Privacy policy.

Form submissions: the name, work email, company, website, vertical, spend range, channels and message you send through the contact form, plus your consent to be contacted.

Analytics: aggregate usage data, only if you accept analytics cookies. If you reject them, no analytics scripts are loaded.

Server logs: IP address, user agent, requested URL and timestamp, recorded by our hosting provider for security and reliability.

To respond to enquiries, to assess whether an engagement is a fit, to operate and secure the site, and to understand which pages are used.

Where the GDPR applies, we rely on consent for analytics and marketing cookies, legitimate interests for site security and for responding to a business enquiry you initiate, and contract where we are performing services for you.

Enquiries are retained for [RETENTION PERIOD — to confirm] unless they become client records, in which case they are retained for the life of the engagement and as required for tax and legal purposes. Server logs are retained for the period set by our hosting provider.

We use third-party providers for hosting, email and, where enabled, analytics. They process data on our instructions only. We do not sell personal information.

When we run campaigns for a client, that client is the controller of their own advertising data and we act on their instructions. Advertising platforms such as Meta, Google and YouTube process data under their own terms and policies, which we do not control.

We are based in the United States and our providers may process data outside your country. Where required, transfers rely on an appropriate safeguard such as the EU standard contractual clauses.

If you are in the UK or EEA you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests, and you may withdraw consent at any time. You may also complain to your local supervisory authority.

If you are a California resident you may request to know what personal information we collected, request deletion or correction, and opt out of sale or sharing. We do not sell or share personal information as those terms are defined by the CPRA. We will not discriminate against you for exercising a right.

Send requests to office@shirlinkmedia.com. We may ask for information to verify your identity. Written requests may also be sent to Shirlink Media, 430 Brandywine St SE, #202, Washington, DC 20032.

We will update this page when our practices change and revise the date at the top.