Privacy Policy | Occoquan Digital Marketing

1. Who We Are

Occoquan Digital Marketing ("Company," "we," "us," or "our") is a web design and digital marketing company located at 11166 Fairfax Blvd Suite 500 #1043, Fairfax, Virginia 22030. We serve small businesses in Northern Virginia and surrounding areas.

This Privacy Policy explains what personal information we collect, how we use and protect it, what rights you have, and how to contact us about your data. It applies to visitors to our website and to clients who use our services.

For privacy questions, contact us at hello@occoquandigital.com or (571) 275-7448.

2. Information We Collect

Information you provide directly:

Name, email address, phone number, and business name when you submit a contact form, book a consultation call, or inquire about services
Business details including address, industry, and website URL when onboarding as a client
Communications you send us through our dashboard, email, or any other channel
Payment information, which is processed by a third-party PCI-compliant payment processor — we do not store your card number, bank account details, or full payment credentials on our systems

Information collected automatically when you visit our website:

Pages visited, time on site, scroll depth, and click behavior, collected through analytics tools
IP address, browser type, operating system, and device type
Referral source — how you found our website
Geographic region at the city or region level; we do not collect precise geolocation

Information we access in connection with client services:

Google Business Profile data associated with accounts we manage on your behalf, including posts, photos, reviews, business information, and performance metrics
Google Analytics data associated with your website if we manage your performance reporting
Citation and local ranking data from third-party position tracking tools used to generate your monthly reports

We collect this third-party service data solely to deliver contracted services to you.

3. How We Use Your Information

We use the information we collect for the following purposes:

To respond to inquiries, schedule consultations, and provide information you have requested
To build, launch, and manage your website and digital presence as a client
To publish Google Business Profile content, respond to reviews, and manage your online reputation on your behalf
To generate and deliver monthly performance reports to your client dashboard
To send service-related communications, including report notifications, project updates, billing notices, and account information
To process payments for services
To improve our website, internal processes, and service offerings
To comply with applicable legal obligations

We do not sell, rent, or share your personal information with third parties for their own marketing, advertising, or commercial purposes.

4. Legal Basis for Processing

We process your personal data on the following legal bases, as applicable under the Virginia Consumer Data Protection Act (VCDPA) and other applicable law:

Contract performance — to deliver the services you have engaged us to provide
Legitimate interests — to improve our services, communicate relevant updates, prevent fraud, and operate our business effectively
Consent — where you have explicitly agreed to specific data uses, such as optional marketing communications
Legal obligation — where applicable law requires us to retain or process certain data

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies. These fall into the following categories:

Strictly necessary cookies — Required for the website to function. Cannot be disabled. Includes session management and security tokens.
Analytics cookies — Help us understand how visitors interact with our website, which pages are most visited, and where traffic comes from. We use Google Analytics for this purpose. Data is aggregated and anonymized where possible. You may opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.
Preference cookies — Remember your settings to improve your experience on return visits.

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive notification before cookies are set. Disabling certain cookies may affect the functionality of our website.

We do not use cookies to serve targeted advertising or retargeting ads to visitors of our website.

6. Third-Party Services

We use the following categories of third-party services to operate our business. Each is governed by its own privacy policy:

Website hosting and infrastructure — servers, CDN, and SSL certificate providers
Analytics — Google Analytics (Google LLC); see Google's Privacy Policy
Google Business Profile management — Google LLC; we access and manage your GBP under your authorization as part of contracted services
Local SEO and ranking tools — citation management, position tracking, and GBP insight platforms
Payment processing — a PCI-compliant third-party processor; we do not store payment card data on our systems
Email and transactional communications — email delivery services used to send reports and account notifications
Client dashboard and account management — platforms used to provide your client portal

We share only the minimum information necessary for each service to function on our behalf. We do not authorize third-party providers to use your information for their own commercial purposes.

7. Client Data — Google Business Profile and Review Management

As part of our services, we access and manage your Google Business Profile on your behalf. This includes publishing posts, scheduling photos, updating business information, and responding to customer reviews. We access and use this data solely to deliver the services you have contracted with us.

Review response content we generate on your behalf is published to Google's platform and governed by Google's own Terms of Service and Privacy Policy. We retain copies of published content as part of our performance reporting obligations and deliver that content to you as part of your monthly deliverables.

Upon cancellation of services, you retain full ownership of and access to your Google Business Profile. We do not restrict or withhold access to your GBP account or any other account we have managed on your behalf.

8. Client Website Integrations

As part of our services, we configure and install third-party integrations on client websites at the client's direction. These may include scheduling tools, payment processors, CRM platforms, live chat widgets, email marketing services, review platforms, and other software applications.

When a client-directed integration is installed on your website:

That integration's own privacy policy and terms of service govern how it collects and processes data from your website visitors
Occoquan Digital Marketing is not the data controller for visitor data collected by integrations installed at your direction
You, as the website owner, are responsible for ensuring your website's privacy policy accurately discloses any integrations active on your site and how they handle visitor data
We will inform you of the data practices of any integration we recommend or install upon request

We will not install integrations on your website without your explicit authorization.

9. Data Security

We implement industry-standard technical and organizational security measures to protect your personal information, including:

Encryption of data in transit using TLS (Transport Layer Security)
Encryption of data at rest on our servers
Access controls limiting data access to authorized personnel who require it to perform their job functions
Secure client dashboard access requiring authentication
Vendor due diligence to ensure third-party tools we use maintain appropriate security standards

No method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but commit to industry-standard practices. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

10. Data Retention

We retain contact form submissions and inquiry data for up to 24 months from the date of submission.

Client account data — including project files, communications, and billing records — is retained for the duration of your service relationship and for up to 12 months following cancellation, for legal and accounting purposes. After that period, data is deleted or anonymized.

You may request earlier deletion of your personal data at any time by contacting hello@occoquandigital.com, subject to exceptions for data we are legally required to retain.

11. Children's Privacy

Our website and services are not directed at or intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at hello@occoquandigital.com and we will delete it promptly.

12. Your Rights

Depending on your location and applicable law, you may have the following rights with respect to your personal data:

Access — Request a copy of the personal data we hold about you
Correction — Request that inaccurate or incomplete data be corrected
Deletion — Request that we delete your personal data, subject to applicable legal retention requirements
Portability — Request your data in a structured, commonly used, machine-readable format
Objection — Object to certain types of processing, including processing based on legitimate interests
Withdrawal of consent — Where processing is based on your consent, withdraw it at any time without affecting the lawfulness of processing prior to withdrawal
Opt-out of sale — We do not sell personal data; this right is included for completeness

Virginia Residents (VCDPA): Virginia residents have specific rights under the Virginia Consumer Data Protection Act, including all rights listed above and the right to appeal our decision regarding a rights request. If we deny your request, we will explain our basis for doing so. You may appeal by contacting hello@occoquandigital.com with the subject line "Rights Request Appeal."

To exercise any of your rights, contact us at hello@occoquandigital.com. We will respond within 45 days of receiving your request, as permitted under applicable law. We may need to verify your identity before processing your request. There is no fee for exercising your rights.

13. Links to Third-Party Websites

Our website may contain links to third-party websites or resources. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices or content of websites we do not operate and encourage you to review their privacy policies before submitting any personal information.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we do, we will update the "Last Updated" date at the top of this page. For material changes, we will provide notice to active clients via email at least 14 days before the changes take effect. We encourage you to review this Policy periodically.

15. Contact

For privacy questions, rights requests, or concerns about our data practices:

Occoquan Digital Marketing

11166 Fairfax Blvd Suite 500 #1043

Fairfax, Virginia 22030

Email: hello@occoquandigital.com

Phone: (571) 275-7448

We are committed to resolving privacy concerns promptly and fairly.