Privacy Policy

We act as a controller for data we decide the purposes of ourselves. That covers people who visit our website, fill in a form, book a call, receive our emails, become a client or apply to work with us. For that data, this Policy is the notice that governs it.

We act as a processor for data our clients give us access to so we can do the work they hired us for — for example their Shopify store, their Klaviyo account, or their Meta, Google or TikTok ad accounts. The client decides what we can access and why, and we handle it only on their instructions.

Controller

Orchid Media LLC

Address

110 Somerville Ave, Chattanooga, TN 37405, United States

Privacy contact

info@orchidmedia.io

We are based in the United States and work with brands and team members in the US, Mexico, Colombia, Spain and France.

Information you give us

Your name, email address, phone number, company name, store URL, revenue range, goals and anything else you write into our contact form, growth audit form or booking flow, plus the messages you send us by email or social media.

Client and billing information

If you become a client: the names and work contact details of the people we work with, contracts and statements of work, invoices, payment status and billing contact details. Card and bank details are handled by our payment providers; we do not store full card numbers.

Information collected automatically

Pages visited, referring page, time on site, browser type, operating system, device type and approximate location derived from your IP address. Some of this comes from your request headers rather than being collected deliberately. Section 7 lists the tools that collect it.

Recruitment

If you apply to work with us, the application materials you send and our notes on them. We use them only to assess the application.

Where the GDPR or UK GDPR applies to processing we control, we rely on the following bases.

We share personal data only with service providers who help us run the business, under contracts that limit what they can do with it:

Our team members see the data they need for their role. We may also disclose data if the law requires it, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of assets, on the condition that the receiving party honors this Policy.

You can ask us to delete your data sooner — the Data Deletion page explains how.

Cookies are small text files stored by your browser. We use as few as we can, and the table below lists the tools on this site that can set them or similar storage.

If we add an analytics or advertising tag, we will list it here before it goes live. You can block or delete cookies in your browser settings at any time; the site will still work, though some preferences won’t be remembered. We honor Global Privacy Control signals where the law requires it.

Depending on where you live — including the EEA, the UK, California and other US states with privacy laws — and subject to some exceptions, you have the right to:

1. 01Know what personal data we hold about you and get a copy.
2. 02Have inaccurate data corrected.
3. 03Have your data deleted.
4. 04Restrict or object to processing, including at any time to direct marketing.
5. 05Receive your data in a portable format.
6. 06Withdraw consent where we rely on it, without affecting what was done before.
7. 07Appeal a decision we make about your request.

To exercise any of these, email info@orchidmedia.io. We confirm receipt within 5 business days and respond in full within 30 days, or tell you why we need longer where the law allows. We won’t treat you differently for exercising your rights. You can also complain to your local data protection authority, though we’d appreciate the chance to fix it first.

If you bought from, subscribed to, or otherwise dealt with a brand we work with, that brand controls your data. Requests to access, correct or delete it are best sent to them, because they hold the source record.

If you contact us instead, we will forward your request to the right client without undue delay and help them respond. If you don’t know which brand it was, tell us what you can — for example the store you ordered from — and we will try to identify it.

We protect personal data with measures appropriate to the risk, including:

• Encrypted connections (HTTPS) across the website
• Individual accounts with multi-factor authentication on the tools we use
• Access to client stores and ad accounts through each platform’s own permission system, never shared passwords
• Removing our access promptly when an engagement ends
• Confidentiality obligations for everyone on the team

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach that affects you, we will notify you as the law requires.

Our website and services are for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child’s data has reached us, email info@orchidmedia.io and we will delete it.

We update this Policy when our practices change. The version and dates at the top change with it, and for material changes we will give notice on this site or by email before they take effect.

Entity

Orchid Media LLC

Address

110 Somerville Ave, Chattanooga, TN 37405, United States

Email

info@orchidmedia.io

Data deletion

orchidmedia.io/data-deletion

Terms of Service

orchidmedia.io/terms