Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

• Name
• Email address
• Phone number
• Business name and business information
• Billing details (handled by our payment processor; MDL does not store full card numbers)
• Content you share with us for service delivery, including text, photos, logos, brand assets, and account access credentials

1.2 Information Collected Automatically

• Server log data when you visit malveauxdigitallabs.com (IP address, browser type, pages viewed, time of visit). This is collected by our hosting provider for security, abuse prevention, and traffic analysis.
• Analytics and advertising data through cookies and pixels described in Section 4.

2. How We Use Information

We use information to:

• Deliver, maintain, and improve the services you have engaged us for.
• Communicate with you about your account, projects, invoicing, and service updates.
• Process payments through our payment processor.
• Respond to inquiries and provide support.
• Send occasional service-related announcements. You may opt out of non-essential messages at any time.
• Comply with legal obligations and respond to lawful requests.
• Prevent fraud, abuse, and security incidents.

We do not sell your personal information.

3. Third-Party Services

To deliver our services we rely on the following third-party providers. Each has its own privacy practices, which we recommend reviewing if you have concerns about their data handling.

• Google. Google Workspace (email and document storage), Google Business Profile, Google Search Console, and Google Analytics where applicable. Email and business profile data are processed under Google's terms.
• Meta. Facebook, Instagram, and Meta Business Manager for Clients on Meta Ads. The Meta Pixel on malveauxdigitallabs.com collects website usage data for our own marketing performance measurement.
• Twilio. Used for text-message communications and routing.
• Supabase. Used for application data storage in some Client services.
• Netlify. Hosting provider for malveauxdigitallabs.com and many Client websites.
• Cloudflare. Used for DNS, security, and content delivery on some Client sites.
• Payment processors such as Stripe or Square. Payment card data is collected and stored by the processor, not by MDL.

We share Client information with these providers only as needed to deliver agreed-upon services.

4. Cookies and Tracking on malveauxdigitallabs.com

Our website uses the following cookies and tracking technologies:

• Meta Pixel. Sets first-party cookies (such as _fbp) and may load third-party cookies from facebook.com. Used to measure ad performance and inform our marketing.
• Hosting analytics. Our hosting provider may collect server-side request data for traffic analysis. This is anonymized at the aggregate level and not used for individual tracking.

We do not currently use Google Analytics or other third-party behavioral tracking on this marketing site. You may block or delete cookies in your browser settings at any time. Doing so may affect parts of the site experience.

5. Data Storage and Security

We store information in:

• Hosted email and business accounts (Google Workspace).
• Cloud storage and application databases (Google Drive, Supabase, and similar services).
• Encrypted local devices owned by Caden Malveaux.

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encrypted devices, strong passwords, two-factor authentication on critical accounts, and access limited to people who need it to deliver service.

No system is perfectly secure, and we cannot guarantee absolute security. In the event of a security breach involving personal information, we will notify affected parties as required by applicable law.

6. Client Data Handling

As part of delivering services to our Clients, we may have access to additional data including:

• Website analytics and visitor data on the Client's site.
• Customer messages routed through the Client's site forms or chat tools.
• Social media account data and direct messages.
• Email contact lists.
• Meta and Google ad account data, including audience definitions and campaign performance.

We use this data solely to deliver the Client's services. We do not share it with third parties except as needed to operate the service (for example, with the platforms named in Section 3) or as required by law.

7. Data Retention

We retain Client information for the duration of the engagement and for a reasonable period afterward (typically up to 24 months) to comply with legal, tax, and accounting obligations. After this period, data is deleted or anonymized.

Marketing inquiry data (people who contact us but do not become Clients) is retained for up to 12 months and then deleted unless we have an ongoing conversation.

You may request earlier deletion as described in Section 9.

8. Your Rights

8.1 General Rights

You have the right to:

• Access information we hold about you.
• Correct inaccurate information.
• Request deletion of your personal information (see Section 9).
• Opt out of non-essential communications.

8.2 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including:

• The right to know what categories of personal information we collect, the sources, and the purposes.
• The right to request a copy of the personal information we hold about you.
• The right to request deletion of your personal information.
• The right to opt out of the sale of personal information. We do not sell personal information.
• The right to non-discrimination for exercising your privacy rights.

To exercise these rights, contact caden@malveauxdigitallabs.com. We will respond within 45 days. We may need to verify your identity before fulfilling the request, which may include confirming information already on file.

9. Right to Deletion

You may request deletion of your personal information at any time by emailing caden@malveauxdigitallabs.com. We will delete the information we hold within 30 days unless we are required to retain certain records by law (for example, billing or tax records). We will tell you what we cannot delete and why.

Active Clients should note that deletion of certain operational data may interrupt service delivery. We will discuss this with you before taking action.

10. Children's Privacy

Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes affecting active Clients will be communicated by email in advance of taking effect.

12. Contact

Questions about this Privacy Policy, or requests related to your personal information, can be sent to:

Malveaux Digital Labs
caden@malveauxdigitallabs.com
Baton Rouge, Louisiana