Privacy Policy

Last updated: June 23, 2026

1. Introduction

bCode LLC (“bCode,” “we,” “us,” or “our”) is a digital marketing and advertising agency. We respect your privacy and are committed to protecting it through compliance with this Privacy Policy (this “Policy”).

This Policy explains how we collect, use, share, and protect information in connection with: (a) our website at www.bcode.io (the “Website”); and (b) the advertising, analytics, audience-targeting, and messaging services we provide to our business and organizational clients (collectively, the “Services”).

Two different roles. Depending on the activity, bCode acts in one of two capacities:

  • As a “business” / “controller” for information we collect about visitors to our Website, prospects, newsletter subscribers, and our own marketing and operations. We decide how and why that information is used.
  • As a “service provider” / “processor” when we handle information on behalf of, and under the instructions of, our clients — for example, when we run advertising campaigns, manage analytics and conversion tracking on a client’s web properties, build advertising audiences, or send text messages for a client. In those cases the client is the controller, our handling is governed by our contract with that client, and that client’s own privacy policy also applies. If you are an end user of one of our clients, please review that client’s privacy policy and direct rights requests to them; we will support them in responding.

This Policy describes both roles so you have a complete picture of bCode’s data practices.

2. Information We Collect

2.1 Information you provide directly

  • Contact and account information — name, business name, postal address, email address, telephone number, and similar identifiers, when you contact us, request a proposal, subscribe to our newsletter, or become a client.
  • Communications — the content of messages, emails, and form submissions you send us, and information you provide during sales and onboarding conversations.
  • Billing information — information needed for billing and collection in connection with our contracts. Payment card details are handled by our payment processors, not stored by bCode.

2.2 Information collected automatically from our Website

When you visit the Website, we and our analytics and tag-management providers automatically collect:

  • IP address, approximate location derived from IP, device and browser type, operating system, and language;
  • pages viewed, referring/exit pages, clickstream, and dates/times of visits; and
  • information collected through cookies, pixels, web beacons, and similar tracking technologies (see Section 4). Our Website uses Google Tag Manager and Google Analytics.

2.3 Information we process to deliver advertising and analytics Services (service-provider role)

To plan, run, and measure advertising for our clients, we process:

  • Campaign and performance data from advertising platforms — including Google, Meta, LinkedIn, Microsoft (Bing), and TikTok — such as impressions, clicks, spend, conversions, reach, and keyword performance.
  • Website and conversion analytics from our clients’ web properties, including Google Analytics (GA4) sessions, users, events, and e-commerce/transaction data, collected via analytics tags, conversion pixels, and platform SDKs that we configure on client properties.
  • Advertising identifiers and audience data — including cookie IDs, advertising/platform identifiers, hashed customer lists (“Customer Match”–type audiences), and conversion events used to build, target, measure, and optimize campaigns.

2.4 Location and device data for audience targeting

For certain clients — primarily entertainment venues — we operate an audience-delivery service that builds advertising audiences from mobile location data. In connection with this service we process:

  • Mobile advertising identifiers (MAIDs / device IDs) — the resettable advertising IDs assigned by mobile operating systems;
  • Precise geolocation signals associated with those identifiers (latitude/longitude with accuracy metadata and timestamps), which we obtain from third-party location-data suppliers; and
  • Derived audience attributes — for example, that a device was observed at a particular venue, hotel, or point of interest within a time window, used to assemble co-visitation and visitation-based audience segments.

We use this data to create audience segments that are delivered to advertising platforms (for example, as Customer Match–style files) so our clients can reach relevant audiences. We do not use this data to identify you by name, and we apply filters (such as accuracy and visit-duration thresholds) intended to exclude employees and reduce precision to a venue or business level. Mobile advertising identifiers are considered personal information in some jurisdictions; see your rights in Section 9 and opt-out options in Section 6.

2.5 Text-messaging (SMS) program data

For clients who use our texting Services (including political texting), we process:

  • telephone numbers and associated contact records provided by the client or sourced on the client’s behalf;
  • consent and opt-out status; and
  • message content, delivery status, and replies (including STOP, HELP, and similar keywords).

We send messages only as directed by the client responsible for the program. Standard message and data rates may apply. You can opt out of any program at any time by replying STOP; reply HELP for help. Consent to receive messages is not a condition of any purchase. See Section 7.

2.6 Meeting and business-operations data

We use a third-party meeting-assistant tool to record, transcribe, and summarize internal and client meetings for note-taking and account-management purposes. These records may include participants’ names, voices, and the content of business discussions. Where required, we obtain consent to record.

2.7 Information from third parties

We receive information from advertising and analytics platforms, our clients, location-data suppliers, data and list providers, and publicly available sources, as described above.

3. How We Use Information

We use the information we collect to:

  • operate, secure, and improve our Website and Services;
  • respond to inquiries, provide proposals, and carry out and bill for our contracts;
  • plan, deliver, measure, and optimize advertising campaigns and analytics for our clients;
  • build, refine, and deliver advertising audiences (including location-based audiences) to advertising platforms on behalf of clients;
  • send marketing communications and newsletters you have requested (you can unsubscribe at any time) and operate client text-messaging programs;
  • conduct internal analytics, reporting, account management, and record-keeping;
  • comply with legal obligations and enforce our agreements; and
  • for any other purpose disclosed at the time you provide the information or with your consent.

When we act as a service provider/processor, we use client data only to provide the Services to that client and as permitted by our contract and applicable law — not for our own independent purposes.

4. Cookies and Tracking Technologies

Our Website and the client properties we manage use cookies, pixels/tags, web beacons, SDKs, and similar technologies to enable functionality, measure performance, and support advertising. These include first-party analytics (Google Analytics / GA4), tag management (Google Tag Manager), and advertising/conversion pixels from platforms such as Google, Meta, LinkedIn, Microsoft (Bing), and TikTok.

You can control cookies through your browser settings and, where available, through the cookie/consent preferences shown on the Website. Blocking some cookies may affect how the Website functions. For advertising opt-outs, see Section 6.

5. How We Share and Disclose Information

We share information in the following ways:

  • Advertising platforms. To run and measure campaigns and deliver audiences, we share advertising identifiers, hashed audience lists, conversion data, and related information with platforms including Google, Meta, LinkedIn, Microsoft (Bing), and TikTok. These platforms process the data under their own privacy policies and terms.
  • Analytics providers. We share and process website and conversion data with analytics providers such as Google Analytics (GA4).
  • Service providers and subprocessors. We use vendors who process information on our behalf under contract, including cloud hosting and storage (Amazon Web Services), geocoding and mapping services (Google Maps/Places), our text-messaging delivery providers, our meeting-assistant provider, location-data suppliers, and billing/payment processors. They are permitted to use the information only to provide services to us.
  • Our clients. When we process data as a service provider, we share outputs (reports, audiences, analytics) with the client for whom the work is performed.
  • Legal and safety. We may disclose information to comply with law, regulation, legal process, or government request; to enforce our agreements; or to protect the rights, property, or safety of bCode, our clients, or others.
  • Business transfers. We may disclose or transfer information in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our assets.
  • With your consent, or at your direction.

We may also share aggregated or de-identified information that cannot reasonably be used to identify you.

“Sale” or “sharing” of personal information. Some advertising and audience-targeting activities described in this Policy — including delivering advertising audiences and using advertising cookies and identifiers — may be considered a “sale” or “sharing” of personal information, or “targeted/cross-context behavioral advertising,” under certain U.S. state privacy laws. We do not exchange personal information for money. You can opt out of these activities as described in Sections 6 and 9.

6. Advertising and Audience Targeting Choices

You have several ways to limit interest-based advertising and audience targeting:

  • Mobile advertising ID. You can reset your device’s advertising identifier or enable “Limit Ad Tracking” / “Opt out of Ads Personalization” in your iOS or Android settings. Resetting or limiting the identifier reduces its use for audience targeting.
  • Platform controls. Google, Meta, LinkedIn, Microsoft, and TikTok each offer ad-personalization and privacy settings within their account or device controls.
  • Industry opt-outs. You can use the Digital Advertising Alliance (optout.aboutads.info / youradchoices.com) and the Network Advertising Initiative (optout.networkadvertising.org) browser-based opt-out tools.
  • Browser signals. Where required by law, we honor recognized opt-out preference signals such as Global Privacy Control (GPC).
  • Cookies. Manage cookies through your browser and the Website’s consent preferences.

7. Text-Messaging Program Terms

If you participate in a text-messaging program operated through bCode on behalf of a client:

  • messages are sent only to recipients who have provided the consent required for that program, or as otherwise permitted by law;
  • message frequency varies by program; message and data rates may apply;
  • reply STOP to unsubscribe at any time, and HELP for assistance;
  • consent to receive messages is not a condition of purchase; and
  • we handle SMS data in accordance with applicable law (including the Telephone Consumer Protection Act) and carrier requirements. Mobile opt-in data is not shared with third parties for their own marketing.

8. Data Retention

We retain personal information for as long as needed to fulfill the purposes described in this Policy, to provide the Services to our clients, and to meet legal, accounting, tax, and contractual requirements, after which we delete or de-identify it. Location and audience data used for targeting is retained on a rolling basis tied to campaign lookback windows and refreshed or expired according to our pipelines and client agreements. When we act as a service provider, retention is also governed by our client contracts and the client’s instructions.

9. Your Privacy Rights

9.1 California (CCPA/CPRA)

If you are a California resident, you may have the right to: know and access the personal information we collect; request deletion; request correction; opt out of the “sale” or “sharing” of personal information and of targeted advertising; limit the use of sensitive personal information (which, for our audience-targeting Services, can include precise geolocation); and not receive discriminatory treatment for exercising your rights. You may submit requests using the contact details in Section 15, and you may use an authorized agent. We will verify your request before responding.

To opt out of advertising-related “sale”/”sharing,” use the controls in Section 6, enable Global Privacy Control, or contact us.

9.2 EU / UK (GDPR)

If you are in the European Economic Area or the United Kingdom, you may have the right to access, rectify, erase, restrict, or object to processing of your personal data, to data portability, and to withdraw consent. Where we act as a controller, our legal bases are: performance of a contract; our legitimate interests in operating and marketing our business (balanced against your rights); compliance with legal obligations; and your consent (for example, for certain cookies, location-based targeting, and marketing). Where we process data on behalf of a client, that client is the controller and you should direct requests to them; we will assist them as their processor. You also have the right to lodge a complaint with a supervisory authority.

9.3 How to exercise your rights

Contact us using Section 15. If your request concerns data we process for one of our clients (for example, advertising, audience, or texting data), we will refer the request to that client and support their response, as we are the service provider and they are the controller.

10. International Data Transfers

We are based in the United States and our service providers may process information in the United States and other countries. Where we transfer personal data from the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses where required.

11. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against accidental loss and unauthorized access, use, alteration, or disclosure, including access controls, encryption in transit, read-only and audited database access for reporting, and use of reputable cloud infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children’s Privacy

Our Website and Services are directed to businesses and are not intended for children under 16. We do not knowingly collect personal information from children. We do not knowingly build advertising audiences that target children. If you believe a child has provided us personal information, please contact us and we will delete it.

13. Third-Party Links

Our Website and reports may link to third-party sites and platforms that we do not control. This Policy does not apply to those sites; please review their privacy policies.

14. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will post the updated Policy here with a new “Last updated” date and, where appropriate, provide additional notice on the Website home page.

15. Contact Us

To ask questions, comment on this Policy, or exercise your privacy rights, contact us at:

bCode LLC
150 S Pine Island Rd STE 300
Plantation, FL 33324
Email: support@bcode.io
Phone: (517) 881-6416