Your info, kept simple.

Last updated October 24, 2026

The short version

• We collect what you send us. Your name, business details, messages and files when you WhatsApp, call, email or use our form.
• We use it to do the work. Replying to you, making your free preview, quoting and building your project, and keeping in touch about it.
• We don't sell your info for money. We share it only with the tools we use to run the business, and when the law requires it.
• We may advertise and measure. If we run ads on Facebook, Instagram, Google or other platforms, their tags and cookies may help show and measure those ads. You can opt out.
• You're in control. Ask us what we have, ask us to fix or delete it, or tell us to stop messaging you, any time.

Who we are

Deft Digital Media ("Deft," "we," "us") is a small studio in South Florida run by Camila Esquivel and Daniel Aguiar. We design websites and handle Google Business Profiles, social content, video ads and branding for contractors and trades.

This policy explains how we handle personal information when you visit deftdigitalmedia.com, message or call us, ask for a free preview, or become a client. For visitors and people who contact us, we decide how that information is used (in legal terms, we're the "controller"). Our work on our clients' own websites and customers is covered under Client work.

What we collect

What you give us

• Contact details. Your name, business name, phone number, email address and the area you work in.
• Messages. What you send us on WhatsApp, by text, by email or on a call, and our replies. If you leave a voicemail, we keep the recording.
• Our short form. When you press "Send my details" on our free preview page, your answers are saved on our website and emailed to us, and we may send you a confirmation email. If you choose "Send on WhatsApp" instead, nothing is saved on our site: WhatsApp opens with your answers filled in, and we receive them only when you hit send.
• Preview and project materials. Logos, job photos, videos, text, reviews, your current website address and anything else you send so we can build your preview or your project.
• Account access. When you hire us, we may need logins or access to things like your domain, hosting, Google Business Profile or social accounts. We use them only for the work you asked for.
• Billing details. Invoices, payment records and, if you pay online or use financing, details handled by that provider. We don't store full card numbers.

What we collect automatically

• Server and security logs. Like every website, our host records basic technical data such as IP address, browser, device, pages requested and the time of the visit.
• Analytics. We may use tools such as Google Analytics to understand which pages people visit, how they found us and roughly where they are (city or region, not your exact location).
• Ad measurement. We may use tags from ad platforms, described under Advertising and measurement, which can record that a visit came from an ad or that someone tapped a call or WhatsApp button.
• Cookies and similar tools. See Cookies.

What we get from others

• Ad platforms. If you fill in a lead form inside a Facebook, Instagram or Google ad, or tap an ad that opens WhatsApp, the platform passes us what you submitted or the chat you start.
• Referrals and public info. A friend or client may pass on your details, and we may look at public information about your business, such as your current website, reviews or Google listing, to prepare your preview.

How we use it

• To reply to you, answer questions and make your free homepage preview.
• To quote, plan, build and maintain your project, and to keep in touch while we work together.
• To send invoices, take payments and keep business records.
• To run, secure and fix our website, and to prevent spam and fraud.
• To understand which pages, posts and ads bring people in, and to improve them.
• To show our ads to people likely to be interested, including people who have visited our site (see Advertising and measurement).
• To follow the law, respond to lawful requests and protect our rights.

We don't use your information for automated decisions that have legal or similarly significant effects on you.

Messages, calls and texts

Most of our conversations happen on WhatsApp, by phone and by text. When you message or call us first, we'll reply on the same channel about what you asked for.

• WhatsApp. WhatsApp is run by Meta, and its own terms and privacy policy apply to your use of it. We may use the WhatsApp Business app or platform, including automatic greetings and a few quick questions, to answer faster.
• Texts and follow-ups. We only send texts or WhatsApp follow-ups about your inquiry or project, or marketing messages if you've agreed to get them. Agreeing to marketing messages is never a condition of buying from us.
• Opting out. Reply STOP to a text, tell us on WhatsApp, or email us, and we'll stop. We may send one message confirming you've opted out. Message and data rates from your carrier may apply.

We don't sell or share phone numbers or messaging consent with third parties for their own marketing.

Advertising and measurement

We may advertise on platforms like Facebook, Instagram, Google and YouTube, and measure how those ads perform. This section explains what that can involve. Where the law requires your consent first, we'll ask before these tools run.

Facebook and Instagram (Meta)

• Meta Pixel and Conversions API. We may place Meta's Pixel on our site and send events from our site or server through Meta's Conversions API. These can tell Meta that a browser or device visited a page or tapped a button (like Message us or Call), so Meta can measure our ads and show them to the right people. Contact details sent this way are hashed (scrambled) first.
• Custom and lookalike audiences. We may ask Meta to show our ads to people who visited our site or interacted with our pages, or to people similar to them. If we upload a customer list, Meta matches it in hashed form and deletes what it can't match.
• Lead ads and click-to-WhatsApp ads. If you submit a form inside a Meta ad or tap an ad that opens a WhatsApp chat with us, Meta shares that form or chat with us and records that you interacted with the ad.
• Your choices. Change the ads you see in your Facebook or Instagram Ad preferences, manage activity from other sites under Your activity off Meta technologies, and read Meta's Privacy Policy.

Google (Google Ads, Analytics and YouTube)

• Google tag and conversion tracking. We may use the Google tag to measure when an ad visit turns into a call, a WhatsApp chat or a form. Where offered, enhanced conversions send hashed contact details to improve this.
• Remarketing and audiences. We may show our ads on Google Search, YouTube and partner sites to people who visited our site, and use audience tools such as customer lists in hashed form.
• Google Analytics. We may use Google Analytics to see how people use our site. Where available, we use settings that limit data, such as Google Consent Mode.
• Your choices. Manage ad personalization at My Ad Center, block Analytics with the Google Analytics opt-out add-on, and see how Google uses data from sites that use its services.

Other platforms

We may also advertise or measure ads on other platforms, such as TikTok, Microsoft (Bing), Nextdoor, Yelp or LinkedIn, using similar tags, pixels, audiences and lead forms. Each platform handles data under its own privacy policy and offers its own ad settings.

More ways to opt out

• Many companies offer one-stop opt-outs through the Digital Advertising Alliance and the Network Advertising Initiative.
• Your phone's settings can limit ad tracking (on iPhone, "Ask App Not to Track"; on Android, delete or reset your advertising ID).
• We treat a Global Privacy Control signal from your browser as a request to opt out of targeted advertising for that browser.

Opting out means the ads you see will be less tailored, not necessarily fewer.

Cookies

Cookies are small files a website stores in your browser. Pixels, tags and browser storage work in a similar way. On our site they may be used for:

• Keeping the site working. Hosting, security and WordPress cookies that the site needs.
• Preferences. Remembering small choices, like the view you picked on our work page.
• Analytics. Counting visits and seeing which pages are useful, for example with Google Analytics.
• Advertising. Measuring ads and showing our ads to past visitors, for example with the Meta Pixel or Google Ads tags.
• Embedded content. Cookies set by services like YouTube or Google Maps when we show their content.

You can block or delete cookies in your browser settings, and most of our site still works without them. Where the law requires it, we'll show a cookie notice so you can accept or decline analytics and advertising cookies before they load, and change your choice later.

Who we share it with

We don't sell your personal information for money. We share it only as described here:

• Service providers who help us run the business and may only use it to serve us: website hosting and WordPress (including site builders like Elementor and their plugins), email and file storage, WhatsApp and phone services, analytics, scheduling, invoicing, payment or financing providers, and freelancers who help on a project.
• Ad platforms such as Meta and Google, through the tools described under Advertising and measurement. These platforms may also use the data for their own purposes under their own policies.
• People you ask us to share with, like your web host, domain registrar or the person who referred you.
• Legal reasons. When the law requires it, to answer valid legal requests, or to protect the rights, safety or property of our clients, our visitors or us.
• Business changes. If Deft is merged, sold or reorganized, information may move to the new owner, who must keep honoring this policy.

Some state laws treat using ad tags for targeted advertising as "selling" or "sharing" personal information, even when no money changes hands. If that applies to our ads, you can opt out as described under Your rights and choices.

Client work

When we build or manage a website, Google profile, social account or ads for a client, we may handle personal information about that client's own customers, like contact form entries, reviews, job photos or ad leads. In that work we act on the client's behalf (as a "service provider" or "processor"): we follow their instructions, use the data only to deliver our services to them, and don't use it for our own marketing.

If you're a customer of one of our clients, the client's privacy policy explains how they use your information, and requests about it should go to them first. We'll help our clients respond.

Clients: you own your website and content. You're responsible for having the rights to the materials you send us and for your own site's privacy policy and notices. We're happy to help set those up.

Our work and other sites

• Portfolio. Our work pages show websites, logos, photos and videos we made for clients, shared with their permission. If you appear in something we show and want it removed, tell us and we'll take care of it.
• Embedded content. Some pages may show videos, maps or posts from services like YouTube, Instagram or Google Maps. Those services can collect data and set cookies when the content loads, under their own policies.
• Links. When you click through to a client's site or another website, that site's own privacy policy applies, not ours.

How long we keep it

We keep information only as long as we need it for the reasons above, then delete it or make it anonymous. As a guide:

• Inquiries and previews that don't go ahead: up to 2 years after we last talk, unless you ask us to delete them sooner.
• Client project files and messages: while we work together and maintain your site, then up to 3 years.
• Invoices and payment records: as long as tax and accounting rules require (usually 5 to 7 years).
• Server logs: usually a few weeks to a few months, set by our host.
• Analytics and ad data: up to 14 months in our own analytics settings; ad platforms keep data under their own policies.

Security

We use sensible protections for a business our size: secure (HTTPS) connections, strong passwords and two-step sign-in on our accounts, access limited to the people who need it, and reputable providers. We keep client logins in a password manager, not in chats or email, whenever we can.

No system is perfectly secure. If a breach affects your personal information, we'll notify you and the authorities as the law requires, including Florida's data breach law.

Your rights and choices

Wherever you live, you can ask us to:

• See the personal information we have about you, and get a copy.
• Correct information that's wrong.
• Delete your information, unless we need to keep it (for example, for tax records or an active project).
• Opt out of marketing messages, and of targeted advertising or any "sale" or "sharing" of your information.
• Withdraw consent you've given, such as for cookies or texts.

US state privacy laws. Depending on where you live and the size of a business, laws such as the California Consumer Privacy Act (as amended by the CPRA), the Florida Digital Bill of Rights and similar laws in other states give these rights by law. We offer them to everyone, whether or not a particular law applies to us. The kinds of information we may collect are listed under What we collect, used as described under How we use it and shared as described under Who we share it with. We don't knowingly collect sensitive information, like government ID numbers or health details.

How to make a request.

• Email contact@deftdigitalmedia.com with "Privacy request" in the subject, or message us on WhatsApp at (561) 671-9316.
• We may ask a couple of questions to check it's really you, and we'll reply within 45 days (we'll tell you if we need more time, as the law allows).
• Someone you authorize can make a request for you; we may ask for proof they can act for you.
• If we say no, you can ask us to reconsider by replying to our answer, and we'll explain the outcome in writing.

We won't charge you more or treat you differently for using your rights. Our site doesn't respond to older "Do Not Track" browser signals, because there's no common standard for them; we do honor Global Privacy Control as described above.

Visitors outside the US

We're based in the United States and serve US businesses, but anyone can visit our site. If you're in the European Union, the UK or another place with similar laws:

• Why we use your data. To take steps you ask for before a contract and to perform it (replies, previews, projects); for our legitimate interests in running and improving our business and keeping the site secure; to meet legal obligations; and with your consent for analytics and advertising cookies where consent is required.
• Your rights. Besides the rights above, you can object to our use of your data, ask us to restrict it, ask to move it to another service, and complain to your local data protection authority.
• Transfers. Your information is stored and handled in the United States and wherever our providers operate. Where the law requires it, we rely on safeguards such as standard contractual clauses or the EU-US Data Privacy Framework.

Children

Our site and services are for business owners and adults. They're not meant for children under 13 (or under 16 where local law sets a higher age), and we don't knowingly collect their information or target ads to them. If you think a child has sent us information, contact us and we'll delete it.

Changes to this policy

We'll update this policy as our services, tools and the law change, and put the new date at the top. If a change is significant, such as using your information in a new way, we'll make it clear on this page and, where required, ask for your consent.

Contact us

Questions, requests or concerns about your privacy? Reach either of us:

• Email: contact@deftdigitalmedia.com
• Camila: WhatsApp or call (561) 671-9316
• Daniel: WhatsApp or call (561) 542-9331

Deft Digital Media · South Florida, USA