01Who we are
Discovery Digitals SRL (BV) is a private limited company registered in Belgium under enterprise number 0760.787.430 (VAT BE0760787430), with its registered office at Rue Tramasure 12, 7830 Silly, Belgium. We are responsible for the personal information described in this policy. In it, “we”, “us” and “our” mean Discovery Digitals, and “you” means anyone who visits our order pages or buys from us.
This policy covers our order pages: the service pages, the checkout and the brief you fill out after paying. It explains what we collect, why, who we share it with and the choices you have. It works together with our Terms of Service. Questions? Email us at contact@discoverydigitals.com.
02What we collect
We only ask for what we need to process your order and start your project.
Information you give us
- Your email address, at the first step of checkout. We save it as soon as you click “See my options”, before any payment, together with the package you picked.
- Your order: package, upgrade, add-ons, recommended services, coupon code, amount, and whether it is billed once or monthly.
- Your payment details, entered on Stripe's payment page. Stripe handles them directly. We can see limited details, such as the card brand, its last four digits and your billing country, but never your full card number or security code.
- Your project brief, after payment: your business name, website, what you sell and to whom, style references, competitors, notes, and one question specific to your service (for example your service area and average job value for Google Ads, or the tools you use today for Automation).
- What you send us directly, by email or during a call: messages, files, and any access you give us to your tools for your project.
- When you book a call: what you enter in the booking form, such as your name, email and answers, collected through Cal.com.
Information collected automatically
- How you found us. When you arrive on one of our order pages from an ad or a tracked link, we read the campaign details in that link: UTM parameters (source, medium, campaign, keyword and ad content), ad click IDs from Google (gclid, gbraid, wbraid), Meta (fbclid) or OpenAI (oppref, for ads shown in ChatGPT), and the page where you arrived. They are saved in your browser, then sent along with your email and with your order, so we know which ad led to which order.
- Checkout steps. Our pages record the steps of your visit (viewing a service, entering your email, reaching payment, completing a purchase) with the package and the order value, never your email address in readable form. See Ad measurement for how these events are used.
- Technical data. Like any website, our servers receive your IP address, your browser type and the pages you request. Our hosting provider keeps them in technical logs used for security and troubleshooting. These logs can also contain what you submit through our pages.
Information from others
Stripe tells us whether your payment went through and shares what we need to manage your order and your monthly plan, such as the amount paid, your email, the name entered with your payment and your billing status.
03How we use it
- To process your order: take your payment, email you your order confirmation and a copy of your brief, manage your monthly plan, and issue invoices and receipts.
- To deliver your project: read your brief, prepare your work and keep in touch with you about it.
- To remind you about an unfinished order. If you enter your email but don't complete payment, we may email you up to two reminders, a few hours later and the next day, with a link that brings back the package you picked. That's it: no newsletter, no unrelated marketing. Reminders stop as soon as you order, and every reminder has a link to stop them in one click.
- To measure our ads: see which campaigns and keywords lead to orders, so we spend our ad budget on what works.
- To keep our pages safe and working: prevent fraud and abuse, and fix problems.
- To meet our legal obligations: accounting, tax, and answering lawful requests from authorities.
04Legal bases
Where privacy laws such as the EU or UK GDPR apply, we rely on the following legal bases:
- Our contract with you, to process your order, read your brief and deliver your project.
- Our legitimate interests, to remind you about an unfinished order, measure our ads and keep our pages secure. We only do so when these interests are not outweighed by yours, and you can object at any time.
- Legal obligations, to keep accounting and tax records.
- Your consent, where the law requires it, for example before setting advertising cookies. You can withdraw it at any time.
07Ad measurement
Our order pages load two ad measurement tools, so we can see which ads lead to orders: the Google tag from Google Ads, and the OpenAI pixel for our ads shown in ChatGPT. They run only on our order pages, not on the rest of our website.
What the Google tag measures
- Your ad click. When you arrive from a Google ad, the link contains an ad click ID (gclid, or gbraid and wbraid on some Apple devices). The Google tag processes this ID and saves it in a cookie on our domain.
- Your purchase. When your payment is confirmed, the tag tells Google Ads that a purchase happened, with its value, its currency and an order reference, so Google can connect it to the ad you clicked.
- A started order. When you enter your email at the first step of checkout, the tag tells Google Ads that an order was started. Your email is never sent.
What we never send to Google
We never send Google your email address, your name, your project brief or your payment details, not even in a hashed form. We don't use Google's enhanced conversions, and we turned off ad personalization for this tag: what it measures is not used to build remarketing lists or show you personalized ads.
What the OpenAI pixel measures
- Your ad click. When you arrive from an ad in ChatGPT, the link contains an OpenAI click reference (oppref). The pixel saves it in a cookie on our domain, and we also keep it with your order.
- Your visit and your order. The pixel tells OpenAI when you view a service page, enter your email at the first step of checkout, reach the payment step and complete a purchase, with the package, the order value and an order reference.
- A hashed email, for matching. The pixel can detect the email you type at checkout and turns it into a SHA-256 hash in your browser before sending it. When your payment is confirmed, our server also sends OpenAI the order with that hashed email and your click reference, so the purchase is counted even if you close the page. OpenAI never receives your email in readable form, your name, your project brief or your payment details.
OpenAI uses this information to measure our ads and to show them to people more likely to be interested, under OpenAI's privacy policy.
Your choices
In the European Economic Area, the UK and Switzerland, the OpenAI pixel sends nothing and sets no cookies. The Google tag runs with advertising cookies turned off by default (Google Consent Mode), since we don't ask for consent on these pages. Google then only receives limited signals without cookies. Wherever you are, you can block or delete these cookies in your browser settings, manage how Google uses your data in My Ad Center, or ask us to stop using your information to measure our ads. Google processes this data under Google's privacy policy.
08How long we keep it
- If you don't complete an order: we keep your email and the package you picked for up to 12 months, then delete them.
- If you order: we keep your order, your brief and your project files for as long as we work together, then for 3 years after your project ends or your plan is cancelled, so we can support you and answer questions about past work.
- Invoices and payment records: for as long as tax and accounting laws require.
- Browser storage and cookies: as shown in the tables above. You can clear them at any time.
If you ask us to delete your information, we do it sooner, except what the law requires us to keep.
09How we protect it
Our pages are served over an encrypted connection (HTTPS). Card payments are handled by Stripe, a PCI DSS Level 1 certified payment provider, so your card details never reach our servers. Access to your information is limited to the people working on your project and to the providers listed above.
No system is perfectly secure. If a security incident ever affects your information, we will tell you as required by law.
10Where your information is processed
Our service providers may process your information in the United States and in other countries, including outside the country where you live. When data protection laws require it, we rely on recognized safeguards for these transfers, such as standard contractual clauses.
11Your choices and rights
Wherever you live, you can ask us to:
- tell you what personal information we hold about you, and send you a copy;
- correct information that is wrong;
- delete your information, except what the law requires us to keep, such as invoices;
- stop sending you reminders about an unfinished order (each reminder also has a link to do it);
- stop using your information to measure our ads.
To make a request, email us at contact@discoverydigitals.com from the address you used at checkout. We may ask you to confirm your identity first, and we answer within 30 days. Using these rights will never change the price or the quality of our services.
US state privacy rights. Depending on where you live (for example California, Colorado, Connecticut, Virginia or Texas), state law may give you specific rights: to know what we collect, to delete or correct it, and to opt out of its sale or its use for targeted advertising. We don't sell your personal information. If we ever use advertising tags that a state law treats as sharing for targeted advertising, we will update this policy and give you a way to opt out first. You can also make a request through an authorized agent.
EU, UK and Switzerland. You can also object to processing based on our legitimate interests, ask us to restrict how we use your information, ask for it in a portable format, withdraw your consent at any time, and file a complaint with your local data protection authority.
12Children
Our services are meant for businesses and for people aged 18 or over. We don't knowingly collect information from children. If you believe a child has given us personal information, email us and we will delete it.
13Changes to this policy
We may update this policy when our pages or our providers change, for example when we add a new provider. The date at the top shows the latest version. If a change significantly affects how we use information we already hold, we will tell you by email before it applies.
14Contact
Questions about your privacy, or a request? Email us at contact@discoverydigitals.com, or write to us at Rue Tramasure 12, 7830 Silly, Belgium.