How we protect your data

This page explains how Run LLC, doing business as Run Digital and RunLeadGen, protects the information you and your clients entrust to us. It covers our own systems and the way we handle client accounts.

1. Protecting your data

• In transit. Every page on rundigital.com is served over HTTPS, and sensitive information such as login credentials and payment details travels over TLS.
• Payment details. Card data is handled by our payment processor. We do not store full card numbers on our systems, and staff cannot retrieve them.
• At rest. Client data held in our CRM and connected platforms is encrypted at rest by those providers.

2. Systems and network security

• Our website sits behind Cloudflare, which filters malicious traffic and absorbs denial of service attempts.
• Software, plugins and dependencies are kept updated, and we apply security patches promptly.
• Backups are taken regularly so that we can restore the site after a failure.

3. Who can see what

Access to client accounts, our CRM and our advertising platforms is limited to the people whose job requires it. Everyone has an individual login rather than a shared one, so activity can be traced to a person. When somebody leaves the team or changes role, their access is revoked or reduced.

We access your advertising and analytics accounts through delegated access wherever the platform supports it, which means we work inside accounts you own rather than holding your passwords.

4. What we ask of you

Most incidents we have seen at any agency start on the client side, so a few things make a real difference:

• Turn on two factor authentication for your Google, Meta and email accounts.
• Grant us delegated access rather than sending passwords. If you must send a credential, use a password manager share link and not email or text.
• Remove our access when an engagement ends. We will also do this from our side, but you should not have to rely on us for it.
• Tell us promptly if you think one of your accounts has been compromised.

5. Vendors we rely on

We use third party providers to run our business, including a payment processor, our CRM and automation platform, hosting and content delivery, and analytics and advertising tools. Each of them maintains its own security programme, and each is named in our Privacy Policy along with what it can see.

We choose vendors with an established security posture, but we do not audit them ourselves, and a failure at one of them could affect data they hold.

6. If something goes wrong

If we suspect or confirm a breach affecting your information we will investigate immediately, work to contain it, and tell you what we know. Where the law requires notification to you or to a regulator, we will make it within the time the law allows. Afterwards we will tell you what we changed so it does not happen again.

7. Reporting a vulnerability

If you have found a security issue on our site or in something we built, please tell us at [email protected] with "Security" in the subject line. Give us enough detail to reproduce it. We will acknowledge you within two business days and keep you updated while we fix it.

We will not pursue action against anyone who reports a genuine issue in good faith and does not access, change or destroy data beyond what is needed to demonstrate it.

8. How this relates to privacy

Security is about protecting information. Privacy is about what we collect and who we share it with. Those are separate questions, and our Privacy Policy answers the second one in full, including the advertising and analytics tools that receive data about visitors to this site.

9. Contact

Run LLC, doing business as Run Digital and RunLeadGen
5993 N Tippecanoe Ln, Stansbury Park, UT 84074
Email [email protected]
Phone (435) 244-3180