Data Processing PolicyData Handling

Scope of This Policy

This Data Processing Policy applies when Celvanta Zodiac receives, reviews, stores, uses, or processes information in connection with website inquiries, proposals, service delivery, campaign management, reporting, project communication, and client support.

Celvanta Zodiac may process information as part of digital marketing, social media management, brand identity, content strategy, paid advertising support, landing page direction, email marketing setup, and analytics reporting.

Types of Data Processed

Data processed by Celvanta Zodiac may include business contact details, project notes, brand assets, campaign goals, website URLs, social media profiles, advertising account information, audience descriptions, analytics screenshots, performance reports, product or service information, content drafts, platform access information, and client communications.

Clients should avoid sending sensitive personal information unless it is necessary for the project and specifically requested. Celvanta Zodiac does not need unnecessary personal, medical, financial, or highly sensitive customer data for most marketing services.

Purpose of Processing

Celvanta Zodiac processes data to respond to inquiries, prepare proposals, plan campaigns, create content, manage communication, configure marketing systems, review analytics, produce reports, provide recommendations, maintain records, process payments, and deliver contracted services.

Processing may also support troubleshooting, security, platform setup, content scheduling, campaign optimization, client reporting, and internal business administration.

Client Instructions

For active client projects, Celvanta Zodiac processes project data according to the accepted scope, client instructions, business needs, and applicable service requirements. The client is responsible for ensuring that data provided to Celvanta Zodiac may lawfully be shared and used for the requested services.

If a client requests use of customer data, audience data, testimonial data, or campaign data, the client is responsible for obtaining any required permissions, notices, consents, or legal basis.

Access and Confidentiality

Celvanta Zodiac limits access to project information to people and service providers who reasonably need it to perform services, manage operations, provide technical support, process payments, or maintain business records.

This may include internal team members, contractors, consultants, creative collaborators, platform providers, and business systems that support the delivery of services.

Security Measures

Celvanta Zodiac uses reasonable administrative, technical, and organizational measures to protect project data from unauthorized access, misuse, loss, alteration, or disclosure. However, no digital system, online platform, file transfer method, or communication channel is completely secure.

Clients should use appropriate account permissions, avoid sharing unnecessary sensitive data, and remove access when it is no longer needed.

Third-Party Tools

Services may require the use of third-party tools such as advertising platforms, social media platforms, analytics platforms, email marketing systems, project management tools, website platforms, cloud storage, and communication systems.

Each third-party provider may process data according to its own terms and privacy practices. Celvanta Zodiac does not control the internal data practices of third-party platforms.

Data Retention and Deletion

Celvanta Zodiac may retain project information, communications, reports, invoices, proposals, and deliverables for as long as reasonably necessary to provide services, maintain records, comply with legal obligations, resolve disputes, improve internal operations, and protect business interests.

Clients may request deletion or return of certain project data. Celvanta Zodiac will review such requests according to applicable law, contractual obligations, backup limitations, accounting requirements, dispute needs, and legitimate business recordkeeping requirements.

Incident Response

If Celvanta Zodiac becomes aware of a data incident affecting client information, it will take reasonable steps to investigate, reduce harm, restore security, and provide notice where required by applicable law or agreement.