Privacy Policy

• Who we are
• What we collect
• How we use it
• Google data
• Who we share with
• Cookies
• Client websites
• How long we keep it
• Security
• Your rights
• Children
• Changes
• Contact us

Who we are

IMDGFX is a web design, development and digital marketing studio based in Los Angeles, California. This policy covers imdgfx.com, our client portal, our sales team tools, and the quote widget we place on client websites. “We”, “us” and “our” mean IMDGFX.

What we collect

Information you give us

• Quote requests and contact messages: your name, email, phone number, business name, the kind of project, budget, timeline, website links you share, notes, and any images you upload.
• Free SEO audit: the website address you ask us to check, and if you request the action plan, your name, email and phone number.
• Client portal accounts: your name, email, phone, company and password (stored only as a secure one-way hash), plus the billing name and address used on invoices, and messages or files you send through support.
• Sales team accounts: if you join our sales team, your name, username, email, phone and profile photo, and the business leads you enter.
• Business leads: our sales team may record the business name, contact name, phone number and notes for businesses they speak with, so we do not contact the same business twice.

Payments

Card payments are processed by our payment provider, Helcim. We never see or store your full card number or security code. For saved-card billing that you approve, we may keep the card brand, the last four digits, the expiry date and a reference token from Helcim.

Information collected automatically

• Sign-in and security: a session cookie keeps you signed in and protects our forms from forgery (see Cookies).
• Abuse protection: your IP address is used for a short time to limit how often forms and tools can be used, and our hosting provider keeps standard server logs (such as IP address, browser type and pages requested) for security.
• SEO audit records: when someone runs the free SEO audit we record the website checked, the result and the requesting IP address.
• Quote widget statistics: on client websites that use our widget, we count when the widget is shown, opened, started and submitted, with the page address and site name. These counts do not include your name or contact details.

We do not run advertising pixels or third-party analytics on imdgfx.com.

How we use information

• To reply to you, prepare quotes, and plan and deliver the work you ask for.
• To run client accounts, invoices, renewals and support.
• To send emails about your request, project, account or billing.
• To keep our websites and tools secure and to prevent spam and abuse.
• To understand which services people ask for so we can improve them.
• To meet legal, tax and accounting obligations.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

Google Search Console and Google Analytics data

Our SEO tools can connect to Google Search Console and Google Analytics 4 when a client gives our Google account access to their property, or signs in with Google to connect it. We request read-only access and use it to show that client’s search performance and website traffic, find ways to improve their website, and prepare their reports.

• We use this data only to provide SEO reporting and recommendations to the client who owns the property.
• We do not sell it, use it for advertising, or use it to build profiles of individuals.
• We do not transfer it to anyone else, except as needed to provide the service to that client, to comply with the law, or with the client’s permission.
• Our staff do not read this data except to provide the service to that client, for security, or where the law requires it.
• Access tokens are stored encrypted, and we never change anything in a client’s Google accounts.

IMDGFX’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove our access at any time at myaccount.google.com/permissions, by removing our account from your Search Console or Analytics users, or by asking us. When access is removed we stop syncing, and we delete the synced data on request.

Who we share information with

We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising. We share information only with:

• Service providers who help us run our business, such as our website hosting and email provider, our payment processor (Helcim), and Google when you choose to connect Google services. Some of our pages also load fonts from Google Fonts, which means your browser contacts Google’s servers.
• The business you contacted: if you use a quote widget on one of our clients’ websites, your request may go to that business as well as, or instead of, IMDGFX.
• Legal and safety reasons: when required by law, or to protect the rights, property or safety of IMDGFX, our clients or others.
• Business changes: if IMDGFX is merged, sold or reorganised, information may move to the new owner under this policy.

Cookies and browser storage

We only use what is needed for the website to work. We do not use advertising or analytics cookies, so there is nothing to opt out of.

Websites we build or host for clients

Many businesses’ websites are built or hosted by IMDGFX. Each of those businesses decides what information its own website collects and is responsible for its own privacy policy. When we handle that information, we do so on the business’s behalf and only to provide our services to them. If you have a question about a business’s website, please contact that business first; we will help them respond.

How long we keep information

We keep personal information only as long as we need it for the reasons in this policy: for example, while we are talking about or working on a project, for as long as you have an account, and for as long as tax and accounting rules require us to keep billing records. When we no longer need it, we delete or anonymise it. You can ask us to delete your information sooner (see Your rights).

Security

We use HTTPS encryption across our websites, store passwords as secure one-way hashes, encrypt Google access tokens, and limit access to staff who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and will notify you if the law requires it after a breach.

Your rights and choices

Wherever you live, you can ask us to:

• tell you what personal information we have about you and give you a copy;
• correct information that is wrong;
• delete your information (unless we must keep it, for example for tax records);
• stop contacting you about our services.

California residents

Under the California Consumer Privacy Act (as amended by the CPRA), you have the right to know what personal information we collect, use and disclose; to delete it; to correct it; to opt out of the sale or sharing of personal information; and to limit the use of sensitive personal information. We do not sell or share personal information, and we do not use sensitive personal information for purposes that require a right to limit. We will not discriminate against you for using your rights.

In the last 12 months we have collected these categories: identifiers (such as name, email, phone and IP address); customer records (such as billing name, address and payment references); commercial information (such as services requested and purchased); internet activity (such as quote widget usage and security logs); and professional information (such as business name and role). They come from you, from your use of our websites, from our sales team, and from clients who give us access to their Google data. We use them for the purposes described above.

To make a request, email contact@imdgfx.com or call (818) 987-2028. We will confirm your identity using details we already hold, and respond within 45 days. You may use an authorised agent, who must show that you gave them permission.

Children’s privacy

Our website and services are meant for businesses and adults. We do not knowingly collect personal information from children under 13 on imdgfx.com. If you believe a child has sent us information, contact us and we will delete it.

Changes to this policy

We may update this policy as our services change. The “Last updated” date at the top shows when it last changed. If we make a significant change, we will make it clear on this page.

Contact us