DigitLyft Privacy Policy

1. Introduction

DigitLyft (“we,” “us,” or “our”) respects your privacy and complies with:

  • Canada’s PIPEDA (Personal Information Protection and Electronic Documents Act)
  • California’s CCPA/CPRA (Consumer Privacy Rights Act)
  • EU/UK GDPR (General Data Protection Regulation)
  • Other applicable U.S. state laws (e.g., Virginia VCDPA, Colorado CPA)

Scope: This policy applies to all users of digitlyft.com and our services.

2. Information We Collect

A. Personal Data

  • Identifiers: Name, email, phone, business address.
  • Commercial Data: Payment details (processed securely via PCI-compliant vendors like Stripe/PayPal).
  • Sensitive Data (if collected): Only with explicit consent (e.g., tax IDs for contracts).

B. Automated Data

  • Cookies: Essential (session cookies), analytics (Google Analytics), and marketing (Facebook Pixel).
  • Device/Usage Data: IP address, browser type, pages visited (via log files).

3. Legal Bases for Processing (GDPR/PIPEDA)

Purpose

Legal Basis

Service delivery

Contractual necessity

Marketing communications

Consent (opt-in via unchecked box)

Fraud prevention

Legal obligation

Analytics

Legitimate interest (anonymized)

4. Data Sharing & Disclosures

We do not sell personal data but may share with:

  • Service Providers: Payment processors, CRM tools (e.g., HubSpot), cloud hosts (AWS/Google Cloud).
  • Legal Compliance: If required by law (e.g., court order).
  • Business Transfers: In case of merger/acquisition (users will be notified).

 

5. Your Rights (2025 Standards)

  • Access/Portability: Request a copy of your data in a machine-readable format.
  • Correction/Deletion: Update inaccuracies or request erasure (exceptions apply)
  • Opt-Out:
    • CCPA: “Do Not Sell or Share My Personal Information” link (footer).
    • Marketing Emails: Unsubscribe link in all emails.
  • Withdraw Consent: Email [info@digitlyft.com].
  • Response Time: 30 days (or as required by law).

6. Data Security & Retention

  • Security Measures: SSL encryption, regular audits, employee training.
  • Retention Period:
    • Active clients: 3 years post-termination.
    • Inquiries: 1 year if no engagement.
    • Legal requirements: As mandated (e.g., tax records).

7. Children’s Privacy

Our services are not directed at children under 16. We do not knowingly collect their data.

8. Policy Updates

  • Notify users of material changes via email or Site banner.
  • Archive prior versions here for transparency.

Contact Us: