01 Who we are
ADBOXX is a digital marketing agency that builds websites and delivers SEO, Google Ads, Google Merchant Center, Amazon, and ecommerce consulting services for businesses across the United States and Canada. We operate remotely and serve clients online.
For the purposes of applicable data protection law, ADBOXX is the "data controller" responsible for the personal information described in this policy. If you have any questions, you can reach us at [email protected].
02 Scope of this policy
This policy applies to information we process about visitors to our Website, people who contact us or submit our forms, prospective clients, and clients who engage our services.
When we provide services to clients, we may process data on a client's behalf — for example, when we manage advertising accounts, analytics, or merchant feeds. In those cases we act as a "data processor" and handle that data according to our agreement with the client and the privacy policies of the relevant platforms. This policy describes our own data practices as a business.
03 Information we collect
We collect only the information we need to operate our Website, respond to enquiries, and deliver our services. This may include:
Information you provide to us
- Contact details — such as your name, email address, business name, and phone number when you submit a form, email us, or message us on WhatsApp or Telegram.
- Project information — details you share about your website, store, advertising accounts, budget, or business goals so we can assess fit and scope work.
- Communications — the content of messages, emails, and other correspondence you send to us.
Information collected automatically
- Device & browser data — such as IP address, browser type, device type, operating system, and screen size.
- Usage data — pages viewed, links clicked, referring URLs, time spent on pages, and similar interaction data.
- Cookies & identifiers — small files and identifiers used for analytics and advertising measurement, as described in the Cookie Policy.
We do not intentionally collect sensitive personal information (such as government IDs, health, or financial account numbers) through the Website, and we ask that you do not submit such information through our forms.
04 How we collect information
We collect information in three main ways:
- Directly from you — when you complete a contact form, email us, or message us.
- Automatically — through cookies and similar technologies when you use the Website, including via Google Tag Manager and Google Analytics.
- From service providers — such as form-delivery and analytics tools that process submissions and usage data on our behalf.
05 How we use your information
We use the information we collect to:
- Respond to your enquiries and provide the information or services you request.
- Assess project fit, prepare proposals, and deliver our agreed services.
- Operate, maintain, secure, and improve the Website and our offerings.
- Measure and analyse Website traffic and the performance of our marketing.
- Communicate with you about your enquiry, project, or our services.
- Detect, prevent, and address fraud, abuse, security issues, and technical problems.
- Comply with our legal obligations and enforce our Terms of Service.
We do not sell your personal information, and we do not use it for unrelated purposes without telling you.
06 Legal bases for processing
Where data protection laws such as the EU/UK GDPR apply, we rely on the following legal bases to process your personal information:
- Consent — for non-essential cookies and analytics/advertising technologies, where required.
- Contract — to take steps at your request before entering into a contract and to deliver our services.
- Legitimate interests — to operate and secure our Website, respond to enquiries, and understand how our Website is used, balanced against your rights.
- Legal obligation — to comply with applicable laws and regulatory requirements.
07 How we share information
We share personal information only as needed to run our business and never sell it. We may share information with:
- Service providers — vendors who host our infrastructure, deliver our forms, send email, and provide analytics, acting on our instructions.
- Advertising & analytics partners — such as Google, to measure Website performance and advertising effectiveness, as described below.
- Professional advisors — accountants, lawyers, or insurers where reasonably necessary.
- Legal & safety — authorities or third parties when required by law, to enforce our terms, or to protect the rights, property, or safety of ADBOXX, our clients, or others.
- Business transfers — in connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honour this policy.
08 Third-party services we use
We rely on trusted third-party services to operate the Website and our business. Each processes data under its own privacy policy:
- Google Tag Manager
- Manages tags and scripts on the Website. See Google's Privacy Policy.
- Google Analytics
- Measures and reports on Website traffic and usage in aggregate.
- Google Ads
- Measures advertising performance and conversions.
- Form delivery
- Processes and delivers contact-form submissions to our inbox.
- Messaging (WhatsApp, Telegram)
- Used when you choose to message us; governed by each provider's privacy policy.
09 Google services & the Google Ads API
We use Google products — including Google Ads, Google Analytics, Google Tag Manager, and Google Merchant Center — to deliver and measure marketing services. Where we access the Google Ads API on behalf of clients, our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
When we manage a client's Google Ads account, we access advertising data only to provide and improve that client's services, with their authorisation. We do not use Google user data for unrelated purposes, do not transfer it except as necessary to provide or improve those services, comply with the law, or as part of a merger or acquisition, and do not allow humans to read such data unless we have the relevant party's consent, it is necessary for security or to comply with applicable law, or the data has been aggregated and anonymised.
Google's collection and use of data through its products is governed by the Google Privacy Policy. You can learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites, and opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on.
10 Cookies & tracking technologies
We use cookies and similar technologies to run the Website, remember your preferences, measure traffic, and understand advertising performance. You can control cookies through your browser settings and, where applicable, our cookie controls.
For full details on the cookies we use and how to manage them, please read our Cookie Policy.
11 Data storage & retention
Personal information is stored on secure servers operated by us or our service providers, which may be located in the United States, Canada, or other countries where our providers operate. We retain personal information only for as long as necessary for the purposes described in this policy, including to:
- respond to and follow up on your enquiry;
- deliver services and maintain our business records;
- comply with legal, tax, accounting, and regulatory obligations; and
- resolve disputes and enforce our agreements.
When information is no longer needed, we delete it or anonymise it so it can no longer be associated with you.
12 How we protect your data
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, or alteration. These include encryption in transit (HTTPS), access controls, and limiting access to information to those who need it to do their work.
No method of transmission or storage is completely secure, so while we work hard to protect your information, we cannot guarantee absolute security.
13 International data transfers
Because we and our service providers operate in different countries, your information may be transferred to and processed in countries other than the one in which you reside, including the United States and Canada. Where required, we put appropriate safeguards in place (such as standard contractual clauses) to protect your information when it is transferred internationally.
14 Your privacy rights & choices
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access — request a copy of the personal information we hold about you.
- Correction — ask us to correct inaccurate or incomplete information.
- Deletion — ask us to delete your personal information, subject to legal exceptions.
- Objection & restriction — object to or ask us to restrict certain processing.
- Portability — request your information in a portable format.
- Withdraw consent — withdraw consent where we rely on it, at any time.
- Opt out — opt out of analytics and advertising cookies, and of the "sale" or "sharing" of personal information where those concepts apply.
To exercise any of these rights, email us at [email protected]. We will respond within the timeframe required by applicable law and will not discriminate against you for exercising your rights. You also have the right to lodge a complaint with your local data protection authority.
15 Children's privacy
Our Website and services are intended for businesses and are not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.
16 Third-party links
The Website may contain links to third-party websites and services that we do not operate. This policy does not apply to those third parties, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policy of any third-party site you visit.
17 Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice. We encourage you to review this page periodically.
18 Contact us
If you have any questions, requests, or concerns about this Privacy Policy or how we handle your personal information, please get in touch:
ADBOXX — Privacy