Last updated 21 September 2026

Privacy Policy

Digital Rescue works on websites that are down, slow, abandoned, or stuck. That work often means access to hosting, domains, CMS tools (including Webflow, Framer, and Squarespace), code, analytics, design files, and their credentials. This policy says what information we handle, why, and what we will not do with it.

This policy applies to getdigitalrescue.com and to work we do for you. The Terms of Service cover the engagement itself. If documents conflict, the order of control is in the Terms.

1. Who we are

Digital Rescue is a service of Look Loaded, Inc., 971 US Highway 202N #5554, Branchburg, NJ 08876. “Digital Rescue,” “we,” “us,” and “our” mean Look Loaded, Inc. Write to help@getdigitalrescue.com or call (917) 994-1495.

For information you give us about yourself (your name, your email, your company, a call, or a log from this website), we decide how that is used. We are the controller of that information. For information that already lives in your website, store, mailing list, or CMS, including your customers’, staff, or users’ data, you remain responsible for that data. We handle it only to do the job you hired us for.

2. What this policy covers

It covers:

Visitors to getdigitalrescue.com
People who contact us or request help
Clients and their authorized contacts
Access we are given to systems you control
Information those systems already contain

It does not cover other websites we may link to, or platforms we did not build (Webflow, Framer, Squarespace, Google, hosting companies, domain registrars, payment processors, and the like). Those services have their own policies.

3. Information we collect

3.1 You send it

When you write or hire us, we may receive:

Name, business name, role, email, phone, and billing name and address
Site URL, environment URLs, and a description of what is wrong
Screenshots, exports, Loom or video walkthroughs, tickets, and files
Login credentials, magic links, API keys, tokens, SSH keys, 2FA recovery material, and collaborator invites
Invoice amounts, due dates, and payment status. We accept Zelle, Venmo, PayPal, and other ordinary methods. Those companies process the payment. We may receive your name, handle or email, amount, date, and status. We do not receive or store complete payment-card numbers. We do not take Cash App. This site has no checkout

3.2 It is already in the system

Rescue work can expose whatever the site already holds: content, media, form submissions, customer records, order history, comments, employee accounts, analytics, cookies, pixels, and configuration. We do not go looking for that data for its own sake. If it’s there, we might see it. We treat it as confidential and use it only to assess, stabilize, fix, or hand the project back.

3.3 This website collects very little

We understand discretion.

Help is a mailto link to help@getdigitalrescue.com. This site has no contact form, checkout, video embeds, scheduling widget, or error-monitoring software. Fonts are served from this site, not from Google Fonts. A first-party script shows the header after you pass the first button. JSON-LD is structured data for search, not a tracker. We do not run a Facebook-style ad pixel. Google Analytics may set cookies, as the next paragraph says.

We use Google Analytics to see how this site is used: pages viewed, referrer, device, and general location. Google may set cookies and receive your IP address. Google’s own policy applies to what they do with that. We use the counts to run this site. We do not sell your information.

Whoever hosts or delivers this site may keep ordinary server or CDN logs: IP address, user agent, date and time, referring URL, and the page requested. That is for uptime, abuse prevention, and diagnosing this site, not for building a marketing profile. If a host or CDN later sets its own security cookie, we will update this policy.

3.4 We do not buy data about you

We do not purchase contact lists or append dossiers from data brokers. If someone refers you, we only get what they chose to pass along.

4. How we use information

We use it to:

Reply, quote, and decide whether we can take the work
Access the property, diagnose the failure, and do the rescue
Communicate about the job, including with people you tell us to include
Invoice, collect payment, and keep accounting records
Keep a record of what changed, in case of a later dispute or a needed rollback
Secure our systems and this website
See which pages on this site are used, so we can keep the site useful
Comply with law, a valid legal demand, or a claim

We use AI tools to help assess, write, debug, and repair. By default those tools may see ordinary code, copy, screenshots, error logs, and configuration for the agreed job. Unpublished incidents, incident reports, and proprietary or sensitive business files do not go in unless you authorize that in the statement of work or in writing. We do not put live passwords, keys, tokens, recovery codes, regulated data, or a customer list into a generative-AI system. We use accounts we control. We apply the no-train or short-retention setting the vendor offers on that account. We do not claim every tool is a zero-retention enterprise contract. We do not use a public free demo or a throwaway consumer account for your files. We do not train public AI models on your private project files. We do not use your project data, your customers’ data, or your credentials to market other people. We do not sell personal information. We do not share it for cross-context advertising. How we use AI on a paid job, including opt-out and what needs a written yes, is in the Terms.

5. Credentials and least access

Send the least access that still lets us work. Prefer a collaborator seat, a time-limited invite, a staging environment, or a password manager item you can revoke. Do not send production root credentials in a public form or an unencrypted channel if a safer path exists.

We use credentials only for the agreed work. We do not use them to browse your mail, files, or customers beyond what the job requires. When the engagement ends, or sooner if you ask, we delete or return credentials we no longer need and leave seats you can close. You will rotate passwords, keys, tokens, and recovery codes we have seen, at handoff. That is your duty. The Terms say the same.

If we must store a secret for an active job, we keep it in a restricted place, not in a shared spreadsheet and not in the public internet. We are not a password manager for you after the job.

We do not help you break into other people’s devices, accounts, or websites. We do not do illegal work. We do not help with a locked-out login or a lost password unless you have the right to that access.

6. Other people’s data

If your site holds information about your customers, patients, students, staff, or users, you represent that you have the right to give us access and that our work will not put you in breach of your own privacy notices, contracts, or the law. That is your obligation. If you cannot say that, do not hand over the keys.

We do not become the owner of that data. We do not use it for our own purposes. If a person whose data sits in your system wants it deleted or exported, that request goes to you first. We will help if the job still gives us access and you ask us to. How we decide whether a data-processing agreement is required, and when EU or UK processor work has to wait, is in the Terms.

7. When we share information

We share information only:

With people you authorize (your developer, your partner, your co-founder)
With personnel and vetted contractors who need the information to do the job and are bound to keep it confidential and use it only for that purpose
With processors we use to run the practice, listed below, under an obligation to keep it confidential and use it only for that purpose
If the law, a court, or a regulator requires it, or to defend a legal claim. If the law permits, we will give you advance notice of a compelled disclosure
If we must protect someone from serious immediate harm
If Look Loaded, Inc. is sold, merged, or transfers this practice, in which case client records may move with the business to the successor, who will be bound to handle them as this policy requires or to give notice of a change

Processors are identified by category in this Privacy Policy. Current vendor names are available upon request, except where we name them here because they sit on this site or on how we get paid. The categories are: hosting and delivery of getdigitalrescue.com; email at help@getdigitalrescue.com; site analytics (Google Analytics); payment collection (Zelle, Venmo, PayPal, and similar ordinary methods, not Cash App); a password manager; and generative-AI writing or coding assistants. If that set changes in a way that matters to a live job, we will update this page and tell you.

We do not sell personal information. We do not rent it. We do not trade it for ads.

8. How long we keep it

These are the defaults. A signed statement of work or a legal hold can set a different period. If you ask us to delete something, we will delete it subject to applicable legal, security, contractual, accounting, and dispute-preservation requirements.

Credentials: deleted or returned at handoff, and in any case within 14 days after the job ends
Project working files (notes, screenshots, copies we made to do the work): 12 months after handoff, then deleted
Change records, quotes, and the contract file: 2 years after the job ends (the one-year claim window in the Terms, plus a buffer)
Invoices and tax records: as long as tax and accounting rules require, usually 7 years
Site logs for getdigitalrescue.com: 90 days, unless we need them for an incident
Site analytics: kept by Google under their retention, for how this site is used
Incident evidence: until the investigation and any related claim are over, then deleted except what a legal hold or tax rule requires

9. Security

We use reasonable administrative, technical, and physical safeguards for the kind of work this is: restricted access, device security, and care with secrets. No transmission or storage is perfectly safe. An inherited site may already be compromised when we arrive. We are not warranting your host, your CMS, or the internet.

If we confirm a security incident affecting your data, your credentials, or systems accessed through credentials you gave us for the job, or we confirm unauthorized access of that kind, we will notify you without undue delay, and where practicable within 24 hours after that confirmation. We will tell you what we know so you can meet your own duties. The clock and the trigger are in the Terms. If the breach is only in a system you own and we only had access, we still tell you once we confirm it. We do not keep a 72-hour window for ourselves.

10. International use

We may handle information in the United States or wherever we and our processors operate. If you write or call us from another country, we still handle that message here, as the controller of what you sent us. A site visitor from overseas is not, by itself, a GDPR processor job.

We do not target the EU or UK as a market. This policy is not a GDPR Article 13 notice and is not a claim that we are GDPR-compliant. We do not name a legal basis for each use, an international-transfer tool, or an EU or UK representative. If we later market to or take processor work in those places, we will add what that law requires. Until then, a job that needs us to process EU or UK personal data as your processor waits on a written data-processing addendum, as the Terms say.

11. Your rights

Depending on where you live and whether the law that applies actually covers us, you may have the right to ask us to confirm whether we hold personal information about you, to see it, to correct it, to delete it, to restrict or object to certain uses, or to take a copy in a portable form. You may withdraw consent where consent was the basis. These are not a promise that every GDPR-style right applies to every person.

If you are a California resident, we do not sell or share personal information as those words are used in the CCPA/CPRA. You may request to know, delete, or correct, and we will not deny you service for exercising those rights.

Send the request to help@getdigitalrescue.com with the subject line Privacy Request. We keep a record of those requests. We may need to verify who you are before we act. An authorized agent may send a request if the law allows it; we may still need to verify you. You may withdraw a request by writing to us. We will answer in the time that law sets. If no such time applies, we will answer in a reasonable time. We may refuse a request the law lets us refuse, for example if it would break a legal hold, expose someone else, or make us delete the only record of a paid job still in dispute.

If we refuse and the law gives you an appeal, write back and ask us to look again. If you still disagree, you may contact your state attorney general or, if you are in the EU or UK, your data-protection authority.

Requests about data inside your own product or website should come from you as the operator, not from us guessing who your users are.

12. Children

This website and our ordinary work are for adults. We do not knowingly collect personal information directly from children. We will handle a client system that contains children’s data only when a statement of work expressly authorizes it and any required addendum or consent is in place. If we collected a child’s information on this site by mistake, tell us and we will delete it. The Terms say the same.

13. Do Not Track and Global Privacy Control

This site does not change behavior in response to a legacy Do Not Track signal. Google Analytics still runs. We do not sell your information. A Global Privacy Control signal does not turn Google Analytics off.

14. Changes

We may update this policy to reflect changes in our practices, vendors, or legal duties. The date at the top will change. We will keep prior versions and send you one if you ask. We will not materially expand how we use information we already collected without giving you notice, and without consent when the law requires it. A live job does not stay frozen on an old privacy notice. The Terms for that job stay on the version that applied when the job started, as those Terms say.

15. Contact

Questions, requests, and complaints: help@getdigitalrescue.com, (917) 994-1495, or Look Loaded, Inc., 971 US Highway 202N #5554, Branchburg, NJ 08876.