1. Introduction

DSA Growth Agency ("we," "us," "our") is operated by DSAECOM LLC, a Limited Liability Company registered in the State of New Mexico, United States. We respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, share, and protect information when you visit dsagrowth.com, contact us, or engage our services. It applies to all visitors, prospects, and clients of DSA Growth Agency.

By using our website or services, you agree to the practices described in this Policy.

2. Information we collect

2.1 Information you provide to us

When you submit our contact form, request a strategy call, or onboard as a client, we collect:

• Full name and professional title
• Work email address
• Company or brand name and website URL
• Monthly advertising spend range
• Information about your business, vertical, and growth challenges
• Billing information (provided directly to our payment processor)

2.2 Information collected automatically

When you visit our website, we automatically collect technical data:

• IP address and approximate geographic location
• Browser type, language, and operating system
• Pages visited, time spent, and referring URLs
• Device identifiers and cookie identifiers

2.3 Information from third parties

If you connect us to your Meta Business Manager, Shopify store, or analytics platforms as part of our services, we may receive data from those platforms. We only access data you authorize and use it solely to deliver our services.

3. How we use your information

We use your information to:

• Respond to inquiries and provide requested services
• Deliver, manage, and optimize our advertising management services
• Send transactional communications (onboarding, reporting, billing)
• Send service-related updates and, where permitted, marketing communications
• Improve our website, services, and client experience
• Comply with legal obligations and enforce our Terms of Service
• Detect, prevent, and address fraud or security incidents

4. Legal basis for processing (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, we process your personal data based on the following legal bases:

• Contract performance: to deliver services you have engaged us for
• Legitimate interests: to operate, secure, and improve our business
• Consent: for marketing communications and non-essential cookies
• Legal obligation: to comply with applicable laws and regulations

5. How we share your information

We do not sell your personal data. We share information only as follows:

• Service providers: hosting (Shopify), email (Google Workspace), CRM, analytics, and payment processors that help us operate
• Advertising platforms: when you engage our services, we operate within Meta and other platforms under their respective terms
• Professional advisors: legal, accounting, and compliance advisors under confidentiality obligations
• Legal requirements: when required by law, court order, or to protect our rights
• Business transfers: in the event of a merger, acquisition, or asset sale, subject to confidentiality protections

6. Data retention

We retain personal data only as long as necessary for the purposes described:

• Prospect inquiries: 24 months from last interaction
• Active client records: for the duration of the engagement and 7 years after termination (tax and accounting obligations)
• Marketing contacts: until you unsubscribe or 36 months of inactivity
• Website analytics: up to 26 months

7. Your rights under GDPR

If GDPR applies to you, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erasure ("right to be forgotten") subject to legal retention requirements
• Restrict processing in certain circumstances
• Data portability — receive your data in a structured, machine-readable format
• Object to processing based on legitimate interests or for direct marketing
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with a supervisory authority in your EU member state

To exercise these rights, contact us at hello@dsagrowth.com. We respond within 30 days.

8. Your rights under CCPA

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Opt out of the "sale" or "sharing" of personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights
• Correct inaccurate personal information

To submit a verifiable consumer request, email hello@dsagrowth.com.

9. International data transfers

DSAECOM LLC is based in the United States. If you access our services from outside the US, your data will be transferred to and processed in the United States. Where required by law, we rely on appropriate safeguards such as Standard Contractual Clauses for transfers from the EEA, UK, or Switzerland.

10. Cookies and tracking

We use cookies and similar technologies to operate our website, analyze traffic, and improve your experience. See our Cookie Policy for details and how to manage your preferences.

11. Security

We implement technical and organizational measures designed to protect personal data from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

12. Children's privacy

Our services are intended for businesses and professionals. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal data, contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated via email or a prominent notice on our website.

14. Contact us

For privacy-related inquiries, requests, or complaints, contact: