Privacy Policy

Last Updated: January 2025

1. Introduction

7t1.studio ("we," "our," or "us") is committed to protecting the privacy and security of our clients' and website visitors' personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://7t1.studio, use our digital marketing services, or interact with us through other channels.

As a digital marketing agency, we understand the critical importance of data privacy in today's digital landscape. We comply with international privacy regulations including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection laws. This policy outlines our practices concerning personal data collection and processing for both our marketing agency operations and the services we provide to clients.

2. Information We Collect

2.1 Information You Provide Directly

Client Information:

Business Contact Details: Company name, business address, email addresses, phone numbers, and job titles of key personnel
Project Requirements: Business goals, marketing objectives, target audience details, budget information, and project specifications
Billing Information: Invoicing details, payment information, and tax identification numbers for service agreements
Access Credentials: Website administrator access, social media account permissions, and analytics platform credentials (securely managed with encryption)

Website Visitor Information:

Contact Form Submissions: Name, email address, phone number, company information, and inquiry details
Newsletter Sign-ups: Email addresses and subscription preferences
Consultation Requests: Business information, marketing needs assessment, and availability details
Content Downloads: Contact information provided in exchange for whitepapers, templates, or other resources

2.2 Information Collected Automatically

Technical Information:

Device Information: IP addresses, browser type and version, operating system, device identifiers, and screen resolution
Usage Data: Pages visited, time spent on pages, navigation paths, click patterns, and interaction with website elements
Location Information: Country, region, and city-level location data derived from IP addresses (no precise GPS data collected)
Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixels, and similar technologies

Analytics Data:

Google Analytics: Demographic information, interests, user behavior, and engagement metrics
Heat Mapping: User interaction patterns, scroll depth, and mouse movement data
Conversion Tracking: Goal completions, form submissions, and e-commerce transactions

2.3 Information from Third Parties

Service Integrations:

Social Media Platforms: Public profile information when you interact with our social media content
Advertising Platforms: Campaign performance data from Google Ads, Facebook Ads, LinkedIn Ads, and other advertising networks
CRM Systems: Contact information from integrated customer relationship management platforms
Marketing Tools: Data from marketing automation platforms, email service providers, and analytics tools

Client-Specific Data (for service delivery):

Audience Data: Aggregated and anonymized customer data provided by clients for marketing campaign execution
Performance Metrics: Campaign results, conversion data, and ROI analytics from client advertising accounts
Market Research: Industry data, competitive analysis information, and market intelligence from third-party providers

3. How We Use Your Information

3.1 Service Delivery & Operations

Digital Marketing Services:

Strategy Development: Analyzing business information to create customized digital marketing strategies
Campaign Execution: Using provided access credentials to implement SEO, PPC, social media, and content marketing campaigns
Performance Optimization: Analyzing campaign data to optimize strategies and improve results
Reporting & Analysis: Creating performance reports and strategic recommendations based on collected data

Client Management:

Account Administration: Managing client accounts, service agreements, and billing processes
Communication: Responding to inquiries, providing service updates, and delivering performance reports
Technical Support: Troubleshooting issues, implementing solutions, and providing ongoing maintenance

3.2 Business Development & Marketing

Our Marketing Activities:

Lead Generation: Processing contact form submissions and consultation requests
Newsletter Distribution: Sending marketing communications to subscribers who have opted in
Content Marketing: Personalizing content recommendations based on user interests and behavior
Advertising: Running targeted advertising campaigns to reach potential clients

Analytics & Improvement:

Website Optimization: Analyzing user behavior to improve website functionality and user experience
Service Enhancement: Using feedback and performance data to enhance our service offerings
Market Research: Understanding industry trends and client needs to develop new services

3.3 Legal & Administrative Purposes

Compliance:

Regulatory Requirements: Meeting legal obligations under data protection laws and industry regulations
Contract Enforcement: Managing service agreements, terms of service, and payment processing
Security Measures: Implementing and monitoring security protocols to protect against unauthorized access

Business Operations:

Financial Management: Processing payments, managing invoices, and handling accounting requirements
Quality Assurance: Monitoring service delivery quality and implementing improvement measures
Internal Training: Using anonymized data for staff training and professional development

4. Legal Basis for Processing

We process personal data based on the following legal grounds:

Consent: When you explicitly consent to specific processing activities (e.g., newsletter subscriptions, cookie preferences)

Contractual Necessity: When processing is necessary to fulfill our contractual obligations to clients

Legitimate Interests: When processing is necessary for our legitimate business interests, provided these don't override your fundamental rights (e.g., website analytics, direct marketing to existing clients)

Legal Obligations: When processing is required to comply with legal or regulatory requirements

5. Data Sharing & Disclosure

5.1 Service Providers

We share information with trusted third-party service providers who assist in our operations:

Marketing Technology Partners:

Analytics Platforms: Google Analytics, Hotjar, SEMrush for performance tracking
Advertising Networks: Google Ads, Facebook Business Manager, LinkedIn Marketing Solutions
Email Service Providers: Mailchimp, HubSpot for communication management
Project Management Tools: Asana, Trello, Slack for internal collaboration

Infrastructure Providers:

Hosting Services: AWS, Google Cloud, specialized web hosting companies
Payment Processors: Stripe, PayPal, bank payment gateways
Security Services: SSL certificate providers, firewall services, security monitoring tools

5.2 Client-Specific Sharing

With Client Consent:

Campaign Platforms: Access to client advertising accounts for campaign management
Analytics Integration: Sharing performance data with client analytics systems
Third-Party Tools: Integrating with client-preferred marketing and CRM platforms

5.3 Legal Requirements

We may disclose information when required by law:

Legal Proceedings: In response to court orders, subpoenas, or legal processes
Regulatory Compliance: To regulatory authorities as required by applicable laws
Protection of Rights: To protect our rights, property, or safety, or that of others

6. International Data Transfers

As a global digital marketing agency, we may transfer and process data internationally:

Transfer Mechanisms:

Adequacy Decisions: Transferring to countries with adequate data protection levels
Standard Contractual Clauses: Using EU-approved data transfer agreements
Privacy Shield Framework: For transfers involving U.S.-based service providers (where applicable)
Explicit Consent: When other transfer mechanisms aren't available

Primary Processing Locations:

United States (primary operations)
European Union (client support and regional operations)
Canada (backup and disaster recovery systems)

7. Data Security Measures

We implement comprehensive security measures to protect your information:

Technical Safeguards:

Encryption: SSL/TLS encryption for data transmission, AES-256 encryption for data at rest
Access Controls: Role-based access permissions, two-factor authentication, and regular access reviews
Network Security: Firewalls, intrusion detection systems, and regular vulnerability scanning
Data Backup: Regular encrypted backups with geographically distributed storage

Organizational Measures:

Privacy Training: Regular data protection training for all employees
Security Policies: Comprehensive information security policies and procedures
Incident Response: Documented procedures for security incident management
Vendor Management: Security assessments for all third-party service providers

Client-Specific Security:

Access Management: Secure handling of client credentials with password managers
Data Segregation: Logical separation of client data in multi-tenant systems
Audit Logging: Comprehensive logging of data access and modifications

8. Data Retention

We retain personal data only as long as necessary:

Retention Periods:

Client Data: 7 years after service termination for legal and accounting purposes
Prospect Data: 2 years after last interaction for potential future engagement
Website Analytics: 26 months for aggregated usage data
Marketing Communications: Until consent withdrawal or account deletion request

Deletion Procedures:

Secure Deletion: Using industry-standard data destruction methods
Anonymization: Converting identifiable data to anonymous statistical data
Backup Management: Systematic removal from backup systems according to retention schedules

9. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights:

Access & Portability:

Right to access personal data we hold about you
Right to receive your data in a structured, commonly used format

Control & Objection:

Right to correct inaccurate or incomplete data
Right to object to processing based on legitimate interests
Right to restrict processing in certain circumstances

Deletion & Consent:

Right to request deletion of your personal data
Right to withdraw consent at any time
Right to opt out of marketing communications

Automated Decision-Making:

Right not to be subject to automated decision-making without human intervention

Exercise Your Rights: Contact our Data Protection Officer at privacy@7t1.studio to exercise your rights. We respond to all legitimate requests within 30 days and may request specific information to verify your identity.

10. Cookies & Tracking Technologies

10.1 Types of Cookies

Essential Cookies: Required for website functionality, security, and basic operations

Analytics Cookies: Collect anonymous statistical data about website usage patterns

Marketing Cookies: Track user behavior across websites for targeted advertising

Preference Cookies: Remember user settings and preferences for improved experience

10.2 Cookie Management

Consent Mechanism:

Clear cookie consent banner on first visit
Granular control over cookie categories
Easy access to change preferences at any time

Browser Controls:

Instructions for managing cookies through browser settings
Information about blocking or deleting cookies
Impact of disabling different cookie categories

11. Children's Privacy

Our services are not directed to individuals under 18:

Age Restrictions:

We do not knowingly collect data from children under 18
Services are designed for business professionals and organizations
Parents/guardians should contact us if they believe we have collected children's data

12. Third-Party Links

Our website may contain links to third-party websites:

External Websites:

We are not responsible for the privacy practices of external sites
Links are provided for informational purposes only
We encourage reviewing privacy policies of visited websites

13. Changes to This Policy

We may update this Privacy Policy periodically:

Update Notification:

Significant changes will be communicated via email or website notice
Updated "Last Updated" date at the top of the policy
Archive of previous versions available upon request

Continued Use: Continued use of our services after changes constitutes acceptance of updated terms

14. Contact Information

Data Protection Officer: Email: privacy@7t1.studio Address: [7t1.studio Business Address] Phone: [Contact Number]

Complaints: You have the right to lodge complaints with your local data protection authority

15. Policy for Client Campaigns

As a digital marketing agency, we also adhere to privacy standards for client campaigns:

Client Responsibility:

Clients must ensure they have proper consent for data used in marketing campaigns
We require clients to warrant they have lawful basis for data processing
Clients are responsible for their own privacy compliance for their customer data

Our Role:

We act as data processor for client data used in campaigns
We implement technical and organizational measures to protect client data
We follow client instructions regarding data processing activities

Legal