PRIVACY POLICY

LIONHEART DIGITAL AGENCY

Last Updated: September 16, 2026

Lionheart Digital Agency (“Lionheart,” “Company,” “We,” “Us,” or “Our”) respects Your privacy and is committed to protecting the Personal Data entrusted to Us.

This Privacy Policy describes how We collect, use, process, disclose, retain, and protect information when You visit Our website, communicate with Us, submit information through Our forms, purchase or use Our services, or otherwise interact with Lionheart Digital Agency.

It also explains certain choices and privacy rights that may be available to You under applicable law.

By accessing or using Our Website or Services, You acknowledge the practices described in this Privacy Policy.

1. INTERPRETATION AND DEFINITIONS

Interpretation

Words whose initial letters are capitalized have the meanings defined below. These definitions apply regardless of whether the terms appear in singular or plural form.

Definitions

For purposes of this Privacy Policy:

Account means an account, portal, profile, or other authenticated access created for You to use certain portions of Our Services.

Business Information means information relating to a business, including business name, industry, products, services, website, advertising accounts, marketing information, branding, and similar commercial information.

Company, We, Us, or Our means Lionheart Digital Agency.

Cookies means small files or similar technologies placed on or accessed through Your browser or Device to store or retrieve information.

Device means any device capable of accessing Our Website or Services, including a computer, smartphone, tablet, or similar electronic device.

Personal Data means information that identifies, relates to, describes, is reasonably capable of being associated with, or may reasonably be linked to an identified or identifiable individual, as defined under applicable law.

Service Provider means a third party that processes information for or on behalf of Lionheart or otherwise assists Us in operating Our business and providing Our Services.

Services means Lionheart's website, digital marketing services, advertising services, SEO, AEO, social media management, website services, creative services, consulting, technology services, and any other products or services We provide.

Third-Party Platform means a service, platform, website, software provider, advertising network, analytics provider, search engine, social media platform, CRM provider, hosting provider, or other third party not owned or controlled by Lionheart.

Usage Data means information collected automatically through Your interaction with Our Website, systems, communications, advertisements, or Services.

Website means Lionheart Digital Agency's website, including lionheartdigitalagency.com, and any other website or landing page operated by Lionheart that links to this Privacy Policy.

You and Your mean the individual accessing or using Our Website or Services or, where applicable, the business or legal entity on whose behalf that individual is acting.

2. INFORMATION WE COLLECT

The information We collect depends on how You interact with Lionheart.

We may collect information directly from You, automatically through Your use of Our Website, from Our clients and business partners, and from Third-Party Platforms or Service Providers.

Information You Provide Directly

You may provide information including:

• First and last name

• Email address

• Telephone number

• Business name

• Job title

• Business address

• Industry

• Website URL

• Products and services

• Marketing objectives

• Advertising information

• Social media information

• Branding materials

• Account information

• Communications with Our team

• Consultation or appointment information

• Information submitted through forms

• Billing and transaction-related information

• Client onboarding information

• Customer or lead information provided in connection with marketing Services

• Any other information You voluntarily provide to Us

Payment-card information may be processed directly by Our payment processors. Lionheart may not directly receive or retain complete payment-card credentials when a third-party payment processor handles the transaction.

3. BUSINESS AND CLIENT INFORMATION

Because Lionheart provides marketing and advertising Services, Our clients may provide Us with information necessary to perform those Services.

This may include:

• Customer or prospective-customer information

• Lead information

• Contact information

• Advertising audiences

• CRM data

• Website information

• Analytics information

• Conversion data

• Customer lists

• Marketing databases

• Campaign information

• Social media information

• Sales information

• Other data necessary to perform the contracted Services

When Lionheart processes Personal Data on behalf of a client, Lionheart may act as a service provider, processor, contractor, or similar role under applicable privacy law, while the client may determine the purposes and means of processing.

Where Lionheart processes Personal Data solely on behalf of a client, individuals may need to direct applicable privacy requests to the client that originally collected or controls the information.

4. USAGE DATA

Usage Data may be collected automatically when You access or interact with Our Website or Services.

Usage Data may include:

• Internet Protocol address

• Browser type

• Browser version

• Device type

• Device identifiers

• Operating system

• Referring website

• Pages viewed

• Links clicked

• Date and time of access

• Time spent on pages

• Approximate geographic location derived from an IP address

• Website-navigation behavior

• Advertising interactions

• Form interactions

• Conversion events

• Traffic-source information

• Diagnostic information

• Other technical information about Your interaction with Our Website

When You access the Website through a mobile Device, We may automatically collect information regarding the type of Device, operating system, browser, identifiers, IP address, and related technical information.

5. COOKIES AND TRACKING TECHNOLOGIES

Lionheart may use Cookies and similar technologies to operate, secure, analyze, personalize, advertise, and improve Our Website and Services.

These technologies may include:

• Browser Cookies

• Tracking pixels

• Conversion pixels

• Tags

• Web beacons

• Analytics technologies

• Advertising identifiers

• Local storage

• Server-side tracking

• Similar technologies

These technologies may allow Lionheart and certain authorized third parties to understand how visitors interact with Our Website, measure advertising effectiveness, attribute conversions, remember preferences, prevent fraud, and improve Our Services.

6. TYPES OF COOKIES

Essential Cookies

These Cookies and technologies are necessary for core Website functionality, security, authentication, fraud prevention, and delivery of requested Services.

Disabling certain essential Cookies may prevent portions of the Website from functioning correctly.

Functionality Cookies

These technologies allow the Website to remember certain preferences and improve the user experience.

Analytics Cookies

Analytics technologies help Us understand Website traffic, visitor behavior, performance, navigation patterns, and how users interact with Our Website.

Advertising and Marketing Cookies

Advertising technologies may be used to:

• Measure advertising performance;

• Attribute leads or conversions;

• Create or refine advertising audiences;

• Deliver relevant advertisements;

• Measure campaign effectiveness;

• Understand interactions with advertisements;

• Limit repetitive advertising; and

• Improve marketing strategies.

Depending on applicable law, certain uses of advertising technologies may constitute “targeted advertising,” “sharing,” or a “sale” of Personal Data even when Lionheart does not receive money in exchange for the Personal Data.

Where required by applicable law, We provide applicable choices regarding these practices.

7. THIRD-PARTY ANALYTICS AND ADVERTISING SERVICES

Lionheart may use Third-Party Platforms and technologies in connection with its Website and marketing activities.

These may include providers such as:

• Google

• Meta

• Facebook

• Instagram

• TikTok

• YouTube

• X

• LinkedIn

• Website analytics providers

• CRM providers

• Advertising networks

• Conversion-tracking platforms

• Scheduling providers

• Email-marketing providers

• Website-hosting providers

These companies may collect information through Cookies, pixels, tags, APIs, or similar technologies according to their own privacy policies.

Lionheart does not control the independent privacy practices of Third-Party Platforms.

8. HOW WE USE PERSONAL DATA

Lionheart may use Personal Data for legitimate business purposes including:

Providing Our Services

To perform, operate, maintain, administer, and improve Our Services.

Client Account Management

To establish, maintain, and administer Client relationships, Accounts, onboarding, projects, campaigns, and deliverables.

Contract Performance

To perform obligations arising from purchases, service agreements, subscriptions, proposals, statements of work, or other contractual arrangements.

Communication

To communicate with You regarding:

• Services

• Consultations

• Appointments

• Projects

• Support requests

• Account matters

• Billing

• Campaign updates

• Security notifications

• Administrative information

• Service changes

• Other business-related matters

Marketing and Advertising

Where permitted by law, We may use information to:

• Market Lionheart's Services;

• Measure advertising effectiveness;

• Develop advertising audiences;

• Personalize marketing;

• Conduct remarketing;

• Analyze campaign performance;

• Communicate promotional offers;

• Improve marketing strategy.

Analytics and Business Intelligence

We may analyze information to understand business performance, customer behavior, advertising effectiveness, Website usage, conversion activity, and market trends.

Website Optimization

We may use data to test, develop, improve, personalize, and optimize Our Website and digital experiences.

Security and Fraud Prevention

We may process information to:

• Protect Our Website;

• Authenticate users;

• Detect fraudulent transactions;

• Prevent abuse;

• Investigate suspicious activity;

• Protect Our systems, clients, and users.

Legal and Regulatory Purposes

We may use information to:

• Comply with legal obligations;

• Respond to lawful requests;

• Establish or defend legal claims;

• Enforce agreements;

• Protect Our legal rights;

• Investigate potential violations.

Business Transactions

Information may be used in connection with a potential or completed merger, acquisition, financing, restructuring, reorganization, sale of assets, investment transaction, or similar corporate event.

9. EMAIL, TELEPHONE, AND SMS COMMUNICATIONS

If You provide Lionheart with Your telephone number or email address, We may use that information to communicate with You regarding Your inquiry, Services, appointments, account, projects, or other business matters.

Where You provide legally sufficient consent to receive marketing communications, Lionheart may also send promotional emails, telephone communications, or text messages.

Where applicable:

• Consent to marketing communications is not a condition of purchasing Services unless otherwise legally permitted;

• Message and data rates may apply to SMS communications;

• You may unsubscribe from marketing emails through the unsubscribe mechanism contained in the communication;

• You may opt out of marketing text messages by following the opt-out instructions provided with the messages.

Opting out of marketing communications does not prevent Lionheart from sending necessary transactional, account, contractual, security, or service-related communications.

SMS consent and telephone numbers collected specifically for SMS communications will not be sold or provided to unrelated third parties for their independent marketing purposes.

10. HOW WE DISCLOSE INFORMATION

Lionheart may disclose information in the circumstances described below.

Service Providers

We may provide information to trusted Service Providers that assist with:

• Website hosting

• Analytics

• Advertising

• Payment processing

• Customer relationship management

• Email delivery

• SMS communications

• Scheduling

• Cloud storage

• Cybersecurity

• Automation

• Business operations

• Accounting

• Legal services

• Professional services

• Campaign fulfillment

Service Providers may access information only as reasonably necessary to provide their services, subject to applicable agreements and law.

Advertising and Analytics Providers

Information regarding Website interactions may be disclosed to advertising and analytics providers for campaign measurement, attribution, optimization, audience development, and related marketing purposes.

Business Partners

We may disclose Business Information or other information to business partners when reasonably necessary to deliver Services or fulfill a Client's request.

Client-Directed Disclosure

When providing marketing Services, Lionheart may disclose information according to the instructions of the Client or as reasonably necessary to perform contracted Services.

Affiliates

We may disclose information to companies that control, are controlled by, or are under common control with Lionheart, subject to appropriate privacy obligations.

Business Transactions

Personal Data may be transferred in connection with an actual or proposed:

• Merger

• Acquisition

• Investment

• Financing

• Reorganization

• Sale of assets

• Business combination

• Bankruptcy

• Similar corporate transaction

Legal Requirements

We may disclose information when We reasonably believe disclosure is necessary to:

• Comply with applicable law;

• Respond to a court order, subpoena, or lawful government request;

• Protect Lionheart's rights or property;

• Enforce Our agreements;

• Investigate suspected fraud or misconduct;

• Protect the security of Our systems;

• Protect the safety or rights of Lionheart, Our clients, users, or others.

With Your Consent

We may disclose information for another purpose when You authorize or direct Us to do so.

11. SALE AND SHARING OF PERSONAL DATA

Lionheart does not sell Personal Data to third parties in exchange for monetary payment.

However, privacy laws in certain jurisdictions define terms such as “sale,” “sharing,” or “targeted advertising” broadly.

For example, the use of certain advertising pixels, Cookies, audience technologies, or analytics tools may be legally classified as sharing Personal Data for targeted or cross-context behavioral advertising even where no money is exchanged for that information.

Where applicable law gives You the right to opt out of such activities, Lionheart will honor valid requests as required by law.

12. YOUR PRIVACY CHOICES

Depending upon Your jurisdiction and applicable law, You may have rights concerning Your Personal Data.

These rights may include:

Right to Know or Access

You may have the right to request information concerning Personal Data We maintain about You and how it is processed.

Right to Correction

You may have the right to request correction of inaccurate Personal Data.

Right to Deletion

You may have the right to request deletion of certain Personal Data, subject to applicable legal exceptions.

Right to Data Portability

You may have the right to obtain certain Personal Data in a portable and reasonably usable format.

Right to Opt Out of Certain Processing

You may have the right to opt out of certain:

• Sales of Personal Data;

• Sharing of Personal Data;

• Targeted advertising; or

• Profiling in furtherance of decisions producing legal or similarly significant effects.

Right Regarding Sensitive Data

Where applicable, You may have rights concerning the collection or processing of certain Sensitive Personal Data.

Right to Appeal

Residents of certain states may have a right to appeal Our decision concerning a privacy request.

Right to Non-Discrimination

Lionheart will not unlawfully discriminate against an individual for exercising rights provided under applicable privacy law.

These rights are subject to the scope, definitions, applicability thresholds, exemptions, verification requirements, and exceptions contained in applicable law.

13. PRIVACY REQUESTS

To submit an applicable privacy request, contact:

support@lionheartdigitalagency.com

Please clearly describe Your request and provide sufficient information for Us to reasonably identify the information involved.

Lionheart may take reasonable steps to verify Your identity before fulfilling a request.

Where permitted by law, We may deny or limit a request if:

• We cannot reasonably verify Your identity;

• An applicable exemption applies;

• Compliance would interfere with another person's rights;

• The information must be retained for legal or contractual purposes;

• The request is fraudulent or abusive;

• Another lawful basis permits retention or processing.

Authorized agents may submit requests where permitted by applicable law and subject to reasonable verification procedures.

14. UNIVERSAL OPT-OUT PREFERENCE SIGNALS

Where required by applicable law, Lionheart will recognize qualifying browser-based or device-based universal opt-out preference signals, such as Global Privacy Control (“GPC”), for the browser or Device communicating the signal.

Such signals may apply to certain targeted advertising, sale, or sharing activities as defined under applicable law.

15. COLORADO PRIVACY RIGHTS

Where the Colorado Privacy Act applies to Lionheart's processing of Your Personal Data, qualifying Colorado consumers may have rights including:

• Access to Personal Data;

• Correction of inaccurate Personal Data;

• Deletion of Personal Data;

• Data portability;

• Opting out of the sale of Personal Data;

• Opting out of targeted advertising; and

• Opting out of certain profiling.

Certain rights are subject to statutory exceptions and applicability requirements.

Colorado residents may submit requests using the contact information provided in this Privacy Policy.

16. CALIFORNIA PRIVACY RIGHTS

Where the California Consumer Privacy Act, as amended, applies, California residents may have rights including:

• The right to know what Personal Information is collected;

• The right to request access to Personal Information;

• The right to request deletion;

• The right to correct inaccurate Personal Information;

• The right to opt out of qualifying sales or sharing;

• The right to limit certain uses and disclosures of Sensitive Personal Information; and

• The right to receive equal treatment for exercising privacy rights.

Lionheart does not sell Personal Information for monetary consideration.

However, certain advertising or analytics technologies may constitute “sharing” under California law depending upon how they are implemented.

Where required, qualifying California residents may exercise applicable opt-out rights through the mechanisms provided on Our Website or by contacting Us.

17. OTHER U.S. STATE PRIVACY RIGHTS

Additional U.S. states have enacted comprehensive privacy laws.

Depending upon Your state of residence, Lionheart's activities, and whether the applicable statutory requirements are met, You may possess additional privacy rights.

Lionheart will process valid privacy requests according to applicable law.

Nothing in this Privacy Policy is intended to limit rights that cannot lawfully be waived or restricted.

18. SENSITIVE PERSONAL DATA

Lionheart does not intentionally request Sensitive Personal Data unless it is reasonably necessary for a legitimate business purpose or required to provide requested Services.

Sensitive Personal Data may include categories of information receiving enhanced protection under applicable law.

Where applicable law requires consent before processing Sensitive Personal Data, Lionheart will obtain such consent or rely upon another legally permitted basis before engaging in that processing.

Clients should not provide Lionheart with Sensitive Personal Data unless it is reasonably necessary for the Services and they are legally authorized to do so.

19. DATA RETENTION

Lionheart retains Personal Data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Provide Services;

• Maintain client relationships;

• Fulfill contractual obligations;

• Maintain appropriate business records;

• Resolve disputes;

• Prevent fraud;

• Maintain security;

• Establish or defend legal claims;

• Comply with tax, accounting, contractual, and other legal obligations;

• Enforce agreements.

Retention periods may vary based upon the nature of the information, the purpose for which it was collected, contractual obligations, legal requirements, and legitimate business needs.

When information is no longer reasonably required, Lionheart may delete, anonymize, aggregate, or otherwise dispose of it consistent with applicable requirements.

20. DATA SECURITY

Lionheart uses commercially reasonable administrative, technical, and organizational safeguards designed to protect Personal Data against unauthorized access, disclosure, alteration, destruction, or misuse.

However, no Internet transmission, electronic storage system, network, database, or security system can be guaranteed to be completely secure.

Accordingly, Lionheart cannot guarantee the absolute security of Personal Data.

You are responsible for maintaining the confidentiality and security of Your passwords, accounts, Devices, and other authentication information.

21. DATA TRANSFERS

Lionheart and its Service Providers may process information from locations in the United States and other jurisdictions.

As a result, information may be transferred to or processed in jurisdictions whose data-protection laws differ from those where You reside.

Where required, Lionheart will use appropriate safeguards for cross-border transfers of Personal Data.

22. CHILDREN'S PRIVACY

Lionheart's Website and Services are intended for businesses and adults and are not directed to children under 13 years of age.

Lionheart does not knowingly collect Personal Data online directly from children under 13.

If We learn that We have collected Personal Data directly from a child under 13 in circumstances where such collection is prohibited, We will take reasonable measures to delete that information.

A parent or legal guardian who believes a child has provided Personal Data directly to Lionheart may contact:

support@lionheartdigitalagency.com

23. THIRD-PARTY WEBSITES

Our Website may contain links to websites, applications, or services operated by third parties.

Lionheart does not control those third parties and is not responsible for their:

• Content;

• Security;

• Availability;

• Privacy policies;

• Data practices;

• Terms;

• Services.

We encourage You to review the privacy policies of any Third-Party Platform You access.

24. SOCIAL MEDIA PLATFORMS

Lionheart may maintain profiles, pages, advertising accounts, or integrations with social media platforms.

When You interact with Lionheart through those services, both Lionheart and the applicable social media platform may receive information about Your interaction.

Your use of those platforms is also governed by their independent privacy policies and terms.

25. PAYMENT PROCESSING

Lionheart may use third-party payment processors to process transactions.

Payment processors may independently collect and process information necessary to authorize and complete transactions.

Their collection and processing of information is subject to their respective privacy practices.

Lionheart does not necessarily retain complete debit-card or credit-card information when payments are processed through an independent payment provider.

26. CLIENT CONFIDENTIALITY

Lionheart may receive confidential business information while providing Services to clients.

Lionheart uses commercially reasonable practices to protect Client information and restrict its use to legitimate business purposes, performance of Services, and other purposes permitted by contract or law.

This Privacy Policy does not replace any confidentiality obligations contained in a separately executed agreement between Lionheart and a Client.

27. AGGREGATED AND DE-IDENTIFIED INFORMATION

Lionheart may create aggregated, statistical, or de-identified information that does not reasonably identify an individual.

We may use such information for lawful purposes including:

• Analytics;

• Research;

• Service improvement;

• Business intelligence;

• Marketing analysis;

• Performance benchmarking;

• Product development.

Where required by applicable law, Lionheart will not attempt to re-identify information maintained as de-identified information except as permitted for appropriate verification or compliance purposes.

28. CHANGES TO THIS PRIVACY POLICY

Lionheart may update this Privacy Policy periodically to reflect changes in:

• Our Services;

• Our Website;

• Technology;

• Data practices;

• Business operations;

• Legal requirements.

When We revise this Privacy Policy, We will update the “Last Updated” date at the top of this page.

Where required by applicable law, We may provide additional notice of material changes.

You are encouraged to review this Privacy Policy periodically.

Continued use of Our Website or Services after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated policy to the extent permitted by applicable law.

29. CONTACT US

Questions, concerns, or requests regarding this Privacy Policy or Lionheart's privacy practices may be directed to:

Lionheart Digital Agency
Email: support@lionheartdigitalagency.com

Privacy requests should include sufficient information for Lionheart to identify the nature of the request and, where required, reasonably verify the identity of the individual making the request.

30. ACKNOWLEDGMENT

By accessing or using Lionheart Digital Agency's Website or Services, You acknowledge that You have been provided access to this Privacy Policy and understand that Personal Data may be collected, used, processed, retained, and disclosed as described herein.

Nothing in this Privacy Policy is intended to waive, restrict, or eliminate any privacy right that applicable law prohibits a consumer from waiving.