Privacy Policy

At The Delegate Co. ("we," "us," or "our"), we respect your privacy and are committed to protecting the personal data of our clients and website visitors. This policy outlines how we collect, use, and safeguard your information.

1. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked to you ("Personal Data"). This includes:

• Contact Data: Name, email address, phone number, and billing address.
• Account Credentials: Usernames and passwords for third-party platforms you authorize us to manage (collected via secure vaults like 1Password or LastPass).
• Financial Data: Credit card or bank details for processing payments (handled by secure third-party processors like Stripe).
• Technical Data: IP address, browser type, and usage data collected via cookies when you visit our Site.

2. How We Use Your Information

We use your data strictly to provide our services, including:

• Performing the tasks outlined in our Service Agreement.
• Processing payments and preventing fraudulent transactions.
• Communicating with you regarding project updates or administrative changes.
• Complying with legal obligations (e.g., tax reporting).

3. Data Sharing & Third Parties

We do not sell your personal data. We only share information with:

• Service Providers: Contractors or employees of The Delegate Co. who require access to perform your tasks (all of whom are bound by strict NDAs).
• Software Tools: Secure third-party tools used for project management, communication, and billing (e.g., Slack, Asana, Stripe).
• Legal Necessity: When required by law or to protect our legal rights.

4. International Data Transfers (GDPR/CCPA)

If you are located in the EU or UK, please note that we may transfer and process your data in countries outside the EEA. We ensure "Standard Contractual Clauses" or equivalent protections are in place to keep your data secure according to GDPR standards.

5. Data Security

We implement industry-standard security protocols, including:

• Encryption: Use of SSL/TLS encryption for data transmission.
• Access Control: "Need-to-know" access for our team members.
• Credential Management: We never store passwords in plain text; we use encrypted password managers.

6. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of the data we hold about you.
• Erasure: Request that we delete your personal data (the "Right to be Forgotten").
• Correction: Ask us to update inaccurate information.
• Opt-Out: Unsubscribe from any marketing communications at any time.

7. Data Retention

We retain your information only as long as necessary to provide our services or as required by law. Upon termination of our agreement, we will securely delete or return your credentials and sensitive files within [30/60] days.

8. Contact Us

For any privacy-related questions or to exercise your rights, please contact our Data Protection Lead at: