We collect only what we need to run the studio — name, email, phone, project details, billing information, and the data you share for performance audits. We do not sell your data. You can ask us to delete it at any time.
Who we are
This Privacy Policy applies to Konvertable (“Konvertable”, “we”, “us”, “our”), a performance marketing studio operating internationally. For the purpose of the EU/UK General Data Protection Regulation (GDPR), Konvertable acts as the data controller of the personal information you provide directly to us through our website, contact forms, and engagement workflows.
You can reach our privacy team at hello@konvertable.com.
Information we collect
Information you give us directly
- Identity & contact data — name, business name, email address, phone number, country, role.
- Project data — the details you submit through forms or share over email/call: budgets, channels, goals, audit access, brand assets.
- Billing data — billing address, tax identifier, payment method metadata. Card numbers are processed by our payment processor; we do not store full card details.
- Communication records — emails, call notes, meeting recordings (only with consent), and support correspondence.
Information collected automatically
- Device & usage data — IP address, browser type, device type, operating system, referring URL, pages viewed, time on page, and similar diagnostic data.
- Cookies & analytics — first-party and third-party cookies for analytics, performance, and (where you consent) advertising. See section 06.
Information from third parties
- Ad platforms — when you authorise us to access Google Ads, Meta, TikTok, LinkedIn, Microsoft, or Amazon Ads accounts, we receive the campaign and account data needed to deliver our services.
- Public business sources — company name, role, and publicly listed contact information used for outreach where lawful.
How we use your information
- To respond to your enquiries and deliver the services you’ve engaged us for.
- To run free audits, build campaigns, and manage paid-media accounts on your behalf.
- To issue invoices, take payments, and meet our tax and accounting obligations.
- To send service updates, performance reports, and account communications.
- To send marketing communications about our services — only where you have opted in or where we have a legitimate interest and you have not objected.
- To improve our website, services, and internal operations.
- To prevent fraud, enforce our Terms, and comply with applicable law.
Legal bases for processing (GDPR / UK GDPR)
Where the GDPR or UK GDPR applies, we rely on the following lawful bases under Article 6:
- Contract — to negotiate, enter into, and perform our services with you.
- Legitimate interests — to operate, secure, and improve our business, including limited B2B outreach, where these interests are not overridden by your rights.
- Consent — for marketing emails to individuals, non-essential cookies, and any sensitive processing where consent is required.
- Legal obligation — to keep tax, accounting, and AML records as required by law.
You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Who we share information with
We do not sell or rent personal information. We share it only with the following categories of recipients, under written agreements that require equivalent protection:
- Service providers (sub-processors) — cloud hosting, email, analytics, CRM, project management, file storage, accounting, and payment processing tools. A current list is available on request.
- Ad platforms — Google, Meta, TikTok, LinkedIn, Microsoft, and Amazon, only to the extent needed to manage your campaigns under your authorisation.
- Professional advisors — lawyers, auditors, and accountants under confidentiality obligations.
- Authorities — where required by law, court order, or to protect rights, safety, and property.
- Successors — in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality.
Cookies & similar technologies
Our website uses strictly necessary cookies to function and, with your consent, additional cookies for analytics and advertising. You can manage or withdraw cookie consent at any time through your browser settings or our cookie banner where presented.
- Strictly necessary — required for core site functionality.
- Analytics — aggregated usage statistics to improve content and performance.
- Advertising — to measure campaign effectiveness; only loaded with your consent.
How long we keep information
We retain personal information only as long as necessary for the purpose it was collected, and then in line with the following defaults:
- Enquiry data — up to 24 months from last contact, then deleted or anonymised.
- Active engagement data — for the term of the engagement and up to 6 years after, to meet contractual and tax obligations.
- Billing and tax records — as required by applicable tax law (typically 5–10 years).
- Marketing data — until you unsubscribe or object, then up to 30 days for suppression list maintenance.
International data transfers
Konvertable operates internationally and may transfer personal information outside your country of residence, including to processors in the EEA, UK, and the United States. Where such transfers are made from the EEA or UK, we rely on lawful transfer mechanisms such as Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, or recognised adequacy decisions, supplemented by appropriate technical and organisational safeguards.
Your rights
Depending on your location, you may have some or all of the following rights in relation to your personal information:
- Access — obtain a copy of the personal data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion, subject to legal exceptions.
- Restriction — limit how we process your data in certain situations.
- Portability — receive your data in a machine-readable format.
- Objection — object to processing based on legitimate interests or direct marketing.
- Withdraw consent — where processing is based on consent.
- Lodge a complaint — with your local supervisory authority.
To exercise any of these rights, email hello@konvertable.com. We will respond within the timeframe required by applicable law (typically within 30 days).
Children’s privacy
Our services are designed for businesses and are not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.
How we protect your information
We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Measures include encryption in transit, access controls, vendor due diligence, and regular review of our security practices. No system is perfectly secure; we cannot guarantee absolute security but commit to acting promptly in the event of a confirmed incident.
Third-party websites & services
Our website and reports may link to third-party websites and platforms. We are not responsible for the privacy practices of those services and recommend reviewing their policies before sharing personal information.
Changes to this policy
We may update this policy from time to time. The “Effective” date at the top of the page reflects the most recent revision. Material changes will be communicated by email or a prominent notice on our website before they take effect.
Contact us
For privacy questions, data subject requests, or to update your preferences, please reach our privacy team:
- Email — hello@konvertable.com
- Phone — +880 1303 966686
- Subject line — please use “Privacy Request” so we route it correctly.