Privacy Policy

Last Updated: August 20, 2026

Digital Otters respects your privacy and is committed to protecting personal information collected through our websites, services, applications, platforms, communications, marketing activities, and client engagements.

This Privacy Policy explains how Digital Otters collects, uses, stores, shares, protects, and otherwise processes personal information.

This Privacy Policy is intended to apply globally. Depending on where you live, additional privacy rights may apply under local law, including laws relating to data protection, privacy, marketing communications, cookies, and consumer rights.

By accessing our website, contacting us, submitting information, using our services, or otherwise interacting with Digital Otters, you acknowledge the practices described in this Privacy Policy.

1. About Digital Otters

Digital Otters provides digital marketing, website development, software development, artificial intelligence, cybersecurity, advertising, social media, consulting, automation, CRM, SaaS, and related technology services.

Depending on your location and the service being provided, your relationship may be with an applicable Digital Otters entity, affiliate, associated company, or authorised service provider.

References in this Privacy Policy to:

• “Digital Otters”
• “we”
• “us”
• “our”

refer to the applicable Digital Otters entity responsible for processing your information.

References to:

• “you”
• “your”
• “user”
• “visitor”
• “client”

refer to individuals who interact with our websites, services, platforms, advertisements, applications, or communications.

2. Scope of This Privacy Policy

This Privacy Policy may apply when you:

• Visit a Digital Otters website
• Submit a contact form
• Request a quotation or proposal
• Purchase or use our services
• Communicate with us by email
• Communicate with us through WhatsApp
• Call us
• Interact with our social media accounts
• Respond to our advertising
• Subscribe to communications
• Use a Digital Otters application or platform
• Access a client portal
• Use a CRM, SaaS product, chatbot, or software provided by Digital Otters
• Attend a meeting or consultation
• Enter into a business relationship with us
• Apply for employment
• Work with us as a supplier, contractor, partner, or service provider

Separate privacy notices may apply to certain products, services, applications, campaigns, employment activities, or jurisdictions.

3. Information We May Collect

The information we collect depends on how you interact with Digital Otters.

Personal Identification Information

We may collect:

• Full name
• First name
• Last name
• Job title
• Company name
• Business role
• Username
• Account identifier

Contact Information

We may collect:

• Email address
• Telephone number
• Mobile number
• WhatsApp number
• Business address
• Billing address
• Country
• City
• Postal address

Business Information

Where you contact us regarding business services, we may collect:

• Company name
• Company website
• Industry
• Company size
• Services requested
• Project requirements
• Marketing requirements
• Business objectives
• Advertising budgets
• Estimated project budgets
• Existing technology
• Existing service providers

Communication Information

We may collect information contained in communications with us, including:

• Emails
• Contact form submissions
• WhatsApp messages
• Live chat messages
• Support requests
• CRM communications
• Meeting notes
• Telephone call information
• Client feedback

Where permitted by applicable law, calls or meetings may be recorded for quality, training, documentation, security, or service purposes.

Where legally required, appropriate notice or consent will be provided.

4. Website and Technical Information

When you use our websites or digital platforms, certain information may be collected automatically.

This may include:

• IP address
• Browser type
• Device type
• Operating system
• Screen resolution
• Language settings
• Approximate geographic location
• Internet service provider
• Referring website
• Landing page
• Pages visited
• Time spent on pages
• Click behaviour
• Date and time of visits
• Session information
• Device identifiers
• Cookie identifiers
• Advertising identifiers
• Website performance information

This information may be collected using cookies, pixels, analytics tools, server logs, APIs, tags, or similar technologies.

5. Lead and Marketing Information

If you submit an inquiry or interact with our advertising, we may collect information including:

• Lead source
• Campaign source
• Advertisement clicked
• Search keyword
• Referral source
• UTM parameters
• Landing page
• Form responses
• Marketing preferences
• Services of interest
• Previous communications

We may store this information in our CRM systems.

6. Client Information

Where you become a client, we may collect additional information required to provide services.

This may include:

• Project requirements
• Account access information
• Website access
• Hosting information
• Domain information
• Advertising account identifiers
• Social media account information
• Analytics information
• CRM information
• API access
• Technical documentation
• Brand assets
• Content
• Marketing data
• Customer information provided by the client
• Project files
• Invoices
• Contracts
• Payment records
• Service history

Clients should only provide personal information to Digital Otters where they have an appropriate lawful basis or other legal authority to do so.

7. Account Credentials and Access

Certain services may require access to third-party platforms operated by our clients.

Examples may include:

• Google Ads
• Google Analytics
• Google Search Console
• Meta Business Manager
• Facebook
• Instagram
• TikTok
• LinkedIn
• Shopify
• WordPress
• Hosting accounts
• Domain providers
• Cloud infrastructure
• CRM systems
• Email platforms

Where possible, Digital Otters encourages clients to provide delegated, role-based, collaborator, employee, partner, or agency access rather than sharing personal passwords.

Credentials or access information provided to us will be used only as reasonably required to perform agreed services.

8. Payment and Billing Information

When you purchase services, we may process:

• Billing information
• Invoice details
• Transaction information
• Payment status
• Currency
• Payment date
• Tax information
• Company registration information where necessary

Payment card or banking information may be processed directly by third-party payment providers, banks, payment gateways, or financial institutions.

Digital Otters may not directly store complete payment card information where payments are handled by third-party payment processors.

9. Information from Third Parties

We may receive information about you from third parties, including:

• Advertising platforms
• Social media platforms
• Lead generation platforms
• Referral partners
• Business partners
• Analytics providers
• CRM providers
• Public databases
• Business directories
• Event organisers
• Affiliates
• Clients
• Service providers

For example, if you submit a lead form through an advertisement on Facebook, Instagram, Google, TikTok, LinkedIn, or another platform, that platform may provide the submitted information to us.

10. Publicly Available Information

For legitimate business purposes, we may collect or use information that has been made publicly available.

This may include:

• Company websites
• Business directories
• Professional networking websites
• Public social media profiles
• Public company information
• Public professional contact information

Use of such information will remain subject to applicable law.

11. How We Use Personal Information

We may use personal information to:

• Respond to inquiries
• Provide quotations
• Prepare proposals
• Provide requested services
• Manage client relationships
• Communicate with clients
• Provide customer support
• Manage projects
• Process payments
• Issue invoices
• Maintain accounts
• Provide CRM access
• Provide client portal access
• Improve our services
• Maintain our websites
• Analyse website performance
• Improve user experience
• Prevent fraud
• Maintain security
• Diagnose technical issues
• Protect our infrastructure
• Meet legal obligations
• Maintain internal records
• Manage contracts
• Conduct analytics
• Carry out marketing
• Measure advertising effectiveness
• Personalise communications
• Conduct business administration
• Recruit employees
• Manage suppliers and contractors
• Establish, exercise, or defend legal claims

We will not use personal information for purposes materially incompatible with the reason it was originally collected unless permitted by applicable law.

12. Legal Bases for Processing

Where applicable privacy law requires us to identify a lawful basis for processing personal information, we may rely on one or more of the following:

Consent

We may process information where you have provided valid consent.

You may withdraw your consent at any time, subject to applicable law.

Contractual Necessity

We may process information where necessary to:

• Enter into a contract with you
• Provide requested services
• Perform contractual obligations
• Manage an existing business relationship

Legitimate Interests

Where permitted by law, we may process personal information where reasonably necessary for legitimate business interests, including:

• Responding to business inquiries
• Managing client relationships
• Improving services
• Maintaining security
• Preventing fraud
• Operating our websites
• Conducting business-to-business marketing
• Analysing performance

We consider the impact on your privacy rights before relying on legitimate interests.

Legal Obligation

We may process personal information where necessary to comply with:

• Laws
• Regulations
• Court orders
• Tax requirements
• Accounting obligations
• Government requests
• Regulatory obligations

Other Legal Bases

In some jurisdictions, applicable privacy law may provide additional or different legal bases for processing.

Where applicable, we will process information in accordance with those requirements.

13. Cookies and Similar Technologies

Our websites may use cookies and similar technologies.

These may include:

• Essential cookies
• Functional cookies
• Analytics cookies
• Performance cookies
• Advertising cookies
• Personalisation cookies
• Conversion tracking technologies

Cookies may help us:

• Operate the website
• Remember preferences
• Analyse traffic
• Understand visitor behaviour
• Improve website performance
• Measure advertising campaigns
• Provide relevant marketing
• Prevent fraud or misuse

Where required by applicable law, non-essential cookies will be used only after obtaining appropriate consent.

Users may also control cookies through their browser settings and, where available, our cookie preference controls.

Disabling some cookies may affect website functionality.

14. Analytics

We may use analytics services to understand website and application usage.

Analytics providers may collect information such as:

• IP address
• Device information
• Browser information
• Pages viewed
• Session duration
• Referral source
• Geographic region
• Interaction information

Analytics data helps us improve our website, services, marketing, and user experience.

15. Advertising and Remarketing

Digital Otters may use advertising and remarketing technologies offered by platforms such as:

• Google
• Meta
• Facebook
• Instagram
• LinkedIn
• TikTok
• YouTube
• Microsoft
• Other advertising providers

These technologies may allow advertising platforms to understand whether a user:

• Visited our website
• Submitted a form
• Viewed a service
• Interacted with an advertisement
• Completed a conversion

Where required by law, these technologies will be subject to appropriate consent mechanisms.

Users may also be able to control personalised advertising through the relevant advertising platform.

16. Marketing Communications

Where legally permitted, we may send:

• Service information
• Business communications
• Marketing emails
• Promotional messages
• Relevant offers
• Company updates
• Event information
• Newsletter communications

You may unsubscribe from marketing communications using the unsubscribe mechanism provided in the communication or by contacting us.

Opting out of marketing does not prevent us from sending necessary transactional, contractual, administrative, security, or service-related communications.

17. WhatsApp and Messaging Services

If you contact Digital Otters using WhatsApp or another messaging platform, your communication will also be subject to the privacy practices of the relevant platform.

We may use authorised business messaging tools, APIs, CRM systems, and service providers to manage such communications.

Where permitted by law, communications may be stored in our CRM for customer service, lead management, business records, compliance, or project management.

18. CRM Systems

Digital Otters may use internal or third-party CRM systems to manage:

• Leads
• Contacts
• Clients
• Sales opportunities
• Conversations
• Follow-ups
• Proposals
• Projects
• Marketing attribution
• Customer service

Information submitted through our websites, advertisements, email, WhatsApp, calls, or other business channels may be stored within our CRM.

Access to CRM information is restricted according to business roles and operational requirements.

19. Artificial Intelligence

Digital Otters may use artificial intelligence and automated technologies to assist with certain business functions.

These may include:

• Customer support
• Chatbots
• Lead categorisation
• Content assistance
• Data analysis
• Marketing automation
• Service delivery
• Internal productivity
• Fraud or security detection

Where personal information is used with AI systems, we aim to apply appropriate safeguards and use such systems in accordance with applicable law and contractual requirements.

We do not intend to make solely automated decisions producing significant legal effects on individuals unless legally permitted and appropriate safeguards are available.

20. How We Share Personal Information

We do not sell personal information in the ordinary meaning of selling personal data for money.

However, we may share information where reasonably necessary with:

• Digital Otters entities
• Employees
• Contractors
• Consultants
• Technology providers
• Cloud hosting providers
• CRM providers
• Analytics providers
• Advertising providers
• Payment processors
• Banks
• Accountants
• Lawyers
• Professional advisers
• Customer support providers
• Communication providers
• Email providers
• Telecommunications providers
• Cybersecurity providers
• Government authorities
• Regulators
• Courts

Information will only be shared where reasonably necessary and subject to appropriate legal, contractual, or security protections where required.

21. Service Providers

We may engage third parties to process information on our behalf.

Examples may include providers of:

• Hosting
• Cloud infrastructure
• Email
• Analytics
• CRM
• Advertising
• Payment processing
• Communications
• Cybersecurity
• Data storage
• Customer support
• Project management
• Artificial intelligence
• Software development infrastructure

Where required by applicable law, appropriate contractual safeguards will be used with processors and service providers.

22. International Data Transfers

Digital Otters operates internationally and may work with clients, employees, contractors, infrastructure providers, and service providers in multiple countries.

As a result, personal information may be transferred, accessed, processed, or stored outside the country in which it was originally collected.

Different countries may have different data protection laws.

Where applicable law requires additional protections for international transfers, Digital Otters may use appropriate safeguards such as:

• Standard contractual clauses
• Data processing agreements
• Approved transfer mechanisms
• Adequacy decisions
• Contractual safeguards
• Consent where legally appropriate
• Other legally recognised transfer mechanisms

23. Data Storage

Personal information may be stored using:

• Cloud hosting providers
• Managed databases
• CRM systems
• Email platforms
• Secure servers
• File storage systems
• Project management platforms
• Backup systems

Data may be stored in more than one country depending on the service providers used.

24. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

Retention periods may depend on:

• Nature of the information
• Client relationship
• Contractual requirements
• Project requirements
• Legal obligations
• Tax obligations
• Accounting requirements
• Dispute resolution
• Security requirements
• Regulatory requirements

For example, information may be retained while you remain a client and for an appropriate period afterwards to maintain business, legal, accounting, or compliance records.

When information is no longer required, we may delete, anonymise, or securely dispose of it.

25. Data Security

Digital Otters takes reasonable technical, administrative, organisational, and physical measures designed to protect personal information.

Security measures may include:

• Access controls
• Role-based permissions
• Authentication
• Encryption
• Secure hosting
• Firewalls
• Monitoring
• Backups
• Malware protection
• Security updates
• Network protections
• Employee access restrictions
• Logging
• Security testing

However, no method of electronic transmission or data storage can be guaranteed to be completely secure.

Accordingly, we cannot guarantee absolute security of personal information.

26. Data Breaches

Where a personal data breach occurs, Digital Otters will assess the incident and take appropriate measures.

Where required by applicable law, Digital Otters may notify:

• Relevant regulators
• Affected clients
• Affected individuals
• Other appropriate parties

Notifications will be made according to applicable legal requirements.

27. Your Privacy Rights

Your rights vary depending on where you live.

Subject to applicable law, you may have the right to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of personal information
• Request restriction of processing
• Object to certain processing
• Withdraw consent
• Request data portability
• Opt out of marketing
• Opt out of certain targeted advertising
• Request information about data sharing
• Request information about categories of personal information collected
• Request information about third parties receiving information
• Appeal certain privacy decisions
• Lodge a complaint with a data protection authority

Some rights may be subject to exemptions or limitations under applicable law.

28. European Economic Area and European Union Users

Where the European Union General Data Protection Regulation or other European data protection laws apply, individuals may have rights including:

• Access
• Rectification
• Erasure
• Restriction
• Objection
• Data portability
• Withdrawal of consent
• Complaint to a supervisory authority

Where applicable, Digital Otters will process personal information according to relevant European data protection requirements.

29. United Kingdom Users

Where UK data protection law applies, including the UK GDPR and applicable data protection legislation, users may have rights relating to:

• Access
• Correction
• Deletion
• Restriction
• Objection
• Data portability
• Consent withdrawal

Individuals may also have the right to lodge complaints with the relevant UK data protection authority.

30. United States Privacy Rights

Residents of certain US states may have additional rights under applicable state privacy laws.

Depending on the jurisdiction, these rights may include:

• Right to know
• Right of access
• Right to correction
• Right to deletion
• Right to data portability
• Right to opt out of certain targeted advertising
• Right to opt out of certain profiling
• Right to opt out of certain data sharing or sale
• Right to limit certain uses of sensitive personal information
• Right to appeal certain decisions

Digital Otters will honour applicable rights where required by law.

31. California Privacy Rights

Where applicable California privacy laws apply, California residents may have additional rights concerning their personal information.

These may include rights to request information regarding:

• Categories of personal information collected
• Sources of information
• Purposes of processing
• Categories of third parties
• Disclosure of information
• Deletion
• Correction

Where applicable, California residents may also have the right to opt out of certain forms of sale or sharing of personal information.

Digital Otters does not discriminate against individuals for exercising applicable privacy rights.

32. UAE Privacy Rights

Where applicable UAE data protection laws apply to the processing of personal information, Digital Otters will process such information according to relevant requirements.

Depending on applicable law and circumstances, individuals may have rights relating to:

• Access
• Correction
• Processing restrictions
• Objection
• Data portability
• Withdrawal of consent
• Certain automated processing

Additional requirements may apply depending on whether processing occurs under federal UAE law or within a jurisdiction operating under its own data protection framework.

33. Other Countries

Digital Otters serves users and clients internationally.

Privacy and data protection requirements may vary across countries.

Where laws in your country provide additional privacy rights, Digital Otters will seek to respect those rights where the relevant law applies to our processing activities.

Nothing in this Privacy Policy is intended to limit mandatory rights available under applicable privacy legislation.

34. Children’s Privacy

Digital Otters' primary websites and business services are intended for businesses and adults.

We do not knowingly collect personal information directly from children where doing so would require parental consent or other legal authorisation, unless the relevant service is specifically designed to permit such processing.

If you believe a child has provided personal information to Digital Otters without appropriate authorisation, please contact us so that we can review the matter.

35. Sensitive Personal Information

Digital Otters does not generally request sensitive personal information unless necessary for a specific lawful purpose.

Depending on applicable law, sensitive information may include information concerning:

• Health
• Biometric information
• Religious beliefs
• Political views
• Ethnic or racial origin
• Sexual orientation
• Precise geographic information
• Government identifiers
• Financial account credentials

Where sensitive personal information is processed, additional safeguards may be applied as required by law.

36. Recruitment and Employment Applications

If you apply for a position with Digital Otters, we may collect:

• Name
• Contact details
• CV or résumé
• Education
• Employment history
• Portfolio
• Skills
• References
• Interview information
• Salary expectations
• Work authorisation information
• Other recruitment information

Recruitment information will be used for hiring, recruitment administration, candidate evaluation, communication, recordkeeping, and legal compliance.

37. Business Transfers

If Digital Otters is involved in:

• A merger
• Acquisition
• Investment
• Restructuring
• Financing
• Sale of assets
• Reorganisation
• Insolvency
• Transfer of a business unit

personal information may be transferred as part of the transaction, subject to applicable legal requirements.

38. Legal Disclosure

We may disclose personal information where reasonably necessary to:

• Comply with law
• Respond to legal process
• Respond to court orders
• Respond to regulators
• Respond to government authorities
• Protect our legal rights
• Investigate fraud
• Protect users
• Protect our systems
• Prevent illegal activity
• Enforce contracts

We will seek to limit such disclosures to what is reasonably necessary.

39. External Websites

Our websites may contain links to third-party websites or platforms.

Digital Otters does not control the privacy practices of third-party websites.

We encourage you to review the privacy policies of any external service before providing personal information.

40. Social Media

Digital Otters operates accounts on third-party social media platforms.

When you interact with Digital Otters through a social media platform, both Digital Otters and the relevant platform may process information about you.

Your use of those platforms is also governed by their privacy policies.

41. Client Data Processed on Behalf of Clients

In some circumstances, Digital Otters may process personal information on behalf of a client while providing services.

Examples may include:

• CRM services
• Marketing campaigns
• Website development
• Lead management
• Email marketing
• Automation
• Analytics
• SaaS platforms
• Customer support tools

In these cases, the Client may act as the data controller or equivalent responsible party and Digital Otters may act as a processor or service provider.

Clients are responsible for providing appropriate privacy notices and establishing an appropriate legal basis for their processing.

Where required, Digital Otters may enter into a Data Processing Agreement with the Client.

42. Data Processing Agreements

Clients requiring specific contractual protections regarding personal data may request a Data Processing Agreement.

Depending on applicable requirements, a DPA may address:

• Processing instructions
• Confidentiality
• Security measures
• International transfers
• Subprocessors
• Data subject requests
• Incident notification
• Data deletion
• Audit requirements

43. Do Not Track Signals

Some browsers offer “Do Not Track” functionality.

Because there is not necessarily a uniform global standard for responding to such signals, our websites may not respond to all traditional Do Not Track mechanisms.

Where legally required browser-based opt-out mechanisms or recognised privacy signals apply, we may implement appropriate controls.

44. Exercising Your Privacy Rights

To exercise an applicable privacy right, you may contact Digital Otters using the contact information published on our official website.

Please clearly identify:

• Your name
• Your contact information
• The nature of your request
• The relevant Digital Otters service or website

We may need to verify your identity before processing certain requests.

We will respond within the time required by applicable law.

45. Authorised Representatives

Where permitted by applicable law, you may appoint an authorised representative to make a privacy request on your behalf.

We may request documentation confirming that the representative has appropriate authority.

46. Identity Verification

To protect personal information, Digital Otters may need to verify the identity of an individual submitting an access, correction, deletion, or other privacy request.

Verification methods may vary depending on the nature and sensitivity of the information requested.

47. Complaints

If you believe Digital Otters has not handled your personal information appropriately, please contact us first so that we can review your concern.

Depending on your jurisdiction, you may also have the right to lodge a complaint with an applicable privacy, consumer protection, or data protection authority.

48. Changes to This Privacy Policy

Digital Otters may update this Privacy Policy periodically.

Changes may be required because of:

• New services
• New technologies
• Business changes
• Legal requirements
• Regulatory developments
• Security practices
• Changes to third-party providers

The updated Privacy Policy will be published on this page with a revised “Last Updated” date.

Where required by law, additional notice may be provided for material changes.

49. Relationship With Other Agreements

This Privacy Policy should be read alongside, where applicable:

• Terms & Conditions
• Client agreements
• Service agreements
• Statements of work
• Data Processing Agreements
• Cookie policies
• Employment privacy notices
• Product-specific privacy notices

Where a separately signed agreement contains specific data protection obligations, those provisions may apply in addition to this Privacy Policy.

50. Contact Us

For questions regarding this Privacy Policy, requests concerning your personal information, or other privacy-related matters, please contact Digital Otters using the contact information published on our official website.

Digital Otters
Website: www.digitalotters.com

For privacy-related requests, please use the official contact details provided on the Digital Otters website.

Global Privacy Notice

Digital Otters operates internationally. Privacy requirements differ between jurisdictions, and this Privacy Policy is designed to provide a general global framework.

Where applicable local privacy law provides protections greater than those described in this Privacy Policy, the applicable mandatory legal requirements will take precedence.