Privacy Policy

We collect the following categories of data:

• Contact data: name, email, phone, company, website
• Qualification data: revenue, marketing budget, services of interest
• Technical data: IP address, browser type, pages visited, time on site
• Marketing data: traffic source (UTM), interactions with ads

Data is processed for:

• Responding to your requests and scheduling strategy calls
• Delivering contracted services
• Invoicing and legal obligations (accounting, tax)
• Marketing communications - only with your explicit opt-in consent
• Improving the website and our services (anonymized analytics)

• Consent (contact form, newsletter)
• Contract performance (purchased services)
• Legal obligation (invoicing, accounting)
• Legitimate interest (analytics, fraud prevention)

We may share data with the following processors, only for the stated purposes:

• CRM and automation providers: GoHighLevel (EU/US, under Standard Contractual Clauses)
• Email marketing: GDPR-compliant providers for opt-in communications
• Analytics: Google Analytics 4 (anonymized)
• Hosting: cloud providers with EU data centers
• Authorities, when legally required

We do not sell or rent your data to third parties for their own marketing purposes.

• Contact data (unqualified leads): 12 months
• Active client data: contract duration + 5 years (fiscal obligation)
• Technical data (logs, analytics): 14 months
• Marketing communications: until you withdraw consent (unsubscribe link in every email)

Under GDPR, you have the following rights:

• Right of access to your data
• Right to rectification (correcting inaccurate data)
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to withdraw consent at any time
• Right to file a complaint with the Romanian Data Protection Authority (ANSPDCP)

To exercise any right, email sales@vargasdigital.us. We respond within 30 days.

We implement reasonable technical and organizational measures to protect data: SSL/TLS encryption, restricted access, encrypted backups, staff training, and periodic audits. In the event of a security breach, we notify the authorities and affected individuals within 72 hours, per GDPR.

Some data may be transferred outside the EEA (e.g., the US for cloud services). These transfers are governed by Standard Contractual Clauses approved by the European Commission or by providers certified under the EU-US Data Privacy Framework.

For details about the cookies we use, please see our Cookie Policy.

For any question, concern, or to exercise your rights, contact us:
Email: sales@vargasdigital.us
Phone: +1 361 273 5980
Address: Valisoara village, Cluj County, Romania