Privacy Policy

Last updated: July 2026

1. Overview

This Privacy Policy explains how Advault ("Advault", "we", "us" or "our") collects, uses, discloses and safeguards personal data when you visit advault.agency (the "Site"), contact us, or engage us for performance marketing services. It applies to prospective clients, clients, website visitors and other individuals who interact with us.

Advault acts as a data controller for the personal data described here. Where we process personal data on behalf of a client in the course of delivering our services, for example, campaign or analytics data within a client's advertising accounts, we act as a data processor under the terms of our client agreement, and the client remains the controller of that data.

2. Data we collect

We collect personal data in the following ways:

Information you provide

• Contact and inquiry details, your name, company, work email, indicated advertising budget and the contents of any message you send us through our contact form or by email.
• Client onboarding details, business information, billing details and account access credentials necessary to deliver our services.
• Communications, records of correspondence, calls and meetings you have with our team.

Information collected automatically

• Usage and device data, IP address, browser type, device information, pages visited, referring URLs and timestamps, collected via cookies and similar technologies. See our Cookie Policy for detail.
• Analytics data, aggregated statistics about how visitors use the Site.

3. How we use your data

We use personal data to:

• Respond to your inquiries and provide the information or proposals you request;
• Deliver, manage and improve our performance marketing services;
• Administer contracts, billing and our business relationship with you;
• Operate, secure and improve the Site and understand how it is used;
• Send service updates and, where permitted, relevant marketing communications;
• Comply with legal obligations and enforce our agreements.

4. Legal bases for processing

Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases:

• Consent, for non-essential cookies and certain marketing communications, which you may withdraw at any time;
• Contract, to take steps at your request before entering into a contract and to perform our services;
• Legitimate interests, to operate and secure our business, respond to inquiries and promote our services, balanced against your rights;
• Legal obligation, where processing is required to comply with applicable law.

5. Sharing and service providers

We do not sell your personal data. We share it only in these limited circumstances:

• Service providers (processors), trusted vendors who support our operations, such as cloud hosting, email, CRM, analytics and payment providers, who process data only on our instructions;
• Advertising platforms, where you are our client, with the platforms (such as Meta, Google, TikTok and LinkedIn) necessary to deliver campaigns on your behalf;
• Professional advisers, legal, accounting and insurance advisers where necessary;
• Legal and safety, where required by law, regulation or legal process, or to protect our rights, users or the public.

6. Data retention

We keep personal data only for as long as necessary for the purposes described in this Policy, including to satisfy legal, accounting or reporting requirements. Inquiry data is typically retained for up to 24 months after our last contact unless you become a client, in which case client records are retained for the duration of the engagement and for a reasonable period afterward as required by law. When data is no longer needed, we delete or anonymize it.

7. International data transfers

Advault is headquartered in the United States and may process personal data in countries other than the one in which you reside. Where we transfer personal data internationally, we implement appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to ensure your data receives an adequate level of protection.

8. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request deletion of your data;
• Object to or restrict certain processing;
• Request portability of data you provided to us;
• Withdraw consent where processing is based on consent;
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at hello@advault.agency. We will respond within the timeframe required by applicable law. We may need to verify your identity before acting on a request.

9. Security

We maintain administrative, technical and organizational safeguards designed to protect personal data against unauthorized access, loss, misuse or alteration, including access controls, encryption in transit, and the principle of least privilege. No method of transmission or storage is completely secure, so while we work hard to protect your data, we cannot guarantee absolute security.

10. Children's privacy

The Site and our services are intended for businesses and individuals aged 18 or older. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. We encourage you to review this page periodically.

12. Contact us

If you have questions about this Privacy Policy or how we handle your personal data, contact us at:

Advault
30 N Gould St Ste R, Sheridan, WY 82801, United States
Email: hello@advault.agency