Privacy Policy

This website is operated by Nyx Digital Innovations Ltd., doing business as The Donut Agency (“The Donut Agency,” “we,” “us,” or “our”). Our registered address is 1110 — 5 Brockley Dr., Scarborough, ON, Canada. You can reach us at khaled@turningtraffic.net. We also operate Email Donut (emaildonut.com), a retention analytics and email marketing platform. The Donut Agency and Email Donut are two brands of the same company. This policy covers both, and Section 5 explains when information moves between them.

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what choices you have. It applies to visitors to thedonutagency.com (the “Site”) and to people who interact with us by booking a call, submitting a form, or otherwise contacting us.

We collect personal information in three ways:

• Information you give us — e.g. your name, email, company, phone number, and meeting time when you book a call with us via Calendly or send us an email.
• Information collected automatically — IP address, browser type, device type, pages viewed, referring URL, and approximate location. We collect this through cookies and similar technologies (see Section 6).
• Information from third parties — e.g. data from Calendly, Meta (Facebook), Google, and Klaviyo that helps us measure ad performance and follow up with you after a meeting is booked.

We use your personal information to:

• Schedule and prepare for calls or audits you have requested;
• Send transactional emails (booking confirmations, calendar invites, follow-ups about a meeting);
• Send marketing emails about retention strategy, audits, and the services The Donut Agency offers (you can unsubscribe at any time);
• Measure how our website and ads perform (e.g. via Meta Pixel, Meta Conversions API, Google Analytics);
• Detect, prevent, and respond to fraud, abuse, security issues, and legal claims;
• Comply with applicable laws.
• Analyse your marketing and store data to produce an audit or report you have asked us for (see Section 3a).

Marketing communications and your consent. When you book a call or submit a form, you give us your email so we can follow up about your request, and you agree to receive marketing emails from us about our retention services. We add these leads to our email marketing platform, Klaviyo, for this purpose. Every marketing email includes an unsubscribe link and our postal address, and you can opt out at any time — we will stop promptly. We do not send marketing text messages unless you separately and expressly opt in to receive them.

If you ask us for an audit, a report, or access to our analytics platform, you are asking us to analyse data from the accounts you connect, such as Klaviyo and your ecommerce store. That data includes order records, customer contact records, campaign and flow performance, and product information.

We use third-party AI services as part of that analysis. Data from your connected accounts may be sent to AI providers, including Anthropic and OpenAI, so they can help summarise findings, draft recommendations, and write the copy in your report. These providers act as our service providers. They process the data to perform the service for us, under contract, and we do not permit them to use it to train their models.

We ask you to agree to this separately, with a tick box, before you connect an account for an audit. If you would rather we did not use AI services on your data, email khaled@turningtraffic.net and we will tell you what we can still do for you without them. You can disconnect a connected account at any time, which stops any further analysis.

If you are in the EEA or UK, we rely on the following legal bases under GDPR: (a) contract — to perform a service you've asked for, like a booked call; (b) legitimate interests — to run and improve our business, measure marketing, and prevent fraud, balanced against your rights; (c) consent — for cookies and marketing email; and (d) legal obligation — when required to keep records or respond to lawful requests.

We do not sell your personal information for money. We share it with:

• Service providers who help us operate the Site and our business (e.g. Vercel for hosting, Calendly for scheduling, Klaviyo for email, Google and Meta for analytics and advertising, and AI providers including Anthropic and OpenAI for the analysis described in Section 3a). These providers may only use your data to perform services for us.
• Klaviyo, Inc. (partner referral) — we participate in Klaviyo's partner program. With your consent (given when you book a call), we share your name and email with Klaviyo so they can tell you about their products. For that outreach Klaviyo acts as an independent business, not our service provider. You can opt out at any time by emailing khaled@turningtraffic.net.
• Our affiliated products and brands — we also operate Email Donut (emaildonut.com), a retention analytics and email marketing platform. The Donut Agency and Email Donut are two brands of the same company, run on separate systems. Where you have asked us for a resource, a guide, an audit, or an account, we may move your contact details and the record of your request between those systems so we can deliver what you asked for, give you access to the platform, and send you relevant follow-up. This is an internal transfer within our own company rather than a disclosure to a third party, and your information is handled under this policy throughout. You can unsubscribe from either brand at any time.
• Professional advisors (lawyers, accountants, insurers) under a duty of confidentiality, when reasonably necessary.
• Authorities, if required by law, court order, or to protect our rights or the safety of others.
• Successors in connection with a merger, acquisition, financing, or sale of all or part of our business.

We use cookies, pixels, and similar technologies to make the Site work, measure traffic, and run ads. This includes the Meta Pixel, Meta Conversions API, Klaviyo onsite tracking, and standard first-party analytics. Most browsers let you block or delete cookies in their settings.

We keep personal information only as long as needed for the purposes set out above, or as required by law. Booking and contact records are typically kept for the duration of our relationship plus a reasonable period after, for follow-up, accounting, and legal compliance.

We are based in Canada. Our service providers may process your data in the United States, the European Union, or elsewhere. When data leaves your country, we rely on appropriate safeguards such as standard contractual clauses where applicable.

Depending on where you live, you may have the right to access, correct, delete, or port your personal information; to object to or restrict certain processing; and to withdraw consent. To exercise any of these rights, email khaled@turningtraffic.net. We will respond within the timeframes required by applicable law.

Canadian residents: we are subject to PIPEDA and applicable provincial privacy laws. EEA/UK: you may complain to your local data protection authority. California: you have rights under the CCPA/CPRA (where applicable) including the right to know, delete, and opt out of the “sale” or “sharing” of personal information. We do not sell your information for money; we do share booked-call contact details with our partner Klaviyo (see Section 5), and you can opt out of that sharing anytime by emailing khaled@turningtraffic.net.

The Site is not directed to children under 13 (or 16 in the EEA/UK), and we do not knowingly collect personal information from them.

We use reasonable administrative, technical, and physical safeguards to protect personal information. No system is 100% secure, and we cannot guarantee absolute security of data transmitted over the internet.

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new “Last updated” date.

Questions or requests? Contact us at khaled@turningtraffic.net or:
Nyx Digital Innovations Ltd. dba The Donut Agency
1110 — 5 Brockley Dr., Scarborough, ON, Canada