telephone number submitted through contact forms, consultation requests, or email correspondence.
• Business and Marketing Data: details about your business, marketing objectives, current advertising spend, and website URLs shared with us for the purpose of preparing proposals, audits, or strategy recommendations.
• Technical Data: IP address, browser type and version, device identifiers, operating system, referring URLs, and time zone setting collected automatically when you visit our website.
• Usage Data: pages viewed, links clicked, time spent on pages, scroll behavior, and other analytics collected through cookies and similar tracking technologies.
• Scheduling Data: information provided when booking a consultation, including your selected meeting time, time zone, and calendar details.
• Financial Data: billing information processed for clients engaging our paid services. [INSERT DETAILS OF PAYMENT PROCESSOR USED, IF APPLICABLE]

We do not knowingly collect sensitive personal information (such as health data, racial or ethnic origin, or biometric identifiers) unless voluntarily provided by you and reasonably necessary to deliver a requested service.

3. How We Use Your Information

We use the personal information we collect for the following business and commercial purposes:

• To respond to inquiries, provide requested proposals, and deliver contracted marketing services (SEO, web design, paid advertising, lead generation, and LLM AI visibility).
• To communicate with you regarding your account, ongoing projects, invoices, and service updates.
• To personalize and improve our website, marketing campaigns, and service offerings.
• To measure the performance of our advertising and analyze website traffic trends.
• To schedule and manage consultations, strategy calls, and appointments.
• To comply with legal obligations, enforce our agreements, and protect the rights, property, and safety of Best Fit Digital, our clients, and the public.
• To send marketing communications where you have provided consent or where otherwise permitted by law, with the ability to opt out at any time.

We rely on one or more of the following legal bases for processing personal information where GDPR applies: performance of a contract, your consent, our legitimate business interests (such as improving our services and marketing performance), and compliance with legal obligations.

4. Third-Party Tools and Data Sharing

To operate our website, measure marketing performance, and deliver client services, we integrate the following third-party tools, each of which may collect and process personal information subject to its own privacy policy:

[REMOVE ANY TOOLS NOT USED BY YOUR ORGANIZATION]

• Google Analytics: used to analyze website traffic, user behavior, and engagement trends to help us improve the site experience.
• Google Ads: used to measure the performance of our paid advertising campaigns and deliver relevant ads across the Google network.
• Meta Pixel: used to measure the effectiveness of advertising on Facebook and Instagram and to deliver relevant ads to visitors who have interacted with our website.
• HubSpot: used as our customer relationship management (CRM) and marketing automation platform to manage contact submissions, email communications, and lead tracking.
• Calendly: used to facilitate the scheduling of consultations and strategy calls, which requires collecting your name, email address, and selected appointment details.
• Search Atlas: used to support SEO research, reporting, and performance monitoring in connection with services we provide to our clients.

We do not sell your personal information to third parties in exchange for monetary payment. Where required under CCPA/CPRA, certain advertising integrations described above may be considered a "sale" or "sharing" of personal information for cross-context behavioral advertising purposes; you may opt out as described in Section 5 below.

We may also share information with service providers who perform functions on our behalf (such as hosting, email delivery, and analytics), each of whom is contractually obligated to protect your information and use it only for the purposes we specify. [INSERT YOUR DATA PROCESSING AGREEMENT DETAILS]

We may disclose personal information if required to do so by law, in response to valid requests by public authorities, or in connection with a merger, acquisition, or sale of assets.

5. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information.

For individuals in the European Economic Area and United Kingdom (GDPR):

• The right to access the personal information we hold about you.
• The right to request correction of inaccurate or incomplete data.
• The right to request erasure of your personal information ("right to be forgotten").
• The right to restrict or object to our processing of your data.
• The right to data portability.
• The right to withdraw consent at any time where processing is based on consent.
• The right to lodge a complaint with your local supervisory authority.

For California residents (CCPA/CPRA):

• The right to know what personal information we collect, use, disclose, and sell or share.
• The right to request deletion of your personal information.
• The right to correct inaccurate personal information.
• The right to opt out of the sale or sharing of personal information for cross-context behavioral advertising.
• The right to non-discrimination for exercising your privacy rights.

You may exercise these rights by contacting us using the information in Section 8. You may also manage cookie preferences through our cookie banner (where applicable) or your browser settings, and you may opt out of interest-based advertising through the Digital Advertising Alliance or the Network Advertising Initiative. We will respond to verifiable requests within the timeframe required by applicable law. [UPDATE WITH YOUR SPECIFIC REQUEST VERIFICATION PROCESS]

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including to provide our services, comply with legal, accounting, or reporting requirements, and resolve disputes. Client account and project records are typically retained for the duration of our engagement and for a reasonable period thereafter to satisfy contractual and legal obligations. Analytics and advertising data collected via third-party tools are retained according to each provider's respective retention schedule.

[UPDATE WITH SPECIFIC RETENTION POLICY] Once personal information is no longer required, we will securely delete, anonymize, or aggregate it in accordance with our internal data retention procedures.

7. Security Measures

We implement administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, and destruction. These measures include restricted access to client and prospect data, secure hosting environments, and regular review of our data handling practices. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. [INSERT ADDITIONAL DETAILS ON ENCRYPTION, ACCESS CONTROLS, OR SECURITY CERTIFICATIONS SPECIFIC TO YOUR ORGANIZATION]

In the event of a data breach affecting your personal information, we will notify affected individuals and relevant authorities as required by applicable law.

8. Contact and Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. The "Effective Date" at the top of this page indicates when this policy was last revised. Material changes will be communicated through a notice on our website or, where appropriate, directly to you.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information below:

[INSERT NAME AND CONTACT DETAILS OF YOUR DESIGNATED DATA PROTECTION OFFICER OR PRIVACY CONTACT, IF APPLICABLE]