Privacy Policy
Last Updated: July 2, 2026
SECTION 1 — INTRODUCTION
BoldWebX ("we," "us," or "our") is deeply committed to protecting your privacy and ensuring the responsible handling of your personal data. We collect only the minimum information necessary to provide and maintain our services effectively. We never sell, rent, or share your personal information with third parties for commercial or marketing purposes.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit www.boldwebx.com or interact with our services. By using our website or services, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree, please discontinue use of this website.
SECTION 2 — INFORMATION WE COLLECT
Information You Provide Directly
- Contact information: Name, email address, phone number, and mailing address submitted via our contact or booking forms.
- Practice information: Practice type and details about your client acquisition situation, as provided in discovery or inquiry forms.
- Payment information: Handled exclusively through PCI-DSS compliant third-party processors (e.g., Stripe or PayPal). We do not store credit card or financial account details on our servers.
- Communications: Content of emails, messages, or other correspondence you send to us.
- Marketing preferences: Opt-in status for newsletters and promotional communications.
Information Collected Automatically
- Essential cookies: Strictly necessary cookies required for session management and basic site functionality. These do not track your browsing behavior for marketing purposes.
- Anonymous usage data: Anonymized technical data including IP address (truncated), browser type, operating system, pages accessed, and session duration, used solely to ensure the security, reliability, and performance of this website. This data cannot be used to personally identify you. We do not deploy advertising cookies or third-party marketing technologies of our own on this website. (Our hosting provider's separate use of such technologies is addressed below.)
Cookie Consent & Applicable Law
BoldWebX operates in California and serves clients throughout the United States. This Privacy Policy is intended to comply with applicable U.S. law.
Our website uses cookies that are necessary for the operation, security, and reliability of the website. BoldWebX does not deploy, configure, or use advertising cookies, third-party marketing cookies, or similar tracking technologies for its own advertising or marketing purposes.
This website does not display a cookie consent banner. Visitors located in the EEA, UK, or other jurisdictions with different cookie consent requirements should be aware that cookie consent obligations vary by jurisdiction and by the specific technologies in use. BoldWebX does not provide legal advice regarding those requirements, and visitors or clients with questions about their own compliance obligations should consult a licensed attorney in their relevant jurisdiction.
This website is hosted on Wix. As part of providing its hosting infrastructure, Wix may independently place cookies or similar technologies on your device for platform operations such as security, fraud prevention, load balancing, network management, service reliability, analytics, or Wix's own marketing purposes. These technologies are controlled solely by Wix and operate independently of BoldWebX's own data practices. For more information about Wix's privacy practices, please review the Wix Privacy Policy: https://www.wix.com/about/privacy.
Information from Third-Party Platforms
If you interact with BoldWebX through a third-party platform (such as an ad or a CRM form), those platforms may collect and transmit information to us in accordance with their own privacy policies. We encourage you to review those policies directly.
SECTION 3 — HOW WE USE YOUR INFORMATION
We use your personal information only for the following purposes:
- To respond to your inquiries and schedule discovery calls
- To deliver, maintain, and improve contracted services
- To process transactions and send billing confirmations and updates
- To store and manage your contact and engagement data in our system as part of our service delivery infrastructure
- To send our newsletter or other promotional content, only if you have explicitly opted in
- To analyze anonymized usage patterns in order to maintain website performance, detect abuse, and ensure service reliability
- To comply with applicable legal obligations
SECTION 4 — LEGAL BASES FOR PROCESSING
Each use of your personal information is based on one of the following legal grounds under the General Data Protection Regulation (GDPR) and applicable US state privacy laws:
- Performance of a contract: Processing required to deliver services you have engaged us to provide (e.g., managing your engagement, sending invoices).
- Compliance with legal obligations: Processing required to comply with applicable laws and regulations.
- Legitimate interests: Processing necessary for our legitimate business interests — including securing our systems, maintaining service quality, and communicating with prospective clients — where those interests are not overridden by your rights.
- Your consent: For marketing communications, where consent has been explicitly provided and may be withdrawn at any time.
SECTION 5 — DISCLOSURE OF INFORMATION
We do not sell, rent, or share your personal information for commercial purposes. We may share your information only in the following limited circumstances:
- Service providers: Trusted third-party companies that help us deliver our services across the following functions: website hosting and booking, professional email infrastructure, secure payment processing (via PCI-DSS certified processors), workflow automation, and client data management. Specific vendors are identified in your service agreement, where applicable. All such providers are contractually required to comply with applicable privacy laws (including GDPR and CCPA, and HIPAA when a BAA is signed). They are also prohibited from using your data for their own marketing or commercial purposes.
- Legal authorities: Where required to comply with a legal obligation, court order, or governmental request, or to protect BoldWebX's rights, safety, or the safety of others.
As our business evolves, we may update our third-party relationships. This Policy will be updated to reflect any significant changes. We encourage you to review the privacy policies of all third-party platforms directly.
SECTION 6 — DATA RETENTION
We retain your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law:
- Active client data: Retained for the full duration of the engagement plus 3 years following engagement termination, for business continuity and legal compliance purposes.
- Prospective client data: Retained for up to 24 months from initial contact where no engagement has commenced, after which it is deleted or anonymized unless you have an active marketing opt-in.
- Billing and transaction records: Retained for 7 years to comply with applicable tax and accounting obligations.
- Marketing consent records: Retained for the duration of your opt-in status plus 3 years, to demonstrate compliance with consent requirements.
You may request earlier deletion of your data at any time, subject to our legal retention obligations. See Section 8 (Your Rights) for how to make such a request.
SECTION 7 — DATA SECURITY
We implement strong technical and organizational measures — including access controls, encryption of data in transit, and regular security audits — to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures are reviewed and updated regularly to reflect evolving risks and best practices.
However, no internet transmission or storage system is completely secure, and we cannot guarantee absolute security.
In the event of a personal data breach that may result in a risk to your rights or freedoms, we will notify relevant supervisory authorities within 24 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights or freedoms, we will also notify affected individuals without undue delay.
We encourage you to take appropriate precautions to protect your own account credentials and to notify us immediately at contact@boldwebx.com if you suspect any unauthorized access.
SECTION 8 — YOUR RIGHTS
Depending on your location, you may have the following rights regarding your personal information. To exercise any of these rights, contact us at contact@boldwebx.com. We will respond to all verifiable requests within 30 days of receipt. If we require additional time (up to 60 days), we will notify you in writing within the initial 30-day period and explain the reason for the extension. We may require verification of your identity to protect against fraudulent requests.
Under GDPR (EEA / UK Residents)
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations.
- Right to Restriction: Request that we limit processing of your data in certain circumstances.
- Right to Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
- Right to Lodge a Complaint: Lodge a complaint with the data protection supervisory authority in your jurisdiction. A list of EU supervisory authorities is available at edpb.europa.eu. UK residents may contact the ICO at ico.org.uk.
Under CCPA/CPRA (California Residents)
- Right to Know: Know what personal data we collect, use, disclose, or sell.
- Right to Delete: Request deletion of your personal data, subject to certain exceptions.
- Right to Correct: Request correction of inaccurate personal information we hold about you.
- Right to Opt Out of Sale: Not applicable — we do not sell personal data.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
SECTION 9 — CHILDREN'S PRIVACY
BoldWebX services are intended exclusively for independent professionals operating businesses. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have inadvertently collected personal data from a minor, we will take prompt steps to delete that information. If you believe we have collected information from a minor, please contact us immediately at contact@boldwebx.com.
SECTION 10 — CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes in our data practices or legal requirements. We encourage you to review this page periodically. Any changes will be posted with a revised effective date. Non-material changes take effect upon posting. For material changes that affect your rights, we will provide at least 14 days' advance notice before the revised Policy takes effect, by email or by a prominent notice on this website.
Your continued use of our website or services after a revised Policy has been posted constitutes your acceptance of those changes.
CONTACT
Privacy requests and data inquiries: contact@boldwebx.com
We respond to all privacy requests within 1-2 days.