Privacy Policy

Effective date: October 2, 2026
Last updated: October 2, 2026

This Privacy Policy explains how TAO Digital Agency ("TAO Digital," "we," "us," or "our") collects, uses, shares, and protects personal information when you visit taodigitalagency.com (the "Site"), contact us, book a call, buy a product, or use our services.

TAO Digital Agency LLC is a Florida limited liability company based in the United States.

If you have questions, contact our Privacy Officer using the details in Section 15.

1. Who this policy covers

This policy applies to:

visitors to our Site;
people who contact us, fill out a form, book a call, or join our email or messaging lists;
business owners and their staff who buy from us or work with us as clients; and
people who buy our digital products, handbooks, or courses.

This policy does not cover our clients' websites or customers. When we build or manage a website, CRM, booking flow, advertising account, or app for a client, the client decides what data is collected from its own customers and why. In that role we act as a service provider that handles data on the client's behalf and under the client's instructions (see Section 8). If you are a customer of one of our clients, please read that business's privacy policy and contact the business directly.

2. Information we collect

Information you give us

Contact and business details: name, business name, job title, email address, phone number, WhatsApp number, business address, website, and social media handles.
Inquiry and project information: what you tell us in forms, emails, calls, messages, questionnaires, intake forms, diagnostics, and support tickets, including information about your business, services, goals, and results.
Account and access information: login details for our client portal, and access you grant us to your business tools (for example your website, domain, CRM, booking platform, or advertising accounts) so we can do the work you hired us for.
Payment information: billing name, billing address, and transaction details. Card and bank details are entered directly with our payment processors. We do not store full card numbers on our systems.
Communications: the content of emails, text messages, WhatsApp messages, and other messages you exchange with us.
Meeting recordings and notes: with notice at the start of the meeting, we may record, transcribe, or take AI-assisted notes of calls and video meetings so we can follow up accurately. You can ask us not to record a meeting.

Information collected automatically

When you use our Site, we and our technology providers may collect:

Device and usage data: IP address, browser type, device type, operating system, approximate location (city or region, based on IP address), pages viewed, links clicked, time on page, referring website, and the date and time of your visit.
Cookies and similar technologies: small files and scripts (such as pixels and tags) that remember your choices and help us measure how the Site and our ads perform. See Section 4.

Information from other sources

Advertising and social platforms: if you submit a lead form on a platform such as Facebook or Instagram, the platform shares the information you submitted with us.
Referral and business partners: people who refer you to us may share your contact details.
Public sources: publicly available business information, such as your website, business listings, and social media profiles.

We do not intentionally collect sensitive information such as health, financial account, biometric, or government ID information through our Site. Please do not send us this kind of information unless we ask for it for a specific, agreed purpose.

3. How we use personal information

We use personal information to:

respond to inquiries, schedule calls, and send information you request;
prepare proposals, deliver services, and manage client accounts and projects;
process payments, send invoices and receipts, and keep business and tax records;
provide customer support and send service notices (for example billing, maintenance, renewal, and security notices);
send marketing emails and messages when we have your consent or another lawful basis, and only until you opt out;
measure and improve our Site, services, content, and advertising;
show our ads to people who may be interested in our services, if you allow marketing cookies (Section 4);
protect our Site, our clients, and our business against fraud, abuse, and security threats; and
comply with the law, enforce our agreements, and resolve disputes.

We use personal information only for the purposes described here or purposes a reasonable person would expect from the context in which it was collected. If we want to use it for a new purpose, we will ask for your consent where the law requires it.

4. Cookies and tracking technologies

What we use

Category	What it does	Examples	Active without your consent?
Strictly necessary	Makes the Site work, keeps it secure, and remembers your cookie choices.	Security and load-balancing cookies, the cookie that stores your consent choice	Yes
Analytics	Helps us understand how visitors use the Site so we can improve it.	Google Analytics, loaded through Google Tag Manager	No, only if you allow it
Marketing	Measures our ads and lets advertising platforms show our ads to you on other sites and apps.	Meta Pixel, Google Ads tags	No, only if you allow it

Your choices

When you first visit the Site, a cookie banner lets you accept all, reject all, or choose by category. Non-essential cookies stay off until you choose.
You can change your choice at any time by clicking "Cookie Settings" in the footer of any page.
You can also block or delete cookies in your browser settings. Blocking strictly necessary cookies may affect how the Site works.
You can also manage ad preferences in your Google and Meta account settings.

Global Privacy Control and Do Not Track

If your browser sends a Global Privacy Control (GPC) signal, our Site treats it as a request to turn off marketing cookies for that browser, and we will not enable them unless you change the setting yourself. Our Site does not respond to browser "Do Not Track" signals, because there is no common industry standard for them. You can use the cookie banner or GPC instead.

5. Text messages, WhatsApp, and phone calls

We may communicate with you by text message (SMS), WhatsApp, or phone, for example to confirm appointments, follow up on an inquiry, share project updates, or provide support.

Consent. We send marketing or promotional text or WhatsApp messages only to people who have agreed to receive them. Agreeing is never a condition of buying anything from us.
Frequency and cost. How often we message you varies with your project or inquiry. Message and data rates from your mobile carrier may apply.
Opting out. For text messages, reply STOP to opt out or HELP for help. For WhatsApp, reply "STOP" or tell us you want to stop, or block our number. You can also email us. We honor reasonable opt-out requests made by any method, and we stop promptly.
WhatsApp. WhatsApp is operated by WhatsApp LLC, a Meta company. Messages you send us through WhatsApp are also processed by WhatsApp under its own terms and privacy policy.
No sharing of mobile opt-in data. We do not sell, rent, or share mobile phone numbers or text messaging opt-in data and consent with third parties or affiliates for their marketing or promotional purposes. We may share this information with service providers that help us send messages or provide support, only for that purpose.

Our full Messaging Terms are in Section 9 of our Terms of Service.

6. Email

We send transactional and service emails (for example invoices, receipts, project updates, and account notices) as needed to provide our services. We send marketing emails, such as newsletters, offers, and new resources, only where the law allows and you have not opted out. Every marketing email includes an unsubscribe link. We process unsubscribe requests within 10 business days.

7. How we share personal information

We do not sell personal information, and we do not share it with third parties for their own marketing.

We share personal information only as follows:

Service providers. Companies that help us run our business, under contracts or terms that limit how they may use the information, including providers of:
website hosting, cloud infrastructure, and content delivery;
CRM, email, text messaging, and WhatsApp communications;
scheduling, forms, and client portal tools;
payment processing, invoicing, and accounting;
analytics and advertising (only for the cookie categories you allow);
video meetings, call recording, transcription, and note-taking;
cloud storage, document management, and project management; and
artificial intelligence (AI) tools that help us draft, analyze, or summarize work, set up so that, where the provider offers the option, your content is not used to train public models.
Our team and contractors. Team members and independent contractors who need the information to do work for you, and who are required to keep it confidential.
Advertising platforms. If you allow marketing cookies, platforms such as Meta and Google receive information about your visit to measure and deliver our ads. You can withdraw this permission at any time through "Cookie Settings."
Legal and safety reasons. When we believe in good faith that disclosure is required by law, a court order, or a government request, or is needed to protect the rights, property, or safety of TAO Digital, our clients, or others.
Business transfers. As part of a merger, acquisition, financing, or sale of all or part of our business, subject to this policy.
With your consent or at your direction.

California residents: we do not share personal information with third parties for their direct marketing purposes, as described in California Civil Code Section 1798.83.

8. Data we handle for our clients (service provider role)

When a spa, wellness studio, or other business hires us to build or manage its website, CRM, automations, advertising, booking flows, or the 247 Routine platform, we may handle personal information about that business's own customers and leads. In that role:

we process the information only to provide the services the client hired us for, following the client's instructions and our agreement with the client;
the client is responsible for its own privacy policy, cookie banner, customer consent (including consent for texts and emails), and compliance with the laws that apply to its business;
we keep the information confidential and protect it with reasonable safeguards;
we help the client respond to customer privacy requests when asked; and
when our services end, we return or delete the client's data within a reasonable time, unless the law requires us to keep it.

Health information. We are not a healthcare provider, and we do not act as a HIPAA business associate unless we have signed a written business associate agreement with the client. Clients should not send us protected health information, such as treatment records or medical histories, without that agreement.

If you are a customer of one of our clients and want to make a privacy request, please contact that business directly. If you contact us instead, we will forward your request to the business where appropriate.

9. How long we keep information

We keep personal information only as long as we need it for the purposes in this policy, then delete it or make it anonymous. As a general guide:

Information	How long we usually keep it
Inquiries and leads who do not become clients	Up to 3 years after our last contact
Client account, contract, billing, and tax records	For the length of the relationship plus 7 years
Project files and communications	For the length of the relationship plus 3 years
Meeting recordings and transcripts	Up to 12 months, unless needed longer for an active project or dispute
Website analytics data	Up to 14 months, under our analytics settings
Marketing opt-outs	For as long as needed to make sure we keep honoring your opt-out

We may keep information longer if the law requires it, or to resolve disputes or enforce our agreements.

10. How we protect information

We use reasonable administrative, technical, and physical safeguards, including access controls, encrypted connections (HTTPS), multi-factor authentication where available, and limiting access to people who need it. No website, system, or transmission method is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal information, we will notify you and the relevant authorities as the law requires.

11. Where information is stored

We are based in the United States, and our service providers may store and process information in the United States and other countries. If you are outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

12. Your rights and choices

Depending on where you live, and subject to legal exceptions, you may have the right to:

access the personal information we hold about you and learn how we use and share it;
correct information that is inaccurate or incomplete;
delete your information;
withdraw consent where we rely on consent, for example for marketing messages or cookies (this does not affect anything we did before you withdrew it);
opt out of marketing emails, texts, and WhatsApp messages; and
complain to a privacy regulator.

We offer these choices to everyone, wherever you live.

How to make a request. Email admin@taodigitalagency.com with the subject line "Privacy Request." We may need to confirm your identity first. We respond within the time required by applicable law. Some information may be exempt, such as records we must keep for tax purposes.

If you are not satisfied with our answer, you may contact the data protection authority in your country or state.

13. Children's privacy

Our Site and services are for businesses and adults. They are not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.

14. Links to other websites

Our Site may link to other websites and platforms, including our clients' websites, booking platforms, and social media. We are not responsible for their privacy practices. Please read their privacy policies.

15. Contact us and our Privacy Officer

Our Privacy Officer is responsible for how we protect personal information.

Privacy Officer: Maayan Nadell, Owner Email: admin@taodigitalagency.com

16. Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date at the top. If we make material changes, we will give notice on the Site, and we will email active clients where appropriate, before the changes take effect.