Privacy Policy

This Privacy Policy describes how One Vision Agency ("Agency," "we," "us," or "our") collects, uses, stores, shares, and protects your information when you interact with our website, subscribe to our services, or submit your information via our web forms. This policy also defines our role when we handle your data on behalf of our clients.

1. The Scope of This Policy and Applicability

This Policy applies to personal information collected by the Agency in two primary capacities:

• Agency as Data Controller: This applies when we collect your information directly via our website forms (e.g., for lead generation, contact requests, or newsletter sign-ups) for our own business purposes, including marketing and establishing automated contact sequences.
• Agency as Data Processor: This applies when we process the personal data of our Clients' customers or contacts (e.g., running ad campaigns, managing customer lists) under the explicit written instruction of our Clients. Our obligations in this capacity are governed by the contract (Terms of Service) and a separate Data Processing Addendum (DPA) executed with the Client.

2. Information We Collect

We collect information directly from you when you submit a form, and indirectly through automated means when you use our website.

3. How We Use (Process) Your Information

We process your data for the following specific purposes:

A. Agency Marketing and Lead Management (Agency as Controller):

• To send you automated email and SMS marketing sequences regarding our services, special offers, and content.
• To communicate with you regarding your service inquiries and manage the onboarding process.
• To maintain records of your consent and opt-out preferences in compliance with the TCPA and CAN-SPAM Act.

B. Service Delivery and Contractual Necessity:

• To fulfill our contractual obligations under the Terms of Service.
• To provide necessary access to our subscription services and assets.

C. Security and Compliance:

• To ensure the security of our website and services.
• To comply with all applicable legal requirements, including mandatory disclosures, data access requests (DSARs), and regulatory inquiries.

4. Automated Communications and Consent (TCPA/CAN-SPAM)

By submitting your phone number or email via a form on our website, you expressly consent to the following:

Email Marketing (CAN-SPAM):

We will send commercial email messages, which will always include a clear, conspicuous, and easy way to Opt-Out of future messages, as well as the Agency's valid physical postal address.

Automated SMS/Text Messaging (TCPA):

You consent to receive marketing text messages from or on behalf of One Vision Agency using an automatic telephone dialing system (ATDS) or artificial/prerecorded voice. You understand that consent is not a condition of purchasing any goods or services. You can opt out of receiving automated SMS messages at any time by replying STOP to any text message received. We maintain detailed records of your consent (Prior Express Written Consent or PEWC) and opt-out status.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with the following third parties:

• Service Providers (Sub-Processors): We use third-party tools for email management, SMS delivery platforms, CRM systems, and cloud hosting. These service providers act only on our instructions and are contractually bound by confidentiality and data processing terms.
• Legal Compliance: We will disclose information when legally required to do so, such as in response to a subpoena, court order, or governmental request.
• Business Transfers: In connection with any merger, sale of Agency assets, or acquisition of all or a portion of our business.

6. Our Role as Data Processor (Client Data)

When we handle the personal data of a Client's customers (e.g., running campaigns based on a list provided by the Client):

• Client is the Controller: The Client determines the purpose and means of processing the data and bears the primary responsibility for obtaining all necessary consent (including PEWC for SMS).
• Agency is the Processor: We process this data strictly on the documented instructions of the Client. Our technical and organizational security measures are detailed in the Data Processing Addendum (DPA) we execute with that Client.

If you are a customer of one of our Clients and have questions about the data we process on their behalf, you must contact the Client directly and refer to their privacy policy.

7. Data Security and Retention

A. Security:

We implement appropriate technical and organizational security measures to protect the personal information we collect and process, aiming to prevent unauthorized access, disclosure, alteration, or destruction. These measures include data encryption, access control protocols, and regular security assessments.

B. Retention:

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law (such as retaining PEWC records for compliance). When we no longer require your data, we will securely delete or anonymize it.

8. Your Privacy Rights (GDPR, CCPA/CPRA)

Depending on your location, you may have the following rights regarding the personal information we hold about you:

To exercise any of these rights, please submit a Data Subject Access Request (DSAR) or other formal request using the contact information provided in Section 9. We will respond to your request within the timeframe mandated by the applicable regulations.

9. Contact Us

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your data rights, please contact us: