1. Information We Collect
Personal Information
We may collect the following types of personal information:
- Contact Information: Name, email address, company name, and mailing address
- Business Information: Company size, industry, marketing budget, project requirements
- Communication Records: Messages, consultation notes, and correspondence history
- Payment Information: Billing details processed securely through third-party payment processors
Automatically Collected Information
- Website Analytics: IP address, browser type, device information, operating system
- Usage Data: Pages visited, time spent on site, click patterns, referral sources
- Cookies and Tracking: Session cookies, preference settings, marketing campaign attribution
2. How We Use Your Information
We use the collected information for the following business purposes:
- Service Delivery: Providing digital marketing, web development, and consulting services
- Client Communication: Responding to inquiries, sending project updates, and providing customer support
- Business Operations: Processing payments, managing client accounts, and maintaining service records
- Marketing Activities: Sending newsletters, promotional content, and service announcements (with your consent)
- Analytics and Improvement: Analyzing website performance, optimizing user experience, and improving our services
- Legal Compliance: Meeting regulatory requirements, preventing fraud, and protecting our legal interests
3. Information Sharing and Disclosure
We may share your information in the following circumstances:
Service Providers
- Technology Partners: Google Analytics, Facebook Pixel, marketing automation platforms
- Payment Processors: Stripe, PayPal, or other secure payment gateways
- Cloud Services: AWS, Google Cloud, or other hosting and storage providers
- Communication Tools: Email service providers, CRM systems, and project management platforms
Legal Requirements
We may disclose your information when required by law, legal process, or to protect our rights and interests.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.
4. Data Security
We implement comprehensive security measures to protect your personal information:
- Encryption: SSL/TLS encryption for data transmission and secure storage protocols
- Access Controls: Restricted access to personal information on a need-to-know basis
- Security Monitoring: Regular security assessments, vulnerability testing, and intrusion detection
- Staff Training: Regular privacy and security training for all team members
- Compliance Standards: Adherence to ISO 27001 and industry best practices
While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
5. Your Privacy Rights
Depending on your location, you may have the following rights:
- Access: Request access to your personal information we hold
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information (subject to legal obligations)
- Portability: Request transfer of your data in a structured, machine-readable format
- Restriction: Request restriction of processing under certain circumstances
- Objection: Object to processing based on legitimate interests or for marketing purposes
- Withdraw Consent: Withdraw consent for processing where consent is the legal basis
To exercise these rights, please contact us at privacy@enlightenaction.com
6. Cookies and Tracking Technologies
Types of Cookies We Use
- Essential Cookies: Required for website functionality and security
- Analytics Cookies: Google Analytics for website performance analysis
- Marketing Cookies: Facebook Pixel, Google Ads tracking for campaign optimization
- Preference Cookies: Remember your settings and preferences
Cookie Management
You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality.
7. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States and Hong Kong. We ensure appropriate safeguards are in place for such transfers, including:
- Standard Contractual Clauses approved by relevant authorities
- Adequacy decisions by regulatory bodies
- Certification schemes and codes of conduct
8. Data Retention
We retain your personal information for as long as necessary to:
- Provide our services and maintain client relationships
- Comply with legal obligations and regulatory requirements
- Resolve disputes and enforce our agreements
- Maintain business records for operational purposes
Typically, we retain client information for 7 years after the end of our business relationship, unless a longer retention period is required by law.
9. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.
10. Third-Party Links
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
- Posting the updated policy on our website with a new "Last updated" date
- Sending email notifications to registered users for significant changes
- Providing prominent notice on our website for material changes
Your continued use of our services after the effective date of changes constitutes acceptance of the updated policy.
12. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
13. Jurisdiction-Specific Information
European Union (GDPR)
For EU residents, we process your data based on the following legal bases:
- Consent: For marketing communications and optional services
- Contract Performance: To provide requested services
- Legitimate Interests: For business operations and improvements
- Legal Obligation: To comply with applicable laws
California (CCPA/CPRA)
California residents have additional rights under the California Consumer Privacy Act, including the right to know, delete, and opt-out of the sale of personal information. We do not sell personal information.
Hong Kong (PDPO)
We comply with Hong Kong's Personal Data (Privacy) Ordinance and ensure appropriate cross-border data transfer safeguards.