Privacy Policy | Digital Publik

Privacy Policy

Follow us

1. Scope & Definitions
  This Privacy Policy applies to data collected through our website and in the course of providing services. It distinguishes between:
- B2B Contact Data: Information from potential and existing clients (e.g., name, business email).
- Client Campaign Data: Information that clients may provide for inclusion in marketing campaigns, which may include Protected Health Information (PHI) under HIPAA when working with U.S. healthcare providers.
- Website Visitor Data: Information from cookies and analytics.
1. Data We Collect & How We Use It
- Direct Interactions: We collect business contact details to communicate, provide proposals, and deliver services. Legal Basis: Contractual necessity, legitimate interest.
- Service Delivery: As a marketing agency, we may process data on behalf of our clients as a Data Processor. Such processing is governed by a Business Associate Agreement (BAA) or Data Processing Agreement (DPA) as required by HIPAA, GDPR, or other regulations. Clients are responsible for ensuring they have lawful grounds to provide such data to us.
- Automated Technologies: We use cookies for site functionality and analytics (see Cookies Policy).
1. Data Sharing & Disclosure
  We do not sell your data. We share information only under these circumstances:
- With sub-processors essential for our service (e.g., email service providers, cloud hosting) under strict contractual safeguards.
- To comply with legal obligations or protect our rights.
- With your consent.
1. Data Security
  We implement technical and organizational measures to protect data. When handling PHI or other sensitive data on a client’s behalf, we adhere to the specific security requirements outlined in our BAAs or DPAs.
2. Your Rights
  Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise these rights for B2B Contact or Website Visitor Data, contact us. For Client Campaign Data processed on a client’s behalf, please contact the relevant client (the Data Controller).
3. International Transfers
  For clients subject to GDPR, we ensure transfers outside the EEA are protected by Standard Contractual Clauses or other approved mechanisms.