Digifinity Privacy Policy
Last updated: September 18, 2026
Digifinity (“we”, “us”) explains below how we handle personal information in connection with digifinity.us (the “Site”) and our services.
This Policy covers:
- Site visitors
- Prospective and current clients
- Business contacts we reach through outreach
- Candidates in recruitment engagements
- Personal information we process for clients
Who We Are
- Entity: Digifinity
- Address: 535 North Michigan Ave, Unit 1705, Chicago, IL 60611, USA
- Privacy requests: info@digifinity.us
- General: info@digifinity.us · +1 (872) 366-7894
For privacy purposes, Digifinity may act as a business or service provider in relation to information collected through its Site and, depending on the services provided, may act as a processor or service provider on behalf of its clients.
What We Collect
- Identifiers – name, email, postal address, phone number, IP address, online identifiers
- Commercial information – services enquired about or purchased, records of our communications
- Site activity – pages viewed, referring URLs, device and browser details, email and advertising interactions
- Professional information – job title, employer, industry, company size
- Recruitment information – work history, qualifications, references, availability
- Approximate location – inferred from IP address; we do not intentionally collect precise geolocation through the Site
- Inferences – conclusions about your likely interest in our services
- Recordings – where a meeting is recorded, with notice and consent where required by applicable law
Sensitive information
- We do not intentionally collect sensitive personal information unless it is reasonably necessary for a service we provide or is voluntarily provided to us.
- In recruitment work, we may receive work authorization status or professional licensure details where a client or candidate provides them.
- We do not use sensitive information to infer characteristics about individuals or disclose it except as permitted or required by applicable law.
- Please do not send us unnecessary information concerning health, religion, ethnicity, sexual orientation, union membership, or other sensitive personal information.
Where It Comes From
We may collect personal information from the following sources:
- From you – forms, email, phone, WhatsApp, meeting bookings, and direct engagements
- Automatically – cookies and similar technologies, as described in Section 6
- From third parties – business contact data providers, public professional sources, advertising and analytics platforms
- From our clients – where they provide data for us to process on their behalf, as described in Section 5
- From candidates and their references – in connection with recruitment engagements
Why We Use It, and Our Outreach
We use personal information to:
- Provide and improve our services
- Respond to enquiries and prepare quotes
- Administer engagements, invoicing and payment
- Communicate about services and relevant offers
- Conduct marketing and business development
- Measure our own marketing performance
- Maintain security and prevent fraud
- Comply with legal obligations and defend legal claims
Legal bases where GDPR or UK GDPR applies
Where GDPR or UK GDPR applies, we rely on appropriate legal bases including contract performance, our legitimate interests in operating and promoting our business, your consent where required, and compliance with legal obligations.
If we contacted you first
- That was generally business-to-business outreach
- We may collect your name, job title, employer, business email and publicly available professional details
- Sources may include professional networking platforms, public company sources and third-party business data providers
- Where permitted by applicable law, we rely on legitimate interests in conducting relevant business development activities
- We use such information to contact you about services that may be relevant to your professional role or organisation
- We do not sell this information for monetary consideration
To stop hearing from us
You may reply to any message, use the unsubscribe link included in any marketing email, or write to info@digifinity.us.
We may maintain a suppression list containing the minimum information necessary to honour your opt-out request and prevent future unwanted communications.
Your rights apply here too. Depending on where you live and the applicable law, business contacts may have privacy rights in relation to their personal information. See Section 8.
Information We Handle for Clients
- Where we deliver services for a client, we may process personal information that the client controls, including customer records, CRM data, website analytics and candidate information.
- In those circumstances, the client generally acts as the controller or business responsible for the information, and we act as the processor, service provider or contractor, as applicable.
- We process such information only in accordance with the client’s instructions and applicable contractual obligations, except where otherwise required by law.
- If a client provided us with your information, please direct your privacy request to that client in the first instance. We will reasonably assist the client in responding to applicable requests and, where appropriate, forward requests to the relevant client if we can identify them.
Cookies, Tracking and Advertising
Our Site may use cookies and similar technologies for functionality, analytics, advertising and performance measurement.
The technologies actually used on the Site may change from time to time.
- Strictly necessary cookies – required for the Site to operate and provide requested functionality
- Analytics cookies – may help us understand how visitors use the Site, including technologies such as Google Analytics where enabled
- Advertising cookies and similar technologies – may be used to measure advertising effectiveness and show relevant advertising to visitors or previous visitors, including technologies such as Google Ads, Meta Pixel or LinkedIn Insight Tag where enabled
What this means
- Our use of advertising technologies may constitute “sharing” for cross-context behavioural advertising under California law and may constitute “targeted advertising” under other applicable U.S. state privacy laws.
- Where required by applicable law, we honour the Global Privacy Control (GPC) signal and treat it as a valid opt-out request.
- Browser Do Not Track signals are not standardised, and we do not treat them as a separate universal opt-out mechanism.
- You may manage cookies through our cookie-consent mechanism, where available, or through your browser settings. Disabling certain cookies may affect Site functionality.
Who We Share It With, and Where It Goes
We may disclose personal information to:
- Service providers and subprocessors – including hosting, email, CRM, analytics, advertising, payment, scheduling and technology providers, subject to appropriate contractual or other safeguards
- Advertising and analytics partners – as described in Section 6
- Clients – where we provide services on their behalf
- Professional advisers – including legal, accounting, financial and other advisers, subject to applicable confidentiality obligations
- Business transaction participants – including an acquirer or prospective acquirer in connection with a merger, financing, acquisition or sale of assets
- Authorities and other parties – where disclosure is required by law or reasonably necessary to protect rights, safety or property
We do not sell personal information for monetary consideration. However, our use of certain advertising and analytics technologies may constitute a “sale” or “sharing” under certain U.S. state privacy laws, even where no money is exchanged.
International transfers
- Personal information may be accessed and processed by personnel located in India.
- Subprocessors and service providers may be located in the United States, European Economic Area and other jurisdictions.
- Where required for transfers from the EEA, UK or Switzerland, we may rely on appropriate transfer mechanisms, including Standard Contractual Clauses and the UK International Data Transfer Addendum.
- Privacy laws in jurisdictions where we operate or where information is processed may differ from those applicable in your jurisdiction.
Your Rights
Depending on where you live and the laws applicable to you, you may have the right to:
- Know and access the personal information we hold about you, including applicable categories, sources, purposes and recipients
- Request deletion of your personal information
- Request correction of inaccurate personal information
- Opt out of the sale or sharing of personal information and targeted advertising, where applicable
- Limit certain uses of sensitive personal information, where applicable
- Opt out of certain profiling or automated processing used to make decisions with legal or similarly significant effects, where applicable
- Appeal a refusal to act on your privacy request, where applicable
- Not be discriminated against for exercising applicable privacy rights
These rights may apply to business contacts as well as consumers, depending on the applicable law.
How to exercise your rights
- Email info@digifinity.us, or write to the address in Section 1
- We may verify your identity before responding, usually by confirming information we reasonably believe we already hold about you
- We will respond within the period required by applicable law. Where applicable law permits an extension, we may extend the response period and provide notice of the extension
- Authorised agents may submit requests on your behalf where permitted by applicable law, subject to appropriate written authorisation and verification
To opt out of sale, sharing and targeted advertising
Where these rights apply, you may:
- Use the Your Privacy Choices link in our website footer
- Send a Global Privacy Control signal through your browser
- Email info@digifinity.us
EEA, UK and Switzerland
If you are located in the EEA, UK or Switzerland, you may also have rights to restrict or object to certain processing, receive your personal information in a portable format, withdraw consent where processing is based on consent, and lodge a complaint with your applicable supervisory authority.
Retention and Security
How long we keep it
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain business records, comply with legal obligations, resolve disputes and enforce our agreements.
Our general retention periods are:
- Enquiry and prospect records – approximately 24 months from last meaningful contact
- Client engagement records – for the duration of the engagement plus approximately 7 years, where appropriate for legal, accounting or business-record purposes
- Candidate records – approximately 12 months from last activity, unless a client instructs us otherwise or a longer period is required or permitted by law
- Site analytics – approximately 14 months, depending on the applicable analytics platform and configuration
- Outreach suppression list – retained for as long as reasonably necessary, including indefinitely where necessary to ensure that an opt-out request continues to be honoured
Actual retention periods may vary where required by law, contractual obligations, legitimate business requirements or the nature of the information.
How we protect it
- We use reasonable administrative, technical and organisational safeguards, including access controls, encryption in transit and restrictions on personnel who may access client and candidate data
- No method of transmission or storage is completely secure, and therefore we cannot guarantee absolute security
- Please do not send sensitive personal information to us by unencrypted email unless specifically requested and appropriate safeguards are in place
- Where a security incident affects your personal information and applicable law requires notification, we will provide notice to you and/or the relevant authorities as required by law
Children, Other Sites, and Changes
Children
- Our Site and services are directed primarily to businesses and professional users, not children
- We do not knowingly collect personal information from anyone under 16
- We do not knowingly sell or share personal information of consumers under 16 where prohibited by applicable law
- If you believe a child has provided us with personal information, please contact us at info@digifinity.us and we will take appropriate steps to investigate and delete the information where required by law
Other sites and platforms
- The Site may contain links to third-party websites, services or platforms that we do not control. Their privacy practices are governed by their own policies and terms.
- Where we manage advertising, analytics, marketplace or other third-party accounts for a client, the applicable platform’s privacy terms may govern information held directly by that platform.
Changes
- We may update this Privacy Policy from time to time. Material changes will be reflected in the Last updated date and, where required by law, we will provide additional notice.
- Where permitted by applicable law, your continued use of the Site after an updated Policy becomes effective indicates that you have reviewed the updated Policy.
Questions, requests or complaints: info@digifinity.us.
If you are not satisfied with our response, you may have the right to appeal our decision or contact your applicable state attorney general, data protection authority or other supervisory authority.
