Privacy
Privacy policy.
What we collect, why, who we share it with, and what you can do about it. In plain text. Last updated 2026-04-18.
Who we are
GetDigitize LLC ("GetDigitize", "we", "us") is a US-incorporated PR and media firm headquartered in California. Our website is getdigitize.com. Privacy questions go to [email protected].
What we collect
Three categories of data only.
- Form data: name, email, company, role, and message text when you fill out the contact form. Stored in our Google Workspace inbox and Notion CRM.
- Email correspondence: any email you send us, retained per our 36-month email retention policy.
- Server logs: IP address, user agent, page requested, and timestamp. Cloudflare logs only. Retained for 30 days then aggregated.
We do not use Google Analytics, Mixpanel, Amplitude, or any other third-party analytics on the marketing site. We do not run marketing pixels (no Facebook Pixel, no LinkedIn Insight). We do not use session replay tools.
Why we collect it
- To respond to your contact form submission or email
- To run the engagement if you become a client
- To send our optional weekly newsletter (only if you opt in)
- To prevent abuse (Cloudflare logs)
Who we share it with
We share data with the third-party tools we use to run the firm. Each is SOC 2 Type II certified.
- Google Workspace (email, calendar, documents)
- Notion (project tracking, CRM)
- FormSubmit (contact form processing)
- Stripe (payment processing for clients only)
- Cloudflare (hosting and CDN)
- Google reCAPTCHA (spam prevention on the contact form)
Full subprocessor list and Data Processing Agreement (DPA) available on request from any client. Email [email protected].
Retention
- Active client data: for the life of the engagement plus 12 months
- Past client data (case studies, press logs): indefinitely unless deletion is requested
- Form submissions from prospects: 24 months
- Email logs: 36 months
- Server logs (Cloudflare): 30 days then aggregated
Your rights
If you are a California resident (CCPA / CPRA), an EU/EEA resident (GDPR), or a UK resident (UK GDPR), you have the right to:
- Know what personal data we hold about you
- Request a copy of that data in a portable format
- Request deletion ("right to be forgotten")
- Opt out of any future communications
- Object to processing
- Lodge a complaint with your local data protection authority
To exercise any right, email [email protected]. We respond within 30 days.
Children
Our services are not directed at children under 16. We do not knowingly collect data from children. If you believe we have, email [email protected] and we will delete it within seven days.
Updates
We update this policy when our practices change. Material changes are linked from the home page footer for 30 days. Last updated 2026-04-18.
Contact
Privacy questions: [email protected]. Security disclosures: [email protected]. General contact: [email protected].