Privacy Policy

M&P Digital Agency is a brand operated by MandP Supply LLC. In this policy, "we", "us" and "our" mean M&P Digital Agency and MandP Supply LLC.

This policy covers our website, our forms and booking pages, our emails and text messages, and the services we provide to business clients. Contact: [email protected].

Information you give us: name, email, phone number, business name, website, preferred language, the service you are interested in, the content of your messages, and the details you share when you book a call.

Information from client projects: business information, brand assets, content, files, account access you grant us, and customer data you ask us to work with as part of an approved project.

Information collected automatically: basic technical data such as IP address, browser type, device and pages requested, which our hosting and security providers process to deliver and protect the website. We do not use analytics or advertising trackers on this website today.

Payment information: payments are processed by Stripe. We do not see or store full card numbers.

We use information to:

If you give us your mobile number and agree to receive text messages, we may text you about your inquiry, appointment reminders and service updates. Message frequency varies. Message and data rates may apply.

Reply STOP to cancel at any time and HELP for help, or email us at [email protected]. Consent to receive texts is not a condition of buying any service.

We do not sell, rent or share mobile phone numbers or text-messaging consent with third parties or affiliates for their marketing purposes. Information is shared only with the providers that deliver the messages for us.

We share information only with providers that help us run our business, and only as needed for the service they provide:

When we build or run systems for a client (for example an AI agent, a follow-up workflow or a review request flow), we process the data of that client's customers on the client's behalf and following the client's instructions.

The client is responsible for having a lawful basis, the required notices and the consent needed to collect and contact its own customers, including consent for calls and text messages.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We may disclose information if required by law, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of the business, in which case this policy will continue to apply.

Inquiries and booking details: up to 24 months after our last contact, unless you ask us to delete them sooner.

Client and billing records: for the length of the engagement and up to 7 years after it ends, to meet tax, accounting and legal obligations.

Project data inside third-party tools: until the project ends or the client asks us to delete or return it, subject to each provider's own retention rules.

We use reasonable safeguards, such as access controls, multi-factor authentication where available and limiting access to the people who need it. No website, email or online system is completely secure, so please do not send passwords or highly sensitive information by email or forms unless we ask for it through a secure method.

You can ask us to tell you what personal information we hold about you, give you a copy, correct it or delete it, and you can opt out of marketing messages at any time.

U.S. residents: depending on your state (for example California, Colorado, Connecticut, Virginia or Texas), you may have additional rights under state privacy laws. We honor these requests whether or not a specific law applies to us, and we will not treat you differently for using them. You may use an authorized agent, and we honor Global Privacy Control signals.

Latin America: under local data protection laws (such as Mexico's ARCO rights or Colombia's habeas data), you may have rights to access, rectify, cancel or object to the processing of your data.

To make a request, email [email protected]. We may need to verify your identity before acting on it, and we will reply within the time required by applicable law, normally within 45 days.

We are a U.S. business and our providers may process information in the United States and other countries. If you contact us from outside the United States, your information will be transferred to and processed in those countries, which may have different data protection rules than yours.

Our website and services are for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has sent us information, contact us and we will delete it.

We may update this policy when our services or providers change. The date at the top shows the latest version. If a change is significant, we will highlight it on this page.

Questions about this policy? Email us at [email protected] and include your name, your business and your question.