Privacy policy
DXT Agency LLC ("we") operates dxtagency.com. This policy explains what we collect, why, and what you can ask us to do about it. We serve clients internationally, so this policy reflects the rights given by the EU and UK GDPR and by California law; where your local law gives you more, your local law applies.
What we collect
| Data | Why | Legal basis |
|---|---|---|
| Name, email, company, website, budget range and message you submit through a form | To reply to you and to prepare an audit if you ask for one | Steps taken at your request before entering a contract |
| Business contact and billing details of clients | To deliver the service and issue invoices | Performance of a contract; legal obligation for records |
| Advertising account data we are given access to | To perform the work you engaged us for | Performance of a contract |
| Aggregated website analytics, if enabled | To understand which pages are useful | Legitimate interests, with IP anonymisation |
We do not knowingly collect data from anyone under 16, and we do not collect special category data.
What we do not do
- We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
- We do not add enquirers to a marketing list. If you contact us about an audit, you get a reply about the audit - not a newsletter you did not ask for.
- We do not use your advertising data for any purpose other than running your account.
Who we share it with
Only where necessary to run the business: our website host (Netlify, which processes form submissions), our email provider, and - for clients - Google, as the advertising platform. Each acts as a processor under contract. We disclose data to authorities only where legally compelled.
Where it is processed
We are a US-registered company with our operations team in Thanh Hoa, Vietnam, so your data may be processed in the United States and in Vietnam. Where personal data is transferred out of the EEA or UK, we rely on the European Commission's standard contractual clauses.
How long we keep it
Enquiries that do not become clients: 24 months, then deleted. Client records: for the engagement plus seven years where tax and accounting rules require it. Account access: revoked at the end of an engagement or earlier on request.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to our use of it, or send it to another provider. Email dat@defio.io and we will respond within 30 days. You will never be charged or treated differently for exercising a right. If you are in the EEA or UK you may also complain to your national data protection authority.
Cookies
This site sets no advertising or tracking cookies and shows no consent banner because it does not need one. Your light or dark theme choice is stored in your own browser and never leaves your device. If we add analytics in future, this section will be updated before it goes live and any non-essential cookie will be opt-in.
Security
Two-step verification on every account used for client work, access granted to named individuals rather than shared logins, and no storage of client passwords. Details on our security page. No system is perfectly secure; if a breach affects your data we will tell you and the relevant authority without undue delay.
Changes
If we change this policy we will update the date above. Material changes affecting existing clients will be sent by email.
Contact for any privacy matter: dat@defio.io, or by post to DXT Agency LLC, 1500 N Grant St, Ste N, Denver, CO 80203, United States.