What we hold, where it came from, who else touches it, and how to make us delete it. Including the part most agencies leave out: what happens to the people who contacted our clients.
A privacy policy states facts about what actually happens to data, so a wrong one is enforceable in a way a clumsy contract clause is not. Before this goes live: verify the processor list in section six against what is really in use, confirm the recording consent practice in section seven, set real retention periods in section eight, and have a lawyer read the whole thing. Delete this notice once that is done.
Overcome Media LLC, trading as Overcome Media, is a marketing agency in Lexington, Kentucky. This policy explains what we do with personal information, and it covers this website and the services we provide to clients.
If you want to raise anything covered here, email team@theovercomemedia.com. A person reads it.
Whose information we hold, and who decides what happens to it, depends on how you reached us. This matters, because it decides who you go to about your rights.
If you are in the third group and you contact us, we will pass your request to the business it concerns and tell you we have done so. We will not act on your information without their instruction, because it is not ours to act on.
When you contact us. Your name, business name, email, phone number, and whatever you chose to write in the message. If you book a call, the time you picked and anything you added.
When you browse. The pages you looked at, roughly where you are, what device and browser you used, and how you arrived. This comes through analytics and advertising cookies and only after you have agreed to them. Our cookie policy covers it in detail.
When you become a client. Billing details, the logins and access you grant us, the content and material you send us, and records of our meetings and correspondence.
What we do not collect. We do not ask for social security numbers, government identification numbers, health information or anything about children. Card numbers go to our payment processor and never touch our systems.
Most of it comes from you directly: a form, a call, an email, a signed proposal.
Some comes from your own systems, with your permission, when you give us access to an advertising account, a website, a Google Business Profile or a CRM.
A small amount comes from public sources when we research a prospect before reaching out: a company website, a public business listing, a public social profile. If you would rather we did not hold that, say so and we will delete it.
To reply to you, to quote for work, to do the work, to invoice for it, and to keep the records a business has to keep.
To understand which pages on this site are worth rewriting, in aggregate rather than individually, and to measure whether our own advertising is working.
Where the law requires a legal basis, ours are: performing a contract with you, our legitimate interest in running and marketing the business, your consent where you gave it, and compliance with legal obligations. Consent can be withdrawn at any time.
We do not sell personal information and we never have. We do not share it with anybody for their own marketing purposes.
We do use other companies to run the business, and they handle information on our instructions. Every one of them is contractually restricted to using it only for what we engaged them to do. Here is the whole list:
Beyond that list, we share information only where the law requires it, where we need advice from our own accountants or lawyers, or where a business is sold and the buyer takes on the same obligations.
We record and transcribe video meetings so that nobody has to take notes and so that what was agreed can be checked later. Recording is announced at the start of the call.
If you would rather not be recorded, say so and we will turn it off. Nobody has to give a reason and nothing about the meeting changes.
Where we run call tracking inside a client's system, calls to that business may be recorded by that business. That is their decision and their disclosure to make, and we configure it on their instruction.
Enquiries that do not become clients are kept while there is a live conversation and for a reasonable period afterwards, then deleted.
Client records are kept for the length of the engagement and for as long afterwards as tax and accounting rules require.
Meeting recordings and transcripts are kept while they are useful to the work and deleted when they are not. Ask us to delete a specific recording and we will.
Accounts use multi factor authentication where the platform supports it. Access is granted to named people rather than shared logins, and removed when somebody leaves or an engagement ends.
No system is perfectly secure and we will not pretend otherwise. If a breach affects your information, we will tell you and the relevant authority within the time the law requires, and we will tell you what actually happened rather than the minimum.
Depending on where you live you may have the right to know what we hold, to get a copy, to have it corrected, to have it deleted, to limit what we do with it, and to object to some of it. We do not sell personal information, so there is nothing to opt out of on that front.
To use any of those rights, email team@theovercomemedia.com. We will confirm receipt, may need to check who you are, and will answer within the period the law allows. We will not treat you differently for asking.
Visitors in the European Economic Area and the United Kingdom also have the right to withdraw consent at any time and to complain to a supervisory authority.
This site honours the Global Privacy Control signal. If your browser sends it, we treat it as an opt out without you having to do anything else.
We send email to people who asked to hear from us and to businesses we think are a genuine fit. Every email has a working unsubscribe link, and unsubscribing takes effect immediately rather than after another send.
We also reach out by phone and by message to businesses in the trades. If you tell us to stop, we stop, and we record that so nobody on the team contacts you again by mistake.
This site and these services are for businesses and are not directed at anybody under sixteen. We do not knowingly collect information about children. If you believe we have, email us and we will delete it.
We operate from the United States and our team is distributed, so information may be accessed from outside the country where it was collected.
Where information moves from the European Economic Area or the United Kingdom, we rely on the safeguards the law provides for those transfers, including standard contractual clauses with the companies listed in section six.
We update this policy when what we do changes, when a tool is added or removed, or when the law changes. The effective date at the top is the date of the current version, and material changes are announced rather than made quietly.
Anything about this page, or about anything we hold, goes to a person rather than a form.