Privacy Policy

When you interact with our website, request our services, or communicate with our team, we may collect various types of information. We only collect what is necessary for the purposes described in this Privacy Policy.

Personal Information You Provide

• Contact details: Full name, email address, phone number, and business name
• Billing information: Billing address and payment-related details (processed securely via third-party processors)
• Account credentials: Username and password when creating a client portal account
• Communications: Messages, inquiries, feedback, and support requests submitted through our website or email
• Marketing preferences: Your opt-in or opt-out status for newsletters and promotional communications

Information Collected Automatically

• Technical data: IP address, browser type and version, operating system, device type and identifiers
• Usage data: Pages visited, time spent on pages, referring URLs, click-through behavior, and session duration
• Location data: General geographic location derived from IP address (country, state, city — not precise GPS location)
• Cookie data: Tracking and analytics data collected via cookies and similar technologies (see Section 3)

Information from Third Parties

We may receive information about you from third-party sources such as social media platforms, advertising partners, analytics providers, and publicly available sources, consistent with their respective privacy policies.

We use the information we collect to deliver, improve, and personalize our services, communicate with you effectively, and comply with applicable legal obligations.

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and understand how visitors interact with our content.

Managing Your Cookie Preferences

You can manage, disable, or delete cookies at any time through your browser settings. Disabling certain cookies may impact website functionality.

To provide and improve our services, we work with carefully vetted third-party service providers for analytics, advertising, payment processing, email delivery, and CRM.

Service Providers We Work With

• Google Analytics & Google Tag Manager — Website traffic analysis and tag management
• Google Ads & Meta Ads — Paid advertising campaigns and conversion tracking
• Stripe / PayPal — Secure payment processing (PCI-DSS compliant)
• Mailchimp / ActiveCampaign — Email marketing and automation
• HubSpot / Salesforce — Customer relationship management (CRM)
• Cloudflare — Content delivery network and security services
• WordPress / WooCommerce — Website content management and e-commerce

Data Transfers Outside the United States

When we transfer data internationally, we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) or certified transfer frameworks are in place.

We implement comprehensive technical and organizational security measures designed to protect your personal information against unauthorized access, disclosure, alteration, or loss.

Technical Security Measures

• SSL/TLS Encryption: All data transmitted is encrypted using industry-standard TLS encryption
• Data Encryption at Rest: Sensitive stored data is encrypted using AES-256 standards
• Firewalls & Intrusion Detection: Server-level protection against unauthorized access
• Regular Security Audits: Periodic vulnerability assessments and penetration testing
• Access Controls: Role-based access control (RBAC) limiting staff data access
• Multi-Factor Authentication: MFA required for all administrative access

Data Retention

• Client data: Retained for the duration of the relationship plus 7 years for legal compliance
• Analytics data: Retained for up to 26 months, then aggregated or deleted
• Marketing data: Retained until you unsubscribe or request deletion
• Support communications: Retained for 3 years after resolution

Depending on your location and applicable law, you have specific rights regarding your personal information. Most requests are fulfilled within 30 days.

How to Exercise Your Rights

Contact our Privacy Officer at info@efficiovirtual.com with your full name, email address, and a description of your request. We verify your identity before processing. We respond within 30 calendar days.

For EU/EEA Residents — GDPR

If you are in the European Union or EEA, you are protected by GDPR. Our legal bases for processing your data include:

• Consent (Art. 6(1)(a)): When you have given clear, specific consent
• Contract (Art. 6(1)(b)): When processing is necessary to fulfill a contract
• Legal Obligation (Art. 6(1)(c)): When required by law
• Legitimate Interests (Art. 6(1)(f)): When necessary for our business interests without overriding your rights

For California Residents — CCPA & CPRA

• Right to Know: Categories of personal information collected in the past 12 months
• Right to Delete: Request deletion of personal information, subject to certain exceptions
• Right to Opt-Out: Opt-out of sale or sharing of personal information (we do not sell data)
• Right to Correct: Request correction of inaccurate personal information
• Right to Non-Discrimination: Exercise rights without discriminatory treatment

Other State Privacy Laws

We comply with applicable state privacy laws including Virginia (VCDPA), Colorado (CPA), and Connecticut (CTDPA). Residents of these states enjoy similar rights and may submit requests using the same contact information.

We value your inbox and are committed to responsible email communications that comply with the CAN-SPAM Act and GDPR consent requirements.

Types of Emails We Send

• Transactional emails: Order confirmations, invoices, account notifications, password resets
• Service communications: Policy updates, important notices, security alerts
• Marketing emails: Newsletters, promotional offers, insights — only with your explicit consent
• Educational content: Blog roundups, industry reports, and SEO/marketing tips for subscribers

Your Email Preferences

You can unsubscribe from marketing communications at any time by clicking "Unsubscribe" in any marketing email, or by contacting us at info@efficiovirtual.com. Opt-out requests are honored within 10 business days.

Our website may contain links to external websites, partner pages, resources, and third-party tools that are not owned or controlled by us. These links are provided for informational convenience and do not constitute an endorsement.

Affiliate Links

Some links on our website may be affiliate links. If you click one and make a purchase, we may receive a commission at no additional cost to you. All affiliate relationships are disclosed in accordance with FTC guidelines.

Our website and digital marketing services are designed exclusively for adults and business professionals. We do not knowingly collect, solicit, process, or retain personal information from children under the age of 13 (or under 16 for EU residents subject to GDPR).

Our services are not directed to, marketed to, or intended for use by individuals under the age of 18.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, applicable laws, or industry standards.

How We Notify You of Changes

• Material changes: We will post a prominent notice on our homepage and email registered users at least 30 days before changes take effect
• Minor changes: Non-material updates will be reflected by updating the "Last Updated" date at the top of this policy
• Version history: We maintain a policy version log available upon request

Your continued use of our website after the effective date constitutes your acceptance of the changes. If you disagree, you may cease using our services and request deletion of your personal information.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, our team is here to help.