Data Processing & Cookies

1) Roles

You act as data controller; Daemeon Strategy acts as data processor for personal data processed on your behalf to deliver outbound services.

2) Processing Instructions

We process personal data only on documented instructions you provide in the SOW, campaign briefs, or written approvals, and solely for the purposes of prospect research, sequencing, and reporting.

3) Security Measures

• Role-based access controls and least-privilege permissions.
• Encryption in transit (TLS) and secure provider storage for data at rest.
• Logging for system access and changes where supported by tooling.
• Regular cleanup of staging data and removal upon request or contract end.

4) Subprocessors

We use vetted subprocessors for enrichment, sequencing, deliverability, and analytics. A current list is available on request. We bind subprocessors to equivalent confidentiality and security obligations.

5) Data Subject Requests

We will promptly assist you in responding to access, correction, deletion, or objection requests. If we receive a request directly, we will notify you and not respond without your instruction unless legally required.

6) Incident Response

In the event of a confirmed personal-data breach, we will notify you without undue delay with details, impact assessment, and remediation steps.

7) Transfers

Cross-border transfers rely on appropriate safeguards (e.g., SCCs). You can request details of hosting regions and subprocessors involved in your engagement.

8) Cookies & Tracking

We use limited tracking pixels/cookies for deliverability and performance measurement in outbound campaigns. You may opt out; doing so may reduce reporting accuracy.

9) Retention & Deletion

Personal data processed on your behalf is retained only for the engagement duration and agreed reporting period, then deleted or returned upon request unless law requires longer retention.

10) Contact

Data protection questions? Email us at contact@daemeonstrategy.com or contact your account manager.