Skip to content
DGTL
IndustriesFrameworkWho we serveWorkPricingAboutBlog
Talk to us

Newsletter

One email a month with the best of what we publish. No fluff.

We send occasionally. Unsubscribe anytime.

DGTL

Latitude zero. Offset zero. Technology consulting for B2B companies.

Quito HQ · UTC-5 year-round · no DST

Services

  • Build
  • AI
  • Marketing
  • Sales
  • Data
  • Secure
  • Studio
  • Advisory
  • Enterprise Build
  • SOC 2 Sprint

Industries

  • Fintech
  • Healthtech
  • Edtech
  • Commerce
  • Manufacturing
  • Professional Services

Company

  • About
  • Team
  • Careers
  • Framework
  • Who we serve
  • Compare
  • Blog
  • Pricing
  • Trust
  • Contact

Legal

  • Privacy Policy
  • Terms of Service
  • Accessibility
  • Cookie Settings

© 2026 DGTL. All rights reserved.

Privacy Policy

Last updated: April 20, 2026

DGTL ("we," "us," or "our") operates the website withdgtl.com (the "Site"). This policy explains what personal information we collect, how we use it, who we share it with, and the rights you have over it.

1. Information we collect

1.1 Information you give us

  • Contact form: name, work email, company, practice interest, budget range, referral source, and message.
  • Job applications: name, email, and any content you submit.
  • Scheduling: when you book a call, Cal.com collects your name, email, and scheduling data under its own privacy policy.

1.2 Information collected automatically

  • Server logs: our hosting provider (Vercel) records IP address, request timestamp, and request URL for security and reliability. Logs are retained for the shortest period necessary to investigate operational and security incidents.
  • Bot protection: Vercel BotID Basic processes form submissions to filter automated traffic. No third-party tracking; no consent gate required.
  • Traffic analytics: Vercel Web Analytics measures page views and referrers in aggregate. It is cookieless, stores no personal identifiers, and does not track visitors across sites; it runs without a consent gate for that reason.
  • Performance telemetry: Vercel Speed Insights collects Core Web Vitals measurements (loading and responsiveness timings) in aggregate. Cookieless, no personal identifiers, no cross-site tracking.
  • Product and site analytics: when you consent to analytics cookies, the Site loads Google Analytics 4 (site analytics, via consent-mode v2). PostHog (product analytics) may load under the same consent gate when configured; it is not active at this time.
  • Advertising and retargeting pixels: when you consent to advertising cookies and a campaign is active, the Site may load conversion and retargeting pixels from LinkedIn (Insight Tag), Meta (Facebook and Instagram Pixel), TikTok (Pixel), X (formerly Twitter), and Google Ads. None are active at this time.
  • Tag management: Google Tag Manager (GTM) orchestrates analytics and advertising tags within consent-mode v2. All categories default to denied until you grant consent.

1.3 Information we do not collect

  • We do not purchase or obtain data from third-party data brokers.
  • We do not collect sensitive personal information (health, financial account, biometric, or children's data).

2. Cookies and trackers

Our cookie banner groups cookies into four categories. You can change your choices at any time on our Cookie Settings page.

2.1 Necessary (always on)

Required for the Site to function: session handling, security, CSRF protection, load balancing, and preference storage.

2.2 Analytics (consent required in EU, UK, and other consent-based regions)

  • PostHog for product analytics, without third-party cookies.
  • Google Analytics 4 for Site analytics under consent-mode v2.

2.3 Advertising (consent required)

  • LinkedIn Insight Tag for B2B campaign measurement, conversion tracking, and retargeting.
  • Meta Pixel (Facebook and Instagram) for conversion tracking and retargeting on Meta platforms.
  • TikTok Pixel for conversion tracking on TikTok.
  • X (Twitter) Pixel for conversion tracking on X.
  • Google Ads conversion tracking and remarketing for paid search and display measurement.

2.4 Functional

Cookies from embedded content you interact with, such as Cal.com for scheduling. These load only when you use the feature.

Do Not Track: we honor Global Privacy Control (GPC) and treat it as a signal to disable advertising and non-essential analytics cookies.

3. How we use your information

  • Respond to contact form submissions and scheduling requests.
  • Process job applications and communicate about open roles.
  • Measure Site usage and improve content, navigation, and performance.
  • Measure advertising campaign performance and deliver relevant ads to audiences that have consented to marketing cookies.
  • Ensure the security and proper functioning of the Site.
  • Comply with legal obligations.

We do not sell your personal information. We do not use your information for automated decision-making with legal or similarly significant effect.

4. Who we share information with

We share information with the following categories of recipients, each bound by a data processing agreement where required:

  • Infrastructure: Vercel (hosting), Cloudflare (network), Sentry (error monitoring).
  • Communication: Resend (transactional email), Cal.com (scheduling).
  • Analytics: PostHog, Google Analytics 4.
  • Advertising platforms: LinkedIn, Meta, TikTok, X, and Google Ads, to the extent their pixels are loaded with your consent.
  • CRM and marketing automation: HubSpot or an equivalent platform to manage inbound leads and customer communication.
  • Legal requirements: when required by law, regulation, legal process, or governmental request.
  • Business transfers: in the event of a merger, acquisition, or asset sale, with notice to affected individuals.

A current subprocessor list is available on request. Request it via our Trust page.

5. Data retention

  • Contact form submissions and correspondence: up to 24 months, or until the end of the client relationship, whichever is later.
  • Job applications: up to 12 months from submission.
  • Product and Site analytics data: up to 14 months.
  • Advertising pixel data: up to 13 months.
  • Server logs: up to 90 days, then aggregated or deleted.

6. Data security

  • TLS 1.3 on all connections. HSTS enforced.
  • AES-256 encryption at rest on production data stores.
  • Role-based access and MFA for internal systems. Quarterly access reviews.
  • Continuous compliance monitoring via Vanta. SOC 2 Type I attestation has been issued; Type II is in progress (see /trust).

No method of transmission or storage is 100 percent secure. We take reasonable steps to protect your data but cannot guarantee absolute security.

7. Your rights

Depending on your jurisdiction, you may have these rights:

  • Access: a copy of the personal information we hold about you.
  • Correction: correction of inaccurate or incomplete data.
  • Deletion: deletion of your personal information.
  • Portability: your data in a structured, machine-readable format.
  • Objection: objection to certain processing.
  • Withdraw consent: where processing is based on consent, you may withdraw it at any time.
  • Opt out of sale or sharing (CCPA/CPRA): we do not sell personal information, but you can opt out of the sharing of personal information for cross-context behavioral advertising via our Cookie Settings page.

Exercise any right by emailing privacy@withdgtl.com. We respond within 30 days (45 days in some jurisdictions).

8. International transfers

Our service providers may process data in the United States, the European Union, or other regions. For transfers out of the EU, UK, Switzerland, or LATAM jurisdictions, we rely on Standard Contractual Clauses, the EU-US Data Privacy Framework where applicable, or equivalent safeguards.

9. California, Virginia, and other US state privacy rights

If you live in California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), or any other US state with a general consumer privacy law, you have rights to know, correct, delete, limit use of sensitive data, and opt out of sale or sharing for targeted advertising. We do not sell personal information. You can opt out of the sharing of personal information for cross-context behavioral advertising via our Cookie Settings or by emailing privacy@withdgtl.com.

10. LATAM privacy frameworks

We apply LOPDP (Ecuador), LGPD (Brazil), Ley 1581 (Colombia), and LFPDPPP (Mexico) obligations to residents of those jurisdictions, including data subject access requests, breach notification, and lawful basis for processing.

11. Children's privacy

The Site is not directed at children under 16. We do not knowingly collect data from children. Contact us at privacy@withdgtl.com if you believe we have collected data from a minor and we will delete it.

12. Changes to this policy

We update this policy when our practices change. We will update the "Last updated" date at the top. Material changes will be announced by email to active clients and on the Site.

13. Contact us

  • Privacy: privacy@withdgtl.com
  • Security: security@withdgtl.com
  • General: hello@withdgtl.com