Privacy Policy

1. Who We Are

MOSO ("MOSO," "we," "us," or "our") is a design and technology studio based in New Orleans, Louisiana, USA. We operate the website at moso.marketing and provide services including brand strategy, web design, web development, digital marketing, and business automation.

For privacy inquiries, contact us at: info@moso.marketing

2. Information We Collect

Information You Provide Directly

Contact form submissions: Your name, email address, and message when you fill out a contact form on our website.
Free audit requests: Your name, email address, and website URL when you request a free SEO/AEO audit.
Client project communication: Information exchanged during project discovery, proposals, and ongoing work (emails, calls, shared documents).
Newsletter signups: Your email address if you subscribe to MOSO communications.

Information Collected Automatically

Usage data: Pages visited, time on site, referral sources, browser type, operating system, and device type — collected via analytics tools.
IP address: Collected for security and analytics purposes. Not used to identify individuals.
Cookies: Small files placed on your device to support site functionality and analytics. See Section 7 for details.

Information We Do Not Collect

We do not collect payment card details (processed by third-party payment processors), government identification numbers, or sensitive personal categories (health, religion, ethnicity) unless you voluntarily provide them in project context.

3. How We Use Your Information

We use the information we collect for the following purposes:

To respond to inquiries and provide the services you request
To deliver free audits and report results to the email address you provide
To communicate about projects, proposals, and ongoing work
To send newsletters or studio updates (only with your consent)
To analyze site performance and improve user experience
To comply with legal obligations and protect against fraud or abuse

We do not use your personal information for automated decision-making or profiling, sell your data to third parties, or share your data with advertisers.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) or United Kingdom, we process personal data under the following legal bases:

Contractual necessity: Processing required to provide services you have requested or contracted
Legitimate interests: Analytics, site improvement, and responding to inquiries — where these interests do not override your rights
Consent: Newsletter subscriptions and non-essential cookies — where you have opted in
Legal obligation: Compliance with applicable laws

5. Data Sharing and Third Parties

We share personal data only in the following circumstances:

Service providers: Trusted tools we use to operate our business (email delivery via Resend, analytics via privacy-respecting tools, project management platforms). These providers process data only on our behalf and under data processing agreements.
Legal requirements: When required by law, court order, or to protect the rights and safety of MOSO, our clients, or the public.
Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you of any such change.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy:

Contact form submissions: Retained for up to 2 years, or as long as a client relationship is active
Free audit requests: Email address retained for up to 12 months for follow-up unless you unsubscribe
Client project data: Retained for the duration of the project plus 5 years for legal and business record purposes
Analytics data: Aggregated, anonymized data may be retained indefinitely

7. Cookies

Our website uses cookies to support functionality and understand how visitors use the site. Types of cookies we use:

Essential cookies: Required for the site to function. Cannot be disabled.
Analytics cookies: Help us understand site usage and improve the experience. You can opt out via browser settings or our cookie preferences.
Preference cookies: Remember your choices (e.g., language, layout). Optional.

You can control cookies through your browser settings. Disabling non-essential cookies will not affect your ability to use the site.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you
Correction: Request that inaccurate or incomplete data be corrected
Deletion: Request that your personal data be deleted ("right to be forgotten")
Portability: Receive your data in a structured, machine-readable format
Objection: Object to processing based on legitimate interests
Withdrawal of consent: Withdraw consent at any time where processing is based on consent (e.g., unsubscribe from emails)
CCPA rights (California residents): Right to know, delete, and opt out of sale of personal information. MOSO does not sell personal information.

To exercise any of these rights, contact us at info@moso.marketing. We will respond within 30 days.

9. Data Security

We implement reasonable technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. These include encrypted data transmission (HTTPS), access controls, and regular security reviews of third-party tools.

No system is completely secure. In the event of a data breach affecting your rights and freedoms, we will notify affected individuals and relevant authorities as required by law.

10. International Data Transfers

MOSO is based in the United States. If you are located in the EEA, UK, or other regions with data protection laws, please be aware that your data may be transferred to and processed in the US. We rely on standard contractual clauses and other appropriate safeguards where required.

11. Children's Privacy

Our website and services are not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.