Privacy Policy

Our Service is operated from and primarily serves users within the United States. However, given the global nature of the internet, our website may be accessible from any jurisdiction worldwide. Where applicable privacy legislation in your jurisdiction provides for rights beyond those described in this policy, we will endeavor to respect those rights to the extent required by law.

For the purposes of this Privacy Policy, -- Personal Information -- means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. This includes, but is not limited to, identifiers such as a name, email address, phone number, internet protocol address, or other online identifier. -- Processing -- means any operation or set of operations performed on personal information, whether or not by automated means, including collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

We reserve the right to update or modify this Privacy Policy at any time. When changes are made, we will revise the -- Last Updated -- date at the bottom of this page. In the case of material changes, we will provide additional notice through our website or via email where appropriate. Your continued use of the Service after any modification constitutes your acceptance of the updated policy.

When you fill out our contact form, subscribe to communications, or otherwise voluntarily submit information through the Service, you may provide us with:

• Full legal name and any professional titles
• Email address and telephone number
• Company or organization name and industry
• Job title or role within your organization
• Project descriptions, timelines, goals, and requirements
• Any additional information you choose to include in messages or correspondence

When you navigate through and interact with our Service, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns. This includes:

• Internet Protocol -- IP -- address and approximate geographic location derived from it
• Browser type, version, and language preferences
• Operating system, device type, and screen resolution
• Referring and exit pages, including URLs and date and time stamps
• Pages viewed, time spent on pages, and clickstream data
• Search queries that led you to our website

We use cookies -- small text files stored on your device -- and similar technologies such as web beacons and pixels to enhance your browsing experience and collect analytics data. Cookies may be session-based -- deleted when you close your browser -- or persistent -- remaining on your device for a set period. We categorize our cookie usage as strictly necessary cookies, performance and analytics cookies, and functionality cookies. Further details on cookie management are provided in Clause 12 of this policy.

We may receive information about you from third-party service providers, analytics partners, and publicly available sources. This may include business contact information, professional background information, and aggregated demographic data. We treat information received from third parties in accordance with this Privacy Policy and any additional restrictions imposed by the source of the information.

We use your information to provide, maintain, and improve the Service, including responding to inquiries, processing contact form submissions, delivering requested content, and ensuring the technical functionality and security of our website infrastructure. This includes monitoring server logs, diagnosing technical issues, and maintaining service availability.

Information you provide through our contact form or via email is used to communicate with you about your inquiries, project proposals, service requests, and any ongoing business relationship. We may also use your contact information to send administrative messages, service announcements, and responses to your support requests.

We analyze aggregated and anonymized usage data to understand how visitors interact with our Service, identify popular content and features, measure the effectiveness of our online presence, and make informed decisions about website improvements. This analysis is conducted in ways that do not identify individual users.

With your consent where required by law, we may use your contact information to send you newsletters, service updates, promotional materials, and information about our capabilities that we believe may be relevant to your interests. You may opt out of marketing communications at any time by following the unsubscribe instructions included in each message or by contacting us directly at reach@sdadigital.hair.

We may use and disclose your information as necessary to comply with applicable laws, regulations, legal processes, or governmental requests. We also reserve the right to use information to protect the rights, property, and safety of SDA Digital Ventures LLC, our users, and the public, including to detect, prevent, or otherwise address fraud, security, or technical issues.

Where you have provided clear and affirmative consent for us to process your personal information for a specific purpose -- such as receiving marketing communications or the placement of non-essential cookies -- we rely on that consent as our legal basis. You have the right to withdraw consent at any time, though such withdrawal will not affect the lawfulness of processing conducted prior to the withdrawal.

We may process your information where it is necessary for our legitimate business interests or those of a third party, provided those interests are not overridden by your data protection rights. Legitimate interests include operating and improving our Service, responding to inquiries about our services, protecting the security of our systems, and conducting business development activities.

Where processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract, we rely on contractual necessity as the legal basis. This applies to processing related to service agreements, statements of work, and other contractual relationships between you and SDA Digital Ventures LLC.

We may process your personal information where necessary to comply with a legal or regulatory obligation to which SDA Digital Ventures LLC is subject. This includes responding to lawful requests from public authorities, maintaining records as required by tax and corporate legislation, and complying with court orders.

We engage third-party service providers to perform functions on our behalf, including website hosting, analytics, email delivery, and IT infrastructure management. These providers have access to personal information only as necessary to perform their functions and are contractually bound to process such information solely in accordance with our instructions and applicable data protection laws.

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy involving SDA Digital Ventures LLC, your personal information may be transferred or disclosed as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

We may disclose your information to government authorities, law enforcement agencies, courts, or other third parties when we believe disclosure is necessary to comply with a legal obligation, protect our rights, investigate potential violations, or defend against legal claims. We will endeavor to provide you with notice of such disclosure where legally permissible.

We may share your information for purposes not described in this policy when we have obtained your explicit consent to do so. You may revoke such consent at any time by contacting us using the details provided in Clause 16 below.

Contact form submissions and related correspondence are retained for the duration of the business relationship plus a period of three years following the conclusion of the engagement, or longer if required by applicable law. Automatically collected analytics data -- including IP addresses, browser information, and page view logs -- is retained in identifiable form for up to twenty-six months and thereafter anonymized or aggregated.

When personal information is no longer required for the purposes for which it was collected, we securely delete or anonymize it in accordance with industry-standard data sanitization practices. Hard copies are shredded or incinerated; digital records are permanently erased using secure deletion protocols that render the data unrecoverable.

In certain circumstances, we may be required to retain information beyond standard retention periods to comply with legal holds, litigation requirements, or regulatory investigations. In such cases, the information will be preserved and isolated from routine processing until the legal hold is lifted.

We employ encryption in transit using Transport Layer Security -- TLS -- protocols for all data transmitted between your browser and our servers. We also enforce encryption at rest for stored data, implement network segmentation and firewalls, conduct regular vulnerability scanning and penetration testing, and maintain intrusion detection and prevention systems. Access to production systems is restricted through multi-factor authentication and role-based access controls.

Access to personal information within SDA Digital Ventures LLC is restricted to authorized personnel who have a legitimate business need to access such data. All personnel with access to personal information are bound by confidentiality obligations and receive regular training on data protection and cybersecurity best practices. We maintain documented incident response and breach notification procedures.

In the event of a data breach involving your personal information, we will notify you and the relevant supervisory authorities without undue delay and, where feasible, within seventy-two hours of becoming aware of the breach -- or in accordance with the specific notification timelines mandated by applicable law. Our notification will describe the nature of the breach, the categories and approximate number of data subjects affected, the likely consequences, and the measures taken or proposed to address the breach.

You have the right to request confirmation of whether we process your personal information and, where that is the case, to obtain access to that information along with details about the purposes of processing, categories of data concerned, recipients to whom the data has been disclosed, and the envisaged retention period.

You have the right to request the correction of inaccurate personal information we hold about you. Taking into account the purposes of the processing, you also have the right to have incomplete personal information completed, including by means of providing a supplementary statement.

You may request the deletion of your personal information under certain circumstances -- for example, where the data is no longer necessary for the purposes for which it was collected, where you withdraw consent on which processing is based, or where the processing is unlawful. This right is subject to exceptions, such as where retention is required by law or for the establishment, exercise, or defense of legal claims.

You have the right to request the restriction of processing of your personal information in certain situations, including where the accuracy of the data is contested, the processing is unlawful but you oppose erasure, or we no longer need the data but you require it for legal claims.

Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to have that information transmitted directly to another data controller where technically feasible.

You have the right to object, on grounds relating to your particular situation, to the processing of your personal information based on our legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defense of legal claims.

Where processing of your personal information is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of the rights described above, please contact us using the contact details provided in Clause 16 of this policy. We may need to verify your identity before processing your request, which may require you to provide additional information to confirm your identity. We will respond to your request within the timeframe required by applicable law -- typically thirty days, extendable by an additional thirty days where necessary.

In the preceding twelve months, we may have collected the following categories of personal information as defined under the CCPA: identifiers -- such as name, email address, IP address, and similar identifiers -- commercial information -- such as records of services inquired about -- internet or electronic network activity information -- such as browsing history and interactions with our website -- and professional or employment-related information -- such as job title and company name where provided in a contact form.

California residents have the right to request that we disclose what personal information we collect, use, disclose, and sell -- though we do not sell personal information. You may request disclosure of the specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purpose for collecting the information, and the categories of third parties with whom we share the information.

California residents may request deletion of personal information we have collected from them, subject to certain exceptions set forth in the CCPA -- including where retention is necessary to complete a transaction, detect security incidents, comply with a legal obligation, or otherwise use the information in a lawful manner compatible with the context in which the information was provided.

SDA Digital Ventures LLC does not sell personal information as the term -- sell -- is defined under the CCPA, nor do we share personal information for cross-context behavioral advertising purposes. We have not sold or shared personal information in the preceding twelve months and have no plans to do so.

We will not discriminate against you for exercising any of your CCPA rights. This means we will not deny you services, charge you different prices, provide a different level or quality of services, or suggest that you may receive a different price or level of quality for exercising your rights under California law.

Your personal information may be transferred to, stored in, and processed in countries outside the EEA, including the United States. Where such transfers occur, we ensure that appropriate safeguards are in place, including the use of Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms. By using our Service and providing your information, you acknowledge and consent to such transfers.

If you are located in the EEA or the United Kingdom, you have the right to lodge a complaint with the supervisory authority in your country of residence, place of work, or place of the alleged infringement if you believe that our processing of your personal information violates applicable data protection law. We encourage you to contact us first to allow us the opportunity to address your concerns directly.

We have designated a data protection contact who may be reached at reach@sdadigital.hair for matters relating to the processing of personal data under the GDPR and equivalent data protection frameworks. Please include -- GDPR Inquiry -- in the subject line for prompt routing.

If you are a parent or guardian and you believe that your child has provided us with personal information without your consent, please contact us immediately at reach@sdadigital.hair. We will take steps to investigate and, if confirmed, promptly remove such information from our records.

We comply with the requirements of the Children's Online Privacy Protection Act -- COPPA -- and other applicable laws concerning the collection of personal information from minors. We do not condition a child's participation in any activity on the disclosure of more personal information than is reasonably necessary to participate in that activity.

These cookies are essential for the operation of our website. They enable core functionality such as security, network management, and accessibility. The website cannot function properly without these cookies and they cannot be disabled through our cookie management interface. They are typically set in response to actions you take that amount to a request for services, such as setting your privacy preferences or filling out forms.

These cookies collect information about how visitors use our website -- for instance, which pages are visited most often, the time spent on each page, and any error messages encountered. The information collected is aggregated and anonymized, and is used solely to improve the performance and user experience of our website. We may use third-party analytics services -- such as Google Analytics -- that set their own cookies for this purpose.

These cookies allow the website to remember choices you make -- such as your language preference or the region you are in -- and provide enhanced, more personalized features. The information collected by these cookies may be anonymized and cannot track your browsing activity on other websites.

You may manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or alert you when a cookie is being sent. Please note that disabling certain categories of cookies may impact the functionality and features available on our website. For detailed instructions, consult the help documentation provided by your browser vendor.

Some browsers incorporate a Do Not Track -- DNT -- feature that signals to websites that you visit that you do not want your online activity to be tracked. Because there is not yet a common understanding of how to interpret the DNT signal, our website does not currently respond to browser DNT signals. We continue to monitor developments in this area and will adjust our practices as standards evolve.

When you leave our website via a hyperlink, we encourage you to read the privacy policy and terms of service of every website you visit. Our inclusion of a link does not imply endorsement of the linked site or its operators. We bear no responsibility for the data collection, use, or security practices of any third party.

Content on our website may include embedded materials -- such as fonts and scripts -- that are hosted on third-party servers. These resources may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that third-party service.

Our Service may include social media features such as share buttons or interactive mini-programs. These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our website. Your interactions with these features are governed by the privacy policy of the company providing them.

You are responsible for ensuring that all information you submit through our website is truthful and accurate to the best of your knowledge. If any of the information you have provided changes -- for example, your email address or telephone number -- you should notify us promptly so that we may update our records accordingly.

If you provide us with personal information about another person -- such as a colleague or business associate -- you confirm that you have obtained that person's consent to disclose their information to us and that you have informed them of this Privacy Policy and how their information will be processed.

All commercial emails sent by us clearly identify the sender, include our physical mailing address, and contain a conspicuous and functional unsubscribe mechanism. You may opt out of receiving commercial email from us at any time by following the unsubscribe instructions in the email or by contacting us directly. We honor all opt-out requests within ten business days.

Certain communications are necessary for the operation of our business relationship and are not subject to the same opt-out requirements under CAN-SPAM. These include messages related to account administration, service announcements, billing notifications, and responses to your specific inquiries. You may continue to receive these transactional messages even after opting out of marketing communications.

SDA Digital Ventures LLC
Attn: Privacy Office
7533 S Center View Ct
West Jordan, UT 84084-5526
United States of America

Email: reach@sdadigital.hair
Phone: +1 (959) 799-6094
Website: https://www.sdadigital.hair

For GDPR-related inquiries, please include -- GDPR Inquiry -- in your email subject line. For CCPA-related requests, please include -- CCPA Request -- in your email subject line. These identifiers help us route your inquiry to the appropriate team member and respond within the legally mandated timeframe.

We acknowledge all privacy-related inquiries within five business days and provide substantive responses within thirty calendar days, unless a longer response period is permitted by applicable law. If we require additional time -- for example, due to the complexity of your request or the number of requests we have received -- we will notify you of the extension within the initial thirty-day period.

If you have a complaint regarding our handling of your personal information, we encourage you to contact us first to allow us the opportunity to resolve the matter directly. If we are unable to reach a satisfactory resolution, you may have the right to file a complaint with the relevant data protection supervisory authority in your jurisdiction. For United States residents, this may include the Federal Trade Commission -- FTC -- or your state attorney general's office. For EEA and UK residents, a list of supervisory authorities is available through the European Data Protection Board website.

This Privacy Policy is governed by and construed in accordance with the laws of the State of Utah, United States of America, without regard to its conflict of law principles. Any disputes arising out of or relating to this policy shall be subject to the exclusive jurisdiction of the state and federal courts located in Salt Lake County, Utah, unless otherwise required by the data protection laws of your country of residence.