Who we are
This Privacy Policy applies to rsnt.agency and any sub-pages (collectively, "the Site"), operated by Resonate Agency LLC, a Florida limited liability company headquartered in Miami, Florida.
For the purposes of US privacy law, Resonate Agency LLC is the controller of personal data collected through the Site. References to "we," "us," and "our" mean Resonate Agency LLC. References to "you" mean any person visiting the Site or contacting us through it.
What we collect
We collect only what's necessary to operate the Site, respond to inquiries, and improve how the Site works. The table below is a complete inventory of what's collected and why.
Contact form data
Name, email, phone (if provided), company name, message body
To respond to your inquiry
Analytics data
Pages viewed, time on page, referrer, anonymized IP, device type, country/region
To understand how the Site is used
Behavior recordings
Anonymized session recordings, click patterns, scroll depth (via Microsoft Clarity)
To diagnose UX issues
Server logs
IP address, timestamp, URL requested, user-agent string
Security and abuse prevention (Netlify hosting)
Email correspondence
Anything you send us by email or through forms
To carry on our communication
What we do not collect
We do not collect payment card information on the Site. All paid engagements are invoiced separately and processed through third-party payment processors (Stripe, bank transfer, or similar) — we never see or store card numbers.
We do not collect government identifiers (SSN, EIN beyond what's required for invoicing, passport numbers, etc.).
We do not collect biometric data, precise geolocation, or sensitive demographic categories (race, religion, sexual orientation, health information).
How we use it
We use the data above for the following limited purposes:
Responding to your inquiry. If you fill out a form or email us, we use your contact info to respond and to keep records of our exchange.
Operating and improving the Site. Analytics and recordings help us understand which pages work, which don't, and where users get confused.
Sending follow-up communications, only if you've requested it. If you opt into our insights newsletter or request a sample audit, we'll send what you asked for. We do not add anyone to mailing lists without explicit opt-in.
Legal obligations. If we're required by law to retain or produce records (court orders, tax requirements, etc.), we'll comply.
Security and abuse prevention. We use server logs to detect and block malicious activity (bot scraping, brute-force attempts, etc.).
We do not sell your personal data. We do not share it with advertisers or data brokers. We do not use it for ad retargeting outside of what you'll find listed under "Third-party services" below.
Third-party services
The Site is built on a small set of third-party services, each with its own privacy policy. We've kept this list as short as we can. Here's the full inventory:
Netlify — hosts the Site. Sees your IP address as part of standard server operation. Netlify Privacy Policy →
Google Analytics 4 (GA4) — measures Site usage. Configured with IP anonymization. Google Privacy Policy →
Google Tag Manager (GTM) — manages the analytics tags themselves. No data collection of its own; it's a wrapper around the tags above. Google Privacy Policy →
Microsoft Clarity — records anonymized session behavior (clicks, scrolls, dead zones) for UX diagnostics. Does not record form inputs or sensitive data. Microsoft Privacy Statement →
Formspree — receives and forwards contact-form submissions. Stores form data for delivery. Formspree Privacy Policy →
Meta Pixel (if active) — used only when running paid Meta campaigns. Loads only on pages where it's relevant. Meta Privacy Policy →
Each service operates under its own terms. We've selected them because they're industry-standard, GDPR-compliant in their EU operations, and configurable to minimize what's collected.
Data sharing
We share data only when:
It's necessary for the third parties listed above to provide their service to us (hosting, analytics, etc.). Each operates under contract terms or industry-standard data processing terms.
You're an active client and we share data with our subcontractors (1099 contractors who form our SEO, paid media, and creative teams) to perform contracted work. All contractors are bound by confidentiality terms.
We're legally required to disclose data — court orders, valid law-enforcement requests, regulatory inquiries, or to defend legal claims.
Business transfer. If Resonate Agency LLC merges, is acquired, or undergoes a similar transition, your data may transfer to the successor entity. We'll notify you if this happens.
We will never sell your personal data to third parties for their own marketing purposes.
Data retention
How long we keep things:
Form submissions and email correspondence: retained as long as the relationship is active, plus up to 3 years for record-keeping. Inactive prospects who never engaged are pruned annually.
Analytics data (GA4): retained for 14 months by default, in accordance with GA4's data retention setting.
Microsoft Clarity recordings: retained for up to 13 months, per Clarity's default settings.
Server logs: retained for up to 30 days for security and operational diagnostics.
Client engagement data: retained for the duration of the engagement plus 7 years for tax, legal, and dispute-resolution purposes (matches Florida statute of limitations on contracts).
You can request earlier deletion of your data — see Section 07: Your rights.
Your rights
Depending on the privacy laws applicable to you (Florida residents, California residents under CCPA/CPRA, or otherwise), you have the following rights:
Right to access. You can ask us what personal data we hold about you, and we'll provide a copy.
Right to correct. If something is wrong, ask us to fix it.
Right to delete. You can ask us to delete your personal data, subject to legal retention requirements (e.g., we may need to retain client engagement records for tax purposes).
Right to opt out. You can opt out of receiving future communications from us at any time. Every email from us has an unsubscribe link.
Right to non-discrimination. We will not refuse service or charge different rates because you exercised a privacy right.
To exercise any of these rights, email hello@rsnt.agency with the subject line "Privacy Request." We'll verify your identity (typically by replying to the email address we have on file) and respond within 30 days, as required by US privacy laws.
Security
We take reasonable precautions to protect personal data, including HTTPS encryption across the Site, secure email infrastructure, access controls limiting who on our team can see what, and contractual confidentiality terms with all 1099 contractors who handle client data.
That said, no system is bulletproof. If we ever experience a data breach affecting your personal information, we will notify you within the timeframe required by applicable law (typically 30–45 days), describe what happened, and explain what we're doing about it.
Children's privacy
The Site and our services are intended for businesses and adults aged 18+. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal information, contact us at hello@rsnt.agency and we'll delete it.
Changes to this policy
We may update this Privacy Policy from time to time — typically when we add or remove third-party services, when laws change, or when we improve our internal data practices. When we do, we'll update the "Last updated" date at the top of this page.
For material changes — those that meaningfully affect your rights or how data is used — we'll provide notice via email (if you've given us one) and a banner on the Site for at least 14 days. We won't make material changes silently.
How to contact us
For privacy-related questions, requests under your rights above, or anything else covered by this policy:
Resonate Agency LLC
Email: hello@rsnt.agency · Subject: "Privacy Request"
Phone: +1 786 696 3876
Mailing: Available on request
We'll do our best to respond within a few business days, and within the 30-day window required by applicable US privacy laws for formal rights requests.
