Privacy Policy

Who we are

Zapworld LLC (“Zapworld”, “we”, “us”) is a performance marketing agency registered in [TO FILL: state of formation], USA, with its address at [TO FILL: registered business address]. We are the controller of the personal information described in this policy.

This policy covers our website and our dealings with prospective clients. When we run campaigns for a client, any customer data we handle on their behalf is processed under our agreement with that client, and their own privacy policy applies to it.

What we collect

Information you give us

• Contact form: your name, work email, brand name, website, monthly ad spend range and your message.
• Emails and calls: what you share with us when we talk, such as your role, company details and business goals.

Information collected automatically

• Essential data: your cookie choice, stored in your browser, and basic technical logs kept by our hosting provider (such as IP address and browser type) to keep the site secure and working.
• Analytics and advertising data, only with your consent: pages viewed, how you arrived, device and browser details, approximate location derived from your IP address, and identifiers set by Google Analytics, Google Ads and Meta Pixel. See our Cookie Policy.

We do not knowingly collect sensitive personal information, and we ask you not to send it to us.

How we use it, and our legal bases

For visitors in the UK and European Economic Area, data protection law requires a legal basis for each use.

• Replying to enquiries and preparing proposals: to take steps at your request before a contract, and our legitimate interest in responding to business enquiries.
• Providing our services: to perform our contract with you or your company.
• Measuring and improving the website: your consent (analytics cookies).
• Measuring and personalising our own advertising: your consent (marketing cookies).
• Occasional business updates by email: our legitimate interest or your consent where required. You can opt out at any time.
• Security, fraud prevention and legal obligations: our legitimate interests and compliance with law.

Who we share it with

We share personal information only with:

• Service providers who help us run the business, such as our website host, Resend (which delivers contact form messages to our inbox) and our email and productivity tools. They may use it only to provide their service to us.
• Google and Meta, when you allow analytics or marketing cookies, to measure site usage and the performance of our ads.
• Professional advisers, such as lawyers and accountants, under confidentiality duties.
• Authorities, where the law requires it or to protect our rights.
• A buyer or successor, if our business is reorganised, sold or merged.

We do not sell personal information for money. Allowing Meta Pixel or Google Ads cookies may count as “sharing” for cross-context behavioural advertising under California law. You can opt out at any time (see Your rights).

International transfers

We are based in the United States, and our providers may process data in the US and other countries. When we transfer personal information from the UK or EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or the EU-US Data Privacy Framework (and its UK Extension) where the recipient is certified.

How long we keep it

We keep enquiry records for up to [TO FILL: retention period, e.g. 24 months] after our last contact, unless you become a client. Client records are kept for the length of our relationship and afterwards for as long as needed for legal, tax and accounting purposes.

Analytics and advertising cookies expire as described in our Cookie Policy.

Security

We use reasonable technical and organisational measures to protect personal information, including encrypted connections (HTTPS) and access controls on our accounts. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights

UK and EEA (including Spain)

You can ask to access, correct, delete or receive a copy of your data, and to restrict or object to how we use it. Where we rely on consent, you can withdraw it at any time without affecting earlier use. You can also complain to a data protection authority, such as the UK Information Commissioner’s Office (ICO) or Spain’s Agencia Española de Protección de Datos (AEPD).

California and other US states

Depending on where you live, you can ask to know what personal information we hold, and to correct or delete it. You can also opt out of the sale or sharing of personal information and of targeted advertising. We will not discriminate against you for using these rights. You can use an authorised agent to make a request.

Opt out of sharing and targeted advertising: use Your privacy choices (also in the footer) and turn off marketing cookies. We treat a Global Privacy Control signal from your browser as a valid opt-out.

Canada

You can ask to access and correct your personal information and withdraw your consent, subject to legal limits. You can also complain to the Office of the Privacy Commissioner of Canada.

How to make a request

Email [TO FILL: contact email]. We may need to verify your identity before acting on a request. We aim to reply within one month (45 days for California requests), and we will tell you if we need longer.

Children

Our website and services are for businesses and are not directed at children under 16. We do not knowingly collect their personal information. If you believe a child has sent us information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If the changes are significant, we will make that clear on the website.

Contact us

Questions about this policy or your data: [TO FILL: contact email], or write to Zapworld LLC, [TO FILL: registered business address].