This Privacy Policy explains how iTractIT ("iTractIT", "we", "us", or "our") collects, uses, shares, and protects personal information when you visit our website, contact us, book a call, or use our digital marketing services.
We work with businesses in the United States, United Kingdom, European Union, Middle East, and other international markets. We aim to handle personal information in line with the privacy laws that apply to you, including the UK GDPR, EU GDPR, applicable United States state privacy laws, and data-protection laws in relevant Middle Eastern jurisdictions.
The short version: we only collect what we need to respond to you and deliver our services, we never sell your personal information, and you can ask us to access, correct, or delete your data at any time.
1Who We Are
iTractIT is a digital marketing company founded in 2020 by S M Nasib Zaman, specializing in Google Ads management for service-based businesses.
For the purposes of data-protection law, iTractIT is the controller of personal information collected through this website. Where we process personal information on behalf of a client as part of an engagement (for example, data inside a client's Google Ads or Analytics account), we act as a processor on that client's instructions.
You can reach us at contact@itractit.com or at 2C Sunbury Ct Rd, Sunbury-on-Thames TW16 5NL, UK.
2Information We Collect
Information you give us
- Contact form: your name, email address, website or domain, monthly ad budget range, and message.
- Call bookings: your name, email address, the time you book, and any details you add when scheduling a strategy call.
- Email and WhatsApp: your name, contact details, and the content of your messages.
- Client engagements: business details, billing contacts, and the access you grant to advertising, analytics, tag manager, and website accounts.
Information collected automatically
- Device and usage data: IP address, browser type, device type, pages visited, referring page, and the date and time of your visit.
- Cookies and similar technologies: see Section 5 below.
We do not intentionally collect sensitive personal information (such as health, financial account, or government ID data) through this website. Please do not include it in your messages.
3How We Use Your Information
We use personal information to:
- Respond to your enquiries and messages
- Schedule and hold strategy calls and free audits
- Prepare proposals and deliver the services you request
- Manage, optimize, and report on client advertising campaigns
- Send service-related communications, such as reports and invoices
- Keep our website secure, working properly, and free from spam and abuse
- Understand how visitors use our website so we can improve it
- Comply with legal, tax, and accounting obligations
We do not use your personal information for automated decision-making that produces legal or similarly significant effects about you.
4Legal Bases for Processing
If you are in the UK or the European Economic Area, we rely on the following legal bases:
| Legal basis | When we use it |
|---|---|
| Contract | To take steps you request before entering a contract, and to deliver services under a contract with you. |
| Legitimate interests | To respond to business enquiries, run and secure our website, and improve our services, balanced against your rights. |
| Consent | For non-essential cookies, analytics, or marketing where consent is required. You can withdraw consent at any time. |
| Legal obligation | To keep records required by tax, accounting, or other laws. |
6Third-Party Services
We use trusted third-party providers to run our website and business. They only receive the information they need to perform their service:
| Provider | Purpose |
|---|---|
| Formspree | Receives and delivers contact form submissions to our inbox. |
| Zcal | Schedules strategy calls you book through our booking link. |
| WhatsApp (Meta) | Messaging when you choose to contact us on WhatsApp. |
| Fonts, analytics, tag management, and advertising tools, plus the Google Ads accounts we manage for clients. | |
| Hosting provider | Hosts this website and stores server logs. |
| Email and productivity tools | Business email, documents, reporting dashboards, and invoicing. |
Each provider handles data under its own privacy policy. Our website also loads fonts from Google Fonts, which means your IP address is shared with Google when the page loads.
7Client Account and Campaign Data
When you hire us, you may grant access to your Google Ads, Google Analytics, Google Tag Manager, Merchant Center, Looker Studio, or website accounts. We use this access only to deliver the agreed services.
We ask for access through official user-permission systems rather than shared passwords, keep access limited to the people working on your account, and remove our access when the engagement ends or when you ask us to.
Where your accounts contain personal data about your own customers, you remain the controller of that data and we process it only on your instructions. Additional data-processing terms can be agreed where required.
9International Data Transfers
iTractIT is based in the United Kingdom and serves clients worldwide, and our service providers may process data in other countries. This means your personal information may be transferred to and processed in countries other than your own.
Where we transfer personal information from the UK or EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or adequacy decisions.
10Data Retention
We keep personal information only for as long as we need it for the purposes described in this policy:
- Enquiries that do not become projects: up to 24 months after our last contact.
- Client records: for the length of the engagement and up to 7 years afterwards, to meet tax, accounting, and legal requirements.
- Website logs and analytics: according to the retention settings of the tools we use, typically 14 to 26 months.
When information is no longer needed, we delete or anonymize it securely.
11Data Security
We use reasonable technical and organizational measures to protect personal information, including encrypted (HTTPS) connections, access controls, two-factor authentication where available, and limiting access to people who need it.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal information, we will notify you and the relevant authorities where the law requires it.
12Your Privacy Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Delete your personal information
- Restrict or object to certain processing
- Data portability: receive your data in a portable format
- Withdraw consent at any time, where we rely on consent
- Opt out of the sale or sharing of personal information and of targeted advertising
- Complain to your local data-protection authority
To exercise any of these rights, email contact@itractit.com. We may need to verify your identity before responding, and we will reply within the time required by law (usually within 30 to 45 days). We will not discriminate against you for exercising your rights.
If you are in the UK, you can complain to the Information Commissioner's Office (ICO). If you are in the EU, you can contact your local supervisory authority.
13US State Privacy Rights
If you live in California, Colorado, Virginia, Connecticut, Utah, Texas, or another US state with a consumer privacy law, you may have additional rights to know what personal information we collect, use, and disclose, and to request deletion or correction.
In the past 12 months, we have collected the categories of information described in Section 2 (identifiers, commercial information, and internet activity) for the business purposes described in Section 3. We have not sold personal information and do not share it for targeted advertising in exchange for money.
You can make a request yourself or through an authorized agent by emailing contact@itractit.com. Where your browser sends a Global Privacy Control signal, we will treat it as a valid opt-out request where the law requires it.
14Children's Privacy
Our website and services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
15Links to Other Websites
Our website contains links to other websites and services, such as Zcal, WhatsApp, and social media platforms. We are not responsible for the privacy practices of those websites, and we encourage you to read their privacy policies.
16Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, or legal requirements. The latest version will always be published on this page with the "Last Updated" date.
If we make significant changes, we will take reasonable steps to let you know, for example by posting a notice on our website.
17Contact Us
If you have any questions about this Privacy Policy or how we handle your personal information, or if you want to exercise your privacy rights, please contact us: