last updated: june 8, 2025
contact: support@achmedia.agency

introduction
ach media agency (“we,” “us,” “our”) is committed to protecting the privacy and security of your personal data. this privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our services. it also describes your rights under the eu general data protection regulation (gdpr), uk data protection act, california consumer privacy act (ccpa), california privacy rights act (cpra), law no. 09-08 of morocco, canada’s personal information protection and electronic documents act (pipedа), and any other applicable privacy laws.

1. data we collect
   we may collect and process:

• personal identifiers (name, email address, phone number, mailing address)
• professional details (company name, job title, industry)
• account credentials (username, password, authentication tokens)
• payment information (billing address, credit card or payment account details)
• usage and technical data (ip address, browser type, device identifiers, pages visited, interaction timestamps)
• marketing preferences (opt-in status, communication history)
• any other information you voluntarily provide (survey responses, support inquiries, uploaded files)

2. how we collect your data
   we obtain personal data when you:

• visit or interact with our website and fill out forms
• request a quote, proposal, or support via email or chat
• subscribe to newsletters or marketing communications
• attend webinars, events, or training sessions
• engage with us on social media platforms
• participate in surveys or feedback requests
• make purchases, process payments, or register for accounts

3. purposes of processing
   we use your data to:

• provide, operate, and maintain our services and website
• process transactions and send related information (invoices, confirmations)
• respond to your inquiries, support requests, and feedback
• personalize content, recommendations, and user experience
• send marketing communications, newsletters, and promotional offers (where permitted)
• analyze usage patterns to improve our services, user interface, and performance
• detect, prevent, and address technical issues, fraud, or security risks
• comply with legal obligations and enforce our terms of service

4. legal bases for processing (gdpr)
   where applicable under the gdpr, we rely on one or more of the following legal bases:

• contract performance: processing is necessary to fulfill our contract with you
• legal compliance: processing is required to comply with a legal obligation
• legitimate interests: processing is necessary for our legitimate business interests (e.g., service improvement, fraud prevention), provided your rights do not override those interests
• consent: you have given clear consent for us to process your personal data for a specific purpose
• vital interests: processing is necessary to protect someone’s life

5. sharing and disclosure
   we may share personal data with:

• service providers and processors (hosting, payment gateways, marketing platforms)
• affiliates, partners, or subcontractors engaged to perform services on our behalf
• professional advisors (lawyers, accountants, auditors) when required
• government authorities or law enforcement in response to legal processes or to protect our rights
• a third party in connection with a merger, acquisition, financing, or asset sale (with notice and appropriate safeguards)

we do not sell your personal data.

6. cookies and tracking technologies
   we use cookies, web beacons, and similar technologies to:

• recognize your device and preferences
• track website usage and performance
• deliver personalized content and ads
• measure and improve campaigns and features

you may manage or disable cookies through your browser settings, but doing so may limit functionality.

7. data retention
   we retain personal data only as long as necessary to fulfill the purposes outlined above, unless a longer retention period is required or permitted by law. when data is no longer needed, we will securely delete or anonymize it.
8. your rights
   depending on your jurisdiction, you may have the right to:

• access your personal data and receive a copy
• correct inaccurate or incomplete data
• request deletion or restriction of processing
• object to processing based on legitimate interests or direct marketing
• withdraw consent at any time (without affecting prior processing)
• receive your data in a portable format (data portability)
• opt out of the sale or sharing of personal data (ccpa)
• appeal or lodge a complaint with a supervisory authority

to exercise your rights, contact us at support@achmedia.agency. we may request information to verify your identity and process your request.

9. security
   we implement technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or alteration. these include encryption, access controls, secure development practices, and regular security assessments.
10. international transfers
    data may be transferred to and processed in countries outside your jurisdiction, including the united states, where privacy laws may differ. we ensure appropriate safeguards (standard contractual clauses, adequacy decisions) are in place to protect your data.
11. children’s privacy
    our services are not intended for children under 16. we do not knowingly collect personal data from minors. if you believe we have collected such data, contact us to have it deleted.
12. updates to this policy
    we may update this privacy policy to reflect changes in our practices, legal requirements, or technology. we will post the revised policy with a new “last updated” date and, where required, seek your consent.
13. contact us
    for questions, requests, or concerns about this policy or our data practices, please contact:

ach media agency
email: support@achmedia.agency

you may also reach out to the relevant supervisory authority in your jurisdiction for further assistance.