Privacy policy.

TicTakMedia ("TicTakMedia", "we", "us" or "our") is a performance marketing agency. We run paid media, search, creative and lifecycle marketing for businesses around the world, and we operate the website tictakmedia.com.

For the personal information described in this policy, TicTakMedia is the data controller. Under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") this role is called a Data Fiduciary. You can contact us about anything in this policy at hello@tictakmedia.com.

This policy explains how we handle personal information when you:

• visit tictakmedia.com
• book a call with us or contact us by email
• work with us as a client, partner agency, supplier or job candidate

It does not cover data we handle for our clients while delivering our services, such as ad account audiences, CRM records or customer lists. For that work we act as a processor (a Data Processor under the DPDP Act). We follow our client's instructions and our contract with them. If you are a customer of one of our clients, please contact that business about your data.

Websites we link to, such as Calendly, Google or Meta, have their own privacy policies.

Information you give us

• Contact details: your name, email address, phone number, company and job title
• Booking details: what you enter when you schedule a call, including your answers to any questions on the booking form
• Conversations: the content of emails, messages and call notes, including details about your business, marketing goals and budgets
• Client records: if you become a client, your billing contacts, company and tax details, and the access you grant us to your marketing accounts

Information collected automatically

• Website usage: pages viewed, the site that referred you, your approximate country, and your browser and device type
• Security logs: server logs our hosting provider keeps so the site stays available and protected from abuse

Please do not send us sensitive information, such as health details, bank or card numbers or government ID numbers. We do not need it to talk with you.

We use personal information to:

• reply to your enquiries and hold the calls you book
• prepare the proposals, audits and quotes you ask for
• deliver and manage our services, including onboarding, reporting, invoicing and support
• run, secure and improve our website
• send occasional updates or insights related to a conversation we have had. You can opt out at any time
• meet our legal, tax and accounting obligations and protect our legal rights

We do not sell your personal information. We do not use it for automated decisions that have legal or similarly significant effects on you.

If you are in the European Economic Area or the United Kingdom

• Contract: to take steps you ask for before signing a contract, such as a discovery call or proposal, and to perform our contract with you
• Legitimate interests: to run and secure our website, reply to business enquiries and stay in touch with business contacts, where your rights do not override those interests
• Consent: where we ask for it, for example for optional marketing emails or any non-essential cookies we add in future. You can withdraw consent at any time
• Legal obligation: to keep financial records and respond to lawful requests

If you are in India

We process your personal data with your consent, which you give when you share it with us for a stated purpose, or for other legitimate uses the DPDP Act allows. You can withdraw consent at any time by emailing hello@tictakmedia.com. Withdrawing consent does not affect processing that happened before you withdrew it.

Our website is hosted on Framer. Framer gives us basic visit statistics without using cookies and without tracking you across other websites. Framer may set strictly necessary cookies needed to deliver and secure the site.

We do not use advertising pixels, retargeting cookies or third-party analytics tools on tictakmedia.com.

When you click through to book a call, you go to Calendly, which uses its own cookies under its own policy.

If we add analytics or advertising tools in future, we will update this policy first and ask for your consent wherever the law requires it.

We share personal information only when we need to, with:

• Service providers that host our website, schedule calls, send email, store files and handle invoicing, such as Framer (website hosting) and Calendly (call scheduling). They may use your information only to provide their services to us
• Our team and contractors, who can access it only as their work requires and are bound by confidentiality
• Professional advisers such as accountants and lawyers, who owe us a duty of confidentiality
• Authorities, when the law requires it or when needed to protect our rights, our users or the public
• A buyer or successor, if our business is reorganised, merged or sold. Your information stays protected by this policy

We do not sell or rent personal information. We do not share it for cross-context behavioural advertising.

We work with clients in many countries and use service providers in different places, including the United States. Your information may therefore be processed outside the country where you live, including in India and the United States.

When we transfer personal data out of the EEA or the UK, we rely on safeguards recognised by law. These include the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or a provider's certification under the EU-US Data Privacy Framework. Transfers of personal data collected in India follow any conditions the Government of India sets under the DPDP Act.

We keep personal information only as long as we need it for the purpose we collected it for:

• Enquiries and call bookings that do not lead to working together: up to 24 months after we were last in touch
• Client and supplier records: for as long as we work together, then for as long as tax, accounting and legal rules require, usually up to 8 years
• Website and security logs: for at least one year, as Indian law requires, then deleted or anonymised

When we no longer need information, we delete it or anonymise it.

We use reasonable technical and organisational safeguards. These include encrypted connections (HTTPS), access controls on our business tools, limiting who can open client ad accounts, and confidentiality commitments from everyone who works with us.

No system is completely secure. If a personal data breach affects you, we will tell you and the relevant regulator without undue delay, as the law requires.

Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy of it
• correct information that is inaccurate or incomplete
• delete your information, or ask us to stop using it
• object to or restrict some processing, including direct marketing
• withdraw consent at any time
• receive your information in a portable format
• nominate someone to exercise your rights if you die or become unable to (India)
• complain to a data protection authority

To use any of these rights, email hello@tictakmedia.com. We may need to confirm your identity before we act. We aim to reply within 30 days, and always within the time the law allows where you live. We will not treat you differently for using your rights.

If you are in the EEA, you can complain to your local data protection authority. In the UK, you can complain to the Information Commissioner's Office (ICO). In India, if you are not satisfied with how we handle your grievance, you can approach the Data Protection Board of India.

Residents of some US states, including California, Colorado, Connecticut, Virginia and others, have rights under state privacy laws. These can include the right to know, access, correct and delete personal information, and to opt out of its sale, its sharing for targeted advertising, or profiling.

In the past 12 months we have collected the categories of information listed in section 03: identifiers, professional information, and website activity on our site. We used them for the purposes in section 04. We do not sell personal information, share it for cross-context behavioural advertising, or use sensitive personal information to infer things about you.

You, or an agent you authorise, can make a request at hello@tictakmedia.com. If we turn down your request, you can appeal by replying to our response.

Our website and services are for businesses. They are not directed at anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has shared personal data with us, contact us and we will delete it.

We may update this policy when our services, our tools or the law change. We will post the new version on this page and update the "Last updated" date at the top. If a change is significant, we will take reasonable steps to tell you, for example by email if we work together.

For questions, requests or complaints about your personal information, contact us:

• Business: TicTakMedia
• Email: hello@tictakmedia.com
• Website: tictakmedia.com

This inbox is also our privacy and grievance contact under India's DPDP Act.