We collect as little as we need. We use it only for the purposes you'd expect. We never sell it. This policy explains exactly what we do and why — written in plain language because we think you deserve to actually understand it.
Bagacaya LLC ("Bagacaya," "we," "us," or "our") is a brand identity, workflow systems, and digital infrastructure firm. We provide brand strategy and design, operational workflow systems, and digital infrastructure services to entrepreneurs, consultants, creatives, and early-stage businesses.
This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit our website at bagacaya.com (the "Site"), contact us, or engage us for services.
Bagacaya LLC is the data controller responsible for personal information collected through this Site. We are organized under the laws of the State of New Jersey, United States.
We collect only the information we genuinely need to provide our services and communicate with you. Here is what that includes:
Information you give us directly. When you fill out our contact form, book a discovery call, download a resource, or communicate with us by email, you may provide:
Information collected automatically. When you visit our Site, we may automatically collect:
We do not collect payment card numbers, bank account information, social security numbers, or other sensitive financial data through this Site. If payment is ever required, it is processed through a third-party payment processor that handles that information directly.
We collect information through the following means:
We use the information we collect for the following purposes:
We do not use your information for advertising targeting, sell it to data brokers, or share it with marketing platforms. If we ever use email marketing tools to send you updates, it will only be with your explicit opt-in, and you can unsubscribe from any message.
We do not sell, rent, or trade your personal information. We share it only in the following limited circumstances:
Third-party tools we currently use may include: Google Analytics (website analytics), a scheduling tool (discovery call booking), an email service provider (newsletter and communication), a CRM (client relationship management), and a payment processor. Each of these providers has its own privacy policy governing how they handle data.
Our Site uses cookies and similar technologies. A cookie is a small text file stored on your device that helps us understand how you use the Site.
Cookies we use:
What we do not use: advertising cookies, retargeting pixels, social media tracking pixels, or any cookie designed to track you across websites for advertising purposes.
Your options: You can disable non-essential cookies in your browser settings at any time. Most browsers allow you to refuse cookies entirely, though some Site features may not work correctly if you do. You can also opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-on.
We keep your personal information only for as long as necessary for the purposes described in this policy:
When we no longer need your information, we delete or anonymize it. If deletion is not immediately possible (such as when information is stored in backup archives), we isolate it from further processing until deletion is possible.
Depending on where you are located, you may have the following rights regarding your personal information. We honor these requests regardless of whether they are legally required in your jurisdiction — we think they're the right way to treat people.
Email us at [email protected] with your request. We will respond within 30 days. We may ask you to verify your identity before processing certain requests.
California residents: Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), you have additional rights including the right to know what personal information we collect, the right to opt out of the "sale" or "sharing" of personal information (we do neither), and the right to non-discrimination for exercising your privacy rights. To exercise these rights, contact us at [email protected].
EEA and UK residents: If you are located in the European Economic Area or the United Kingdom, you have rights under the GDPR or UK GDPR. Our lawful basis for processing your information is typically your consent (for marketing communications), the performance of a contract (for client engagements), or our legitimate interests (for operating the Site and responding to inquiries). You have the right to lodge a complaint with your local supervisory authority if you believe we have not handled your information appropriately.
We take reasonable measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:
No method of transmission over the internet or electronic storage is 100% secure. While we do our best to protect your information, we cannot guarantee its absolute security. If you believe your information has been compromised, please contact us immediately at [email protected].
Our Site and services are intended for adults and business owners. We do not knowingly collect personal information from anyone under the age of 16. If you believe we have inadvertently collected information from a minor, please contact us at [email protected] and we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices, the law, or our services. When we make a material change, we will update the "Last updated" date at the top of this page. For significant changes, we will notify active clients by email.
We encourage you to review this policy periodically. Your continued use of the Site after any changes constitutes your acceptance of the updated policy. If you disagree with changes we've made, please stop using the Site and contact us if you'd like to exercise any of your rights regarding information we already hold.
If you have questions about this Privacy Policy, want to exercise your rights, or have a concern about how we've handled your information, please reach out. We read every message personally.
If you are located in the EEA and are not satisfied with our response, you have the right to lodge a complaint with your national data protection authority. In the US, you may also contact the Federal Trade Commission at ftc.gov.