This Privacy Policy explains how OM Digital LLC collects, uses, stores, protects, and shares personal data when you access our website, use our digital consulting services, subscribe to our products, or engage with us in any capacity. This Policy is designed to comply with applicable privacy regulations, including United States privacy laws, the EU General Data Protection Regulation (GDPR), the UK GDPR, and other international data protection standards.
By using our website or services, you acknowledge that you have read and understood this Privacy Policy.
1. Definitions
For clarity, the following definitions apply throughout this Policy.
- Personal Data means any information relating to an identified or identifiable natural person.
- Processing means any operation performed on personal data, including collection, storage, use, transfer, disclosure, and deletion.
- Controller means the entity that determines the purposes and means of processing personal data.
- Processor means an entity that processes data on behalf of the Controller.
- You or User means any individual or organization accessing our website or using our services.
- Services refers to digital consulting, custom development, cloud optimization, web applications, SEO support, monitoring subscriptions, or any other offering provided by OM Digital LLC.
2. Data We Collect
We collect personal data directly from you, automatically through your interactions with our website, and from third-party sources. Categories of data collected include:
2.1 Information You Provide
- Contact information such as name, email address, phone number, business name, billing information.
- Account data including login credentials when applicable.
- Project and service details such as technical specifications, design requests, brand data, website credentials, and operational documentation provided for consulting or development.
- Payment information such as card details, billing address, or transaction identifiers processed through third-party payment providers. We do not store full payment card numbers.
- Communication content including emails, messages, attachments, documents, or feedback you send us.
2.2 Automatically Collected Data
- Device and system data including IP address, browser type, operating system, device identifiers.
- Usage data including pages visited, time on site, click behavior, referring URLs.
- Analytics data collected through cookies and similar technologies.
- Log files containing timestamps, error logs, performance metrics, and security events.
2.3 Subscription and Monitoring Services Data
If you subscribe to our Website Health Monitor or Content & SEO Support services, we may collect automated technical data such as:
Website uptime status, performance metrics, security scan results, broken link reports, analytics summaries, SEO metrics, content performance.
2.4 Information from Third Parties
- Payment processors (Stripe, banks, financial institutions).
- Analytics providers such as Google Analytics or similar tools.
- Marketing platforms, CRM systems, and advertising networks.
- Publicly available business information.
3. Lawful Basis for Processing (GDPR)
We process personal data under the following lawful bases:
- Consent when you opt in to cookies, newsletters, or optional data sharing.
- Contract performance when data is required to provide digital consulting, development, or subscription services.
- Legitimate interest for analytics, service improvement, fraud detection, and communication about your project.
- Legal obligation when required to comply with tax, accounting, regulatory, or law enforcement requests.
- Vital interest only in very rare circumstances involving safety or security threats.
4. How We Use Your Data
We use collected data for the following purposes:
- Delivering our digital consulting, development, and monitoring services.
- Communicating with you regarding projects, proposals, updates, timelines, invoicing, milestones, or support.
- Processing payments, subscriptions, and billing activities.
- Improving website functionality, user experience, performance, and security.
- Creating technical audits, reports, analytics, and recommendations.
- Managing marketing activities such as newsletters, promotional content, or personalized outreach.
- Ensuring compliance with applicable laws, enforcing agreements, and resolving disputes.
- Developing new features, researching improvements, and optimizing our service offering.
- Detecting security incidents, preventing fraud, and monitoring system integrity.
5. Cookies and Tracking Technologies
We use cookies, scripts, pixels, and similar technologies to:
- Recognize users and maintain sessions.
- Enable website functionality.
- Collect analytics and performance data.
- Provide personalized content.
- Measure marketing effectiveness.
Users in the EU, UK, and similar jurisdictions will be presented with a cookie consent banner that allows acceptance, rejection, or customization of cookies according to legal requirements.
You may disable cookies through your browser settings, though doing so may limit certain features.
6. How We Share Personal Data
We do not sell personal data. We may share data only with the following categories of third parties:
6.1 Service Providers
- Cloud hosting platforms.
- Analytics providers.
- Email delivery services.
- CRM and project management tools.
- Payment processors.
- Security monitoring platforms.
These providers process data strictly under our instructions.
6.2 Business Partners
Collaborators, subcontractors, or consultants who assist in delivering project-related services. Only necessary data is shared for project execution.
6.3 Legal and Compliance
We may disclose data when required by:
- Court orders
- Law enforcement
- Regulatory agencies
- Audit or tax authorities
- To enforce agreements or protect our rights.
6.4 Business Transactions
If OM Digital LLC undergoes a merger, acquisition, restructuring, or asset transfer, personal data may be transferred to the successor entity.
7. International Data Transfers
We operate from the United States but serve clients globally.
When transferring personal data from the EU or UK to the US, we rely on:
- Standard Contractual Clauses
- Legitimate interest assessments
- Data minimization and encryption
- Additional safeguards required by GDPR
Data may also be stored in cloud infrastructure located in the US or other jurisdictions with appropriate protections.
8. Data Retention
We retain personal data only as long as necessary for:
- Service delivery
- Legal compliance
- Tax and accounting obligations
- Security monitoring
- Dispute resolution
- Internal documentation requirements
If you request deletion, we will delete or anonymize your data unless retention is required by law.
Subscription service data may be stored until the subscription ends plus a reasonable archival buffer.
9. Your Rights (GDPR and Global Privacy Laws)
You may exercise any of the following rights:
- Right to access your personal data.
- Right to rectification of inaccurate data.
- Right to deletion (right to be forgotten).
- Right to restrict processing.
- Right to data portability.
- Right to object to processing based on legitimate interests.
- Right to withdraw consent.
- Right to opt out of marketing.
- Right not to be subject to automated decision-making or profiling.
To exercise these rights, email us at contact@omdigital.cc with the subject line Data Rights Request.
We may require verification of your identity to protect your data.
10. Data Security
We use industry-standard security measures to safeguard personal data, including:
- SSL/TLS encryption
- Encrypted storage
- Access controls and authentication
- Regular security scanning
- Firewalls and intrusion detection systems
- Secure development practices for custom software
- Internal security protocols for staff and contractors
- Monitoring for unusual activity
- Incident response procedures
No system is fully immune to breaches, but we take comprehensive steps to minimize risk.
11. Children's Privacy
We do not knowingly collect data from children under 16.
If you believe a child has provided personal data, contact us and we will take appropriate action.
12. Third-Party Links and Integrations
Our website may link to third-party websites or embed third-party tools.
We are not responsible for the privacy practices of external platforms.
We recommend reviewing third-party privacy policies before interacting with their services.
13. Payment Data
All payments are processed through secure third-party systems such as Stripe or banking institutions.
We do not store full payment card details. We receive only tokens, transaction IDs, last four digits of cards, or confirmation notices.
Payment data may be shared with:
- Payment processors
- Financial institutions
- Fraud prevention services
- Compliance auditors
Payment security is described in greater detail in our Payment & Billing Policy and Secure Payment & Transaction Protection Statement.
14. Automated Decision-Making
We do not use automated decision-making that produces legal or significant effects on users.
Basic analytics and personalization tools may be used but do not impact your rights or obligations.
15. Changes to This Privacy Policy
We may update this Policy periodically.
The Effective Date at the top indicates the latest revision.
Continued use of our services after updates signifies acceptance of the revised Policy.
16. Contact Information
For privacy inquiries or rights requests, contact us at: