PRIVACY POLICY .

The Data Controller responsible for the collection and processing of personal data gathered via this website and our digital marketing consultancy practice is:

This Privacy Policy applies to all personal information received via web visits, inquiry forms, audit requests, strategy discussions, and direct electronic correspondence.

We collect only the information required to deliver targeted marketing audits, execute ad campaign architectures, conduct consulting sessions, and maintain site stability:

• Direct Inquiry Information: Your name, business email address, WhatsApp or phone number, company name, website domain URL, and project specifications submitted through our consultation forms or direct messages.
• Technical & Telemetry Data: IP address, browser type and version, device hardware model, operating system, referring URL source, page visit sequence, and session duration.
• Audit & Campaign Parameters: Target domain names, competitive search parameters, advertising objectives, and performance metrics shared voluntarily during discovery reviews.
• Interface Preferences: Local browser storage items (such as the dark/light theme mode key dromero_theme) utilized solely to sustain your visual presentation preferences without tracking your identity.

All gathered data is applied exclusively toward professional marketing deliverables, responsive client communications, and platform security:

• Consultancy Delivery: Producing thorough technical SEO audits, keyword gap analyses, Meta ad campaign structures, ROAS financial projections, and customized growth roadmaps.
• Client Communication: Responding promptly to consultation requests, delivering project proposals, scheduling strategy calls, and presenting performance reports.
• Platform Performance & UX: Measuring web traffic patterns and page speed metrics to enhance navigation layout, technical responsiveness, and content accessibility.
• Infrastructure Security: Preventing automated form spam, shielding against unauthorized administrative attempts, and maintaining server integrity.

Under the EU General Data Protection Regulation (GDPR) and UK Data Protection legislation, our legal bases for processing personal information include:

• Contractual Necessity (Art. 6(1)(b)): Processing necessary to prepare audit proposals, establish marketing service contracts, or execute agreed consultancy deliverables.
• Legitimate Business Interests (Art. 6(1)(f)): Processing required to operate our practice, ensure web security, optimize site performance, and respond to incoming business inquiries.
• Explicit Consent (Art. 6(1)(a)): When you voluntarily opt into optional analytics tracking or initiate direct communications via WhatsApp or inquiry forms.
• Legal Obligations (Art. 6(1)(c)): Compliance with statutory tax, commercial bookkeeping, and legal reporting obligations where mandated.

We deploy standard browser cookies and storage mechanisms to support website functionality and anonymous analytics telemetry:

• Google Analytics 4 (Measurement ID: G-R54Y1NXE92): Collects aggregated, anonymized interaction metrics (page visits, session length, geographic region). IP anonymization is applied by default.
• Local Storage UI State: The browser key dromero_theme preserves your dark mode or light mode preference between visits without associating with personal identity.
• Essential Session Cookies: Temporary technical cookies facilitating secure HTTP delivery, CSRF protection, and server load distribution.

As a specialized Meta Ads and SEO growth consultancy, we maintain strict operational boundaries between our public website visitors and our client account workflows:

• Client Ad Account Governance: When managing client ad accounts within Meta Ads Manager or Google Ads, Junayed Leon operates strictly as an authorized specialist or data processor under client direction. All audience data within client assets remains the exclusive property of the client.
• Strict Account Isolation: We never export, merge, cross-target, or reuse audience lists, conversion pixels, or customer lists between different client accounts.
• Joint Controllership Transparency: Under Meta Business Tools Terms (e.g., Pixel and Conversions API implementation), Meta Platforms, Inc. and the advertiser act as joint controllers for specific event capture. Meta Platforms is the primary entity responsible for addressing data subject requests regarding ad targeting on its platforms.

We engage with industry-leading infrastructure partners who adhere to rigorous international data protection protocols:

• Google LLC: Facilitates Google Analytics 4, Google Tag Manager, Site Kit, and Google Fonts.
• Meta Platforms, Inc.: Utilized for Meta Business Suite, campaign optimization tools, and official social channels (Facebook, Instagram).
• WhatsApp LLC (Meta): Powers direct real-time communication for project consultations and instant inquiries.
• Hosting & Cloud Infrastructure: Dedicated cloud server environments providing 256-bit encryption, continuous uptime, and automated firewall defenses.

All third-party vendors are bound by strict confidentiality and data processing agreements prohibiting unauthorized utilization of your data.

Personal data is retained only for the timeframe necessary to accomplish the purposes described in this policy:

• Inquiry & Consultation Records: Retained for up to 24 months after the last active communication to support continuity for future audit reviews or campaign engagements.
• Analytics Event Records: Google Analytics 4 event logs are retained according to standard retention configurations (up to 14 months).
• Contractual & Financial Documentation: Retained for statutory periods mandated by commercial accounting and tax regulations.

Following expiration of the retention schedule or upon receipt of a verified deletion request, personal records are permanently destroyed or irreversibly anonymized.

We implement comprehensive organizational and technical security defenses to protect your personal data from accidental loss, unauthorized access, misuse, alteration, or disclosure:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser and our server is secured with high-grade SSL/TLS certificates.
• Strict Access Controls: Administrative interfaces and consulting inboxes are protected with multi-factor authentication (MFA) and restricted access permissions.
• Continuous Server Defenses: Automated malware scans, brute-force firewall limits, and periodic software patch updates.

Regardless of your geographical location, you have robust legal rights concerning your personal information:

Because we collaborate with clients worldwide, personal data may be processed on servers situated outside your domestic jurisdiction (including Google Cloud data centers in the United States and European Union). When cross-border transfers occur, we implement Standard Contractual Clauses (SCCs) to guarantee equivalent data security.

Children’s Privacy Protection (COPPA Compliance): Our digital marketing consultancy services are aimed exclusively at business professionals and adults aged 18 and older. We do not knowingly solicit or collect personal information from individuals under the age of 16.

We may revise this Privacy Policy periodically to reflect technological improvements, marketing platform modifications, or statutory amendments. The “Last Updated” timestamp at the top of this document will always indicate the latest active revision date.

For any inquiries, feedback, or data privacy requests, contact Junayed Leon through the official channels below:

• Direct Email: proac.leon@gmail.com
• Direct WhatsApp: +880 1723-589636
• Website: https://junayedleon.tech
• Turnaround Time: Response guaranteed within 24 to 48 business hours