Privacy Policy

1. Introduction

X Marks the Spot Digital Marketing ("we," "us," "our," or "the Agency") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and share information when you visit our website at https://xmarksthespotdigital.com/ ("the Site") or engage us for digital marketing, branding, advertising, web design, or related services ("Services").

By using the Site or our Services, you agree to the practices described in this Policy. If you do not agree, please do not use the Site or our Services.

2. Who We Are

X Marks the Spot Digital Marketing is the controller of your personal information for the purposes of this Policy. You can reach us at:

X Marks the Spot Digital Marketing
Email: info@xmarksthespotdigital.com
Phone: +1 (734) 838-5569
Website: https://xmarksthespotdigital.com/

3. Information We Collect

3.1 Information You Provide

When you contact us, request a quote, sign up for our newsletter, or engage us for Services, we may collect:

• Name and contact details (email address, phone number, business name)
• Information about your business, goals, and marketing requirements
• Communications you send us (emails, messages, attachments)
• Billing and payment information (handled via third-party payment processors — see Section 7)

3.2 Information Collected Automatically

When you visit the Site, we automatically collect certain information about your device and how you interact with the Site:

• IP address and approximate location (country/region)
• Browser type, version, and language
• Operating system and device type
• Pages visited, time spent, and referring URL
• Scroll depth, clicks, and on-page interactions (via Google Tag Manager)

3.3 Information from Third Parties

If you reach us through a referral, social media platform, or partner network, we may receive limited information about you from those sources (such as your name and contact details), with your consent or where permitted by law.

4. How We Use Information

We use the information we collect to:

• Respond to your inquiries and provide requested information
• Deliver, manage, and improve the Services you've engaged us for
• Send invoices, payment reminders, and contract-related communications
• Analyze how visitors use the Site so we can improve performance, content, and user experience
• Send occasional marketing emails about our Services (only if you've opted in — you can unsubscribe at any time)
• Comply with legal obligations, enforce agreements, and protect our rights
• Detect, prevent, and address technical issues, fraud, or security threats

5. Legal Basis for Processing

Where required by law (such as under the EU General Data Protection Regulation), we process your personal information on one or more of the following legal bases:

• Consent — when you've given us clear permission (e.g., signing up for a newsletter, accepting cookies).
• Contract — when processing is necessary to deliver Services you've engaged us for.
• Legitimate interests — when we have a legitimate business reason that doesn't override your rights (e.g., responding to inquiries, improving the Site, securing our systems).
• Legal obligation — when processing is required by law (e.g., tax records, court orders).

6. Cookies & Tracking Technologies

The Site uses cookies and similar tracking technologies to function properly and to help us understand how visitors use the Site. A cookie is a small text file stored on your device.

6.1 Types of Cookies We Use

• Strictly necessary cookies — required for the Site to function (session cookies, security tokens). These cannot be turned off.
• Analytics cookies — set by Google Analytics via Google Tag Manager. These help us understand visitor behavior in aggregate (pages visited, time on site, scroll depth, traffic sources). They do not personally identify you.
• Functional cookies — remember preferences such as language or display settings.

6.2 Managing Cookies

You can control or disable cookies through your browser settings. Most browsers allow you to refuse cookies entirely, accept only first-party cookies, or be notified when a cookie is set. Disabling cookies may affect Site functionality.

To opt out of Google Analytics specifically, you can install the Google Analytics Opt-out Browser Add-on.

7. Third-Party Services

We use a number of trusted third-party services to operate the Site and deliver Services. These providers have their own privacy policies and may collect or process information independently. The main ones include:

• Google Analytics & Google Tag Manager — for Site analytics and event tracking. Google Privacy Policy
• Web hosting provider — stores Site files and server logs (including IP addresses) for operational and security purposes.
• Email provider — handles email communication sent to and from info@xmarksthespotdigital.com.
• Payment processors — for invoice payments. Card details are handled directly by the processor; we do not store payment card numbers.
• Marketing platforms — Google Ads, Meta Ads, LinkedIn Ads, TikTok, Klaviyo, HubSpot, and similar platforms — only used as part of Services we deliver to clients, not for tracking general visitors.

We only share information with third parties to the extent necessary to perform the services they provide to us, and we require them to handle data responsibly.

8. Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share information in the following limited circumstances:

• Service providers — with the third parties listed in Section 7, only as needed to operate the Site or deliver Services.
• Legal requirements — when required by law, court order, or government request, or to protect our legal rights, safety, or property.
• Business transfers — if we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.
• With your consent — when you've explicitly authorized us to share specific information.

9. Data Retention

We keep your personal information only for as long as needed for the purposes described in this Policy or as required by law.

• Inquiry communications — typically retained for up to 24 months after the last contact, then deleted unless there's an ongoing engagement.
• Client records — retained for the duration of our engagement plus up to 7 years afterward for tax, accounting, and legal compliance.
• Analytics data — Google Analytics retains aggregated data per the configuration in our account (typically 14 months for event-level data).
• Marketing email lists — kept until you unsubscribe, then deleted.

10. Data Security

We implement reasonable technical and organizational measures to protect personal information against loss, misuse, unauthorized access, disclosure, alteration, and destruction. These include encrypted connections (HTTPS), secure password practices, access controls, and regular software updates.

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we work to maintain industry-standard practices.

11. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct inaccurate or incomplete information.
• Deletion — request that we delete your personal information, subject to legal retention requirements.
• Restriction — ask us to limit how we process your information.
• Portability — receive your information in a structured, commonly used, machine-readable format.
• Objection — object to processing based on legitimate interests or direct marketing.
• Withdraw consent — where processing is based on consent, you can withdraw it at any time.
• Lodge a complaint — with a data protection authority in your jurisdiction.

To exercise any of these rights, please contact us at info@xmarksthespotdigital.com. We may need to verify your identity before processing your request, and we will respond within the timeframes required by applicable law.

12. International Data Transfers

We are based in Michigan, United States. If you are accessing the Site or using our Services from outside the United States, please be aware that information we collect may be transferred to, stored in, and processed in the United States or other countries where our service providers operate. Data protection laws in these countries may differ from those in your country.

Where required by law, we put appropriate safeguards in place for international transfers (such as standard contractual clauses).

13. Children's Privacy

The Site and Services are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The "Last updated" date at the top of this page indicates when the Policy was last revised. Material changes will be highlighted on the Site or communicated to you directly where appropriate.

Your continued use of the Site or Services after any change constitutes acceptance of the revised Policy.

15. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

X Marks the Spot Digital Marketing
Email: info@xmarksthespotdigital.com
Phone: +1 (734) 838-5569
Website: https://xmarksthespotdigital.com/

---

This Privacy Policy works together with our Terms & Conditions. By using our Site or Services, you acknowledge that you have read and understood this Privacy Policy.