Legal
Privacy policy
Last updated October 26, 2026 · Sorted Agency LLC
- We do not sell your personal data.
- Our ad pixels count as "sharing" under California law. Decline on the banner, use Your Privacy Choices, or send a Global Privacy Control signal, and they stay off.
- In California, Florida and several other states, and in the UK and EU, ad pixels stay off until you accept.
- Ask us to delete, copy or correct your data on one form. We confirm within 10 business days and finish within 45 days.
A plain-English summary. The full text below is what applies.
1. Who we are
Sorted Agency LLC ("Sorted Agency", "we", "us"), 131 Continental Dr, Suite 305, Newark, DE 19713, USA, runs sorted.agency and provides growth services to ecommerce brands and agencies. Our team works from the United States and India. In India we work through our affiliate Govinda Solutions Private Limited, Pune, which handles data for us under this policy. Questions: hello@sorted.agency.
2. What we collect
| Category | Examples | Source |
|---|---|---|
| Identifiers and contact details | Name, email, phone, company, IP address | You (forms, bookings, sign-ups), your device |
| Business information | Store URL, revenue and ad spend range, role, what you need help with, and the public pages of a store you ask us to audit or grade | You |
| Commercial information | Purchases of our products (for example Sorted Studio, Launch or BFCM builds), proposals you accept, onboarding answers and billing details | You, Stripe, Razorpay |
| Calls | Recordings, transcripts and summaries of calls you book with us | You, Fireflies (our call recorder) |
| Job applications | Name, email, role, portfolio or LinkedIn link and your note | You (careers form) |
| Internet activity | Pages viewed, clicks, referrer, campaign tags, device and browser, and random first-party visitor and session ids | Your device, our first-party analytics, and with your permission our ad and analytics partners |
| Approximate location | Country, state and city derived from your IP address | Your device |
| Business contact data for outreach | Work email, name, role and company of people at ecommerce businesses | Public websites and business data providers (see section 5) |
We do not collect sensitive personal information as defined by California law (such as government ID, financial account numbers, precise geolocation or health data), and we do not use automated decision-making to make decisions with legal or similarly significant effects. We sort enquiries by the revenue range you give us so the right person replies.
3. How we use it
- Reply to enquiries, run audits you request, book and hold calls
- Deliver services and products you buy, and send related emails
- Send our newsletter and marketing emails, which you can stop at any time
- Measure our ads and improve the site (with your permission where required)
- Draft replies and summaries with AI tools under our control, reviewed by our team
- Record and transcribe calls you book, so the notes are accurate (see below)
- Review job applications
- Keep the site secure, prevent fraud and meet legal obligations
Call recording. Calls booked through this site may be recorded and transcribed by Fireflies, and an AI summary goes into our notes. If you do not want a call recorded, say so at the start of the call or reply to your booking email, and we turn recording off.
4. Cookies, pixels and sharing
Essential and preference cookies keep the site working and remember your choices. First-party analytics record visits to our own database so we can see which pages help people. Analytics and ad tags (Google Tag Manager, Google Analytics, Google Ads, LinkedIn Insight and the Meta Pixel) let those companies see that you visited and what you did, which California law calls "sharing" for cross-context behavioral advertising. When you send a form, we may also send a hashed copy of your email to Meta to measure our ads.
| Name, kept for | What it does |
|---|---|
sa_geosa_rgn1 hour | Country and state from your IP address, so we apply the right privacy rules, prices and currency |
sa_cookie_consentsa_ads1 year, or until you clear it | Your Accept or Decline choice, so the site and our server follow it |
sorted_sid30 minutes | A random session id for our first-party analytics |
sorted_vid1 year | A random visitor id, so first-party analytics can tell a return visit from a new one. Never holds your name or email |
sorted_lidsa_personalize90 days (your on or off choice stays until you clear it) | A signed id set when you arrive from our email or send a form, so the site can show your audit or call. You can turn it off on Your Privacy Choices |
- In California, Florida, Pennsylvania, Washington, Massachusetts, Maryland and Illinois, and in the UK, EU, EEA and Switzerland: analytics and ad tags load only after you click Accept.
- Everywhere else: they load unless you click Decline.
- Global Privacy Control: if your browser sends a GPC signal, we treat it as an opt-out of sale and sharing. Tags stay off, nothing is sent to ad platforms from our server, personalization stays off, and Your Privacy Choices shows "Opt-out request honored".
- Change your mind at any time on Your Privacy Choices.
We do not sell personal data, and we have not sold it in the past 12 months. We do not knowingly sell or share the data of anyone under 16.
5. Business outreach
We contact people at ecommerce businesses about our services. For this we use work contact details from public websites and business data providers, such as store directories (Store Leads) and email finding and verification services (Hunter), we may message people on LinkedIn, and we may write a short audit of a store's public pages. Every outreach email has an unsubscribe link. If you unsubscribe or ask us to delete your data, we add your address to a permanent suppression list so you are not contacted again.
6. Who we share it with
Service providers that process data for us under contract: Vercel (hosting), Supabase and Amazon Web Services (database, email via Amazon SES), Google (calendar and video calls, analytics, ads), Meta and LinkedIn (ads, with your permission), Stripe (payments) and Razorpay (payments in India), SendFox and Beehiiv (email lists and newsletter), Fireflies (call recording and transcription), Slack (internal alerts), business data and email verification providers (Store Leads, Hunter), and AI providers (Anthropic) for drafting, audits and summaries. If you message us on WhatsApp, Meta handles that message under its own terms. We may also disclose data to comply with law or protect our rights, or as part of a sale or merger of our business.
7. Storage and security
Our database runs on Amazon Web Services in the Mumbai (ap-south-1) region, and our team works from the United States and India, so your data may be processed outside your country. Connections are encrypted in transit, and access is limited to the people who need it. No system is perfectly secure, so if we learn of a breach that affects you, we will tell you as the law requires. More on how we handle client accounts: Security and data.
8. How long we keep it
- Enquiries and client contacts: 24 months after our last interaction
- Newsletter and marketing lists: until you unsubscribe
- First-party analytics: 24 months. Google Analytics: 14 months
- Outreach contacts: 24 months, or until you opt out (suppressed addresses are kept so we never contact you again)
- Purchase records: as long as tax and accounting law requires
- Privacy requests: 24 months
9. Your rights
Wherever you live, you can ask us to tell you what we hold about you and give you a copy, correct it, delete it, stop marketing to you, and stop selling or sharing it. Use the request form or email hello@sorted.agency. We confirm within 10 business days and complete within 45 days (we may extend once by up to 45 more days if we tell you why). A copy can cover data back to January 1, 2022, or a period you choose. We may ask you to confirm your email so we do not hand data to the wrong person. An authorized agent can make a request for you with your signed permission. We will not deny you service, charge you more or treat you differently for using these rights.
10. California
California residents have the rights in section 9 under the California Consumer Privacy Act as amended by the CPRA: to know the categories and specific pieces of personal information we collect, use and disclose; to delete; to correct; to opt out of the sale or sharing of personal information; and to limit the use of sensitive personal information (we do not use sensitive personal information). The categories we collect, their sources, purposes and retention are in sections 2 to 8. In the last 12 months we disclosed identifiers, internet activity and approximate location to the ad and analytics partners listed in section 4, and every category in section 2 to the service providers and contractors in section 6, for the business purposes in section 3. Use the Your Privacy Choices link at the bottom of every page, or a GPC signal, to opt out. Under California's "Shine the Light" law, we do not share personal information with third parties for their own direct marketing.
11. Florida
Florida residents can use every right in section 9. Our analytics and ad tags stay off for visitors in Florida until they click Accept, and we do not use live chat on this site. If you call or text us, or we text you, we only do so with your consent and you can reply STOP at any time.
12. Other US states
Residents of states with consumer privacy laws (including Colorado, Connecticut, Virginia, Texas, Oregon, Utah, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island) have the rights in section 9. We do not sell personal data. We do process it for targeted advertising through the ad partners in section 4, and you can opt out as described there, including with a Global Privacy Control signal. If we decline your request, you can appeal by emailing hello@sorted.agency with the subject "Privacy appeal". We reply within the time your state law sets, and if we still decline, you can contact your state attorney general.
13. UK, EU and elsewhere
If you are in the UK, EU or EEA, we process your data to reply to you and provide services you ask for (contract), to market our services to businesses and keep the site secure (legitimate interests), with your consent for analytics and ad cookies, and to meet legal obligations. You can also object to processing and complain to your local data protection authority. You can complain to us first at hello@sorted.agency: we acknowledge complaints within 30 days and tell you how they are resolved.
India. Under the Digital Personal Data Protection Act, 2023, you can ask for a summary of the data we hold and who we shared it with, ask us to correct, complete, update or erase it, withdraw consent as easily as you gave it, nominate someone to act for you, and raise a grievance. Send these to hello@sorted.agency or use the request form. If you are not satisfied with our answer, you can go to the Data Protection Board of India.
14. Children
This site and our services are for businesses and adults. We do not knowingly collect data from anyone under 18. If you believe we have, contact us and we will delete it.
15. Changes and contact
We update this policy when our practices or the law change, and change the date at the top. For anything privacy related: Sorted Agency LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, USA, hello@sorted.agency.