Delegate Digital

1. Introduction

Delegate Digital (“we,” “us,” or “our”), part of the Black Hills Consortium, is committed to protecting the privacy of our clients, website visitors, and users. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, engage our services, or interact with us in any capacity.

2. Information We Collect

2.1 Website Visitor Data

When you visit our website, we automatically collect:

IP address and approximate geographic location
Browser type, operating system, and device information
Pages visited, time spent on site, and navigation patterns
Referring website or source of traffic
Interaction data (clicks, form submissions, scroll depth)

2.2 Contact and Inquiry Data

When you submit a contact form, book a discovery session, or otherwise reach out to us, we collect:

Name, email address, and phone number
Company name, role, and business size
Project requirements and service interests
Budget range and timeline preferences (if provided)

2.3 Client Business Data

In the course of providing our services, we may access and process client business data including:

Website content, analytics, and performance data
CRM records including customer lists, contact information, and sales data
Business financial information relevant to service delivery (revenue targets, budgets)
Brand assets including logos, style guides, messaging documents, and photography
Login credentials for client-owned accounts and platforms (stored securely, never shared)
Internal processes, workflows, and operational documentation

2.4 Campaign Performance Data

For clients using our marketing and advertising services, we collect and analyze:

Advertising spend, impressions, clicks, and conversion metrics across all platforms
Audience targeting parameters and demographic breakdowns
A/B testing results and creative performance data
Cost-per-acquisition, return on ad spend, and other KPI measurements
Email marketing metrics (open rates, click rates, unsubscribe rates)
Social media engagement, reach, and follower growth analytics

2.5 Third-Party Platform Data

When managing client accounts on third-party platforms, we access data provided by those platforms:

Meta (Facebook/Instagram): Ad account data, page insights, audience analytics, pixel data, and conversion tracking
Google Ads: Campaign performance, keyword data, search query reports, audience segments, and conversion data
Google Analytics: Website traffic, user behavior, conversion funnels, and audience demographics
LinkedIn: Campaign metrics, audience insights, and lead generation data
Other platforms: Data specific to each platform as required by the client engagement

3. How We Use Your Information

We use collected information to:

Deliver contracted services including web development, marketing, CRM management, and AI automation
Respond to inquiries and provide project proposals
Optimize and report on campaign performance for clients
Improve our website, service offerings, and internal processes
Send relevant communications about our services (with your consent)
Comply with legal and regulatory obligations
Protect against unauthorized access, fraud, and security threats

4. Information Sharing

We do not sell personal or client business information. We may share information with:

Black Hills Consortium entities: We may share aggregated business metrics with the consortium for reporting purposes. Client-specific data is not shared between entities without client consent.
Third-party service providers: We use trusted service providers for hosting (Vercel), database management (Supabase), analytics, and email delivery. These providers process data on our behalf under strict contractual obligations.
Advertising platforms: When managing advertising campaigns, client data is shared with platforms like Meta and Google as necessary to run and optimize campaigns, subject to those platforms’ own privacy policies.
AI service providers: Our AI-augmented workflows may process client data through AI providers (Anthropic, OpenAI) for content generation, data analysis, or automation purposes. We use enterprise-grade API access and do not allow AI providers to use client data for model training.
Legal requirements: We may disclose information when required by law, court order, or governmental regulation.

5. Data Security

We implement industry-standard security measures to protect data including:

Encryption in transit (TLS/SSL) and at rest for sensitive data
Secure credential management with environment-level variable storage
Regular access audits and principle of least privilege
Two-factor authentication on all client-facing platform accounts
Secure code practices and regular dependency updates

6. Data Retention

Website visitor data is retained for 26 months. Client engagement records and deliverables are retained for the duration of the client relationship plus three years for contractual and legal purposes. Campaign performance data is retained for the duration of the engagement plus one year for reporting purposes. Financial records are retained for seven years in accordance with tax requirements.

7. Your Rights

You may have the right to:

Access the personal information we hold about you or your business
Request correction of inaccurate information
Request deletion of your personal information (subject to legal retention requirements)
Withdraw consent for marketing communications
Request data portability for information you have provided
Object to processing of your information in certain circumstances

To exercise any of these rights, contact us at legal@blackhillsconsortium.org.

8. Cookies and Tracking

Our website uses cookies and analytics tools (including Vercel Analytics and Speed Insights) to understand traffic patterns and improve user experience. These tools collect anonymized usage data. You can manage cookie preferences through your browser settings.

9. Children’s Privacy

Our Services are designed for businesses and professionals. We do not knowingly collect personal information from individuals under the age of 13. If we become aware of such collection, we will delete the information promptly.

10. International Data

Our services are primarily delivered within the United States. If you access our services from outside the US, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

11. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated effective date. For material changes affecting existing clients, we will provide notice through our regular communication channels.

12. Contact

For privacy-related questions or requests, please contact:

Delegate Digital
Part of Black Hills Consortium
Grow Campus, Custer, South Dakota
legal@blackhillsconsortium.org