Privacy Policy

1. Who we are

LGG Media ("we," "us," or "our") is a performance marketing agency incorporated in Ontario, Canada. Our website is www.lgg.media.

We provide paid advertising management, attribution infrastructure, and lead generation services to businesses primarily operating in the United States. This Privacy Policy applies to information we collect through our website and through your interactions with us as a prospective or existing client.

Data controller contact:
LGG Media
Privacy Officer (person in charge of the protection of personal information): Juan Colicchio
Email: privacy@lgg.media
Phone: (613) 703-8739

2. Information we collect

Information you provide directly:

• Name, email address, phone number, and company name submitted through our contact form or proposal request form
• Communications you send us by email or phone
• Information you provide during onboarding as a client

Information collected automatically:

• IP address and approximate geographic location
• Browser type, operating system, and device information
• Pages visited, time spent on pages, and referring URLs
• Click source and UTM parameters from paid advertising (including Google click IDs and Meta click IDs if you arrived from a paid ad)
• Cookie identifiers and session data

Information from third parties:

• If you interact with our ads on Google or Meta, those platforms may share click and engagement data with us in accordance with their own privacy policies

3. How we use your information

We use the information we collect to:

• Respond to your inquiries and provide the services you request
• Evaluate whether our services are a fit for your business
• Send you information about our services, case studies, or content you have requested
• Improve our website and understand how visitors interact with it
• Measure the effectiveness of our own advertising campaigns
• Comply with legal obligations
• Protect against fraud and abuse

We do not sell your personal information to third parties. We do not use your information to serve you advertising on behalf of other companies.

4. Cookies and tracking technologies

Our website uses cookies and similar tracking technologies. These include:

Strictly necessary cookies: Required for the website to function. Cannot be disabled.

Analytics cookies: We use Google Analytics to understand how visitors use our website. Google Analytics collects information about pages visited, time on site, and traffic sources. This data is aggregated and anonymized. You can opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout.

Advertising and remarketing cookies: We use Google Ads, Meta Ads and X (Twitter) Ads remarketing pixels on our website. These allow us to show our ads to people who have previously visited our site. The Google click ID (gclid) and Meta click ID (fbclid) are captured when you arrive from a paid ad and are used for attribution purposes.

Hyros tracking: Our website uses Hyros, an attribution platform, which uses browser fingerprinting and first-party data collection to track visitor sessions and associate them with conversion events. If you submit a contact form or provide your email or phone number, Hyros creates a lead record connecting your contact information to your session history on our site. This data is used solely to measure the effectiveness of our advertising and is not sold or shared with third parties outside of the services described in this policy.

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our website.

5. Third-party services

Our website and operations involve the following third-party services that may process your data:

• Google Analytics: website analytics. Google Privacy Policy
• Google Ads: advertising and remarketing. Google Privacy Policy
• Meta (Facebook/Instagram): advertising and remarketing. Meta Privacy Policy
• Hyros: attribution tracking. Hyros Privacy Policy
• WordPress / web hosting: website platform and hosting provider
• Pabbly Connect: workflow automation that routes contact form submissions to our team. Data is processed outside Canada. Pabbly Privacy Policy
• OpenAI: an automated classifier reads new contact form submissions (name, company, email, message) to help our team sort and prioritise them. It does not decide whether we respond. A person reads every submission. OpenAI Privacy Policy
• Slack: internal notification of new submissions. Slack Privacy Policy
• Mailgun: email delivery for internal notifications. Mailgun Privacy Policy
• Google Sheets: internal record of how submissions were sorted. Google Privacy Policy
• X (Twitter) Ads: advertising and remarketing pixel. X Privacy Policy
• ipify: looks up the public IP address of the browser when the contact form is submitted. The address is kept with the submission as part of our consent record and for fraud prevention. ipify
• ipwho.is and ipapi.co look up the approximate region a visitor is browsing from. We use this only to decide whether to show the Quebec consent banner, because Quebec residents must be asked before any tracking starts. The result is stored in the visitor’s own browser and we do not keep it. ipwho.is · ipapi.co

Each of these services has its own privacy policy governing how they handle data.

6. How we share information

We do not sell your personal information. We may share your information in the following limited circumstances:

• Service providers: Third-party vendors that help us operate our website and business, including those listed in Section 5 above. These parties are contractually required to handle your data in accordance with applicable privacy law.
• Legal requirements: If required by law, court order, or government authority.
• Business transfers: If LGG Media is acquired, merged with, or transfers substantially all of its assets to another entity, your information may be transferred as part of that transaction.
• Protection of rights: To protect the rights, property, or safety of LGG Media, our clients, or others.

Advertising measurement: When you submit our contact form, we share a hashed version of your email address (converted into a one-way code with SHA-256, so the platform never receives the address itself) and the reference number of your request with advertising platforms such as Google, Meta, Microsoft and OpenAI. We do this to measure and improve the performance of our own ads. To opt out, email privacy@lgg.media.

7. Data retention

We retain contact form submissions and related correspondence for as long as necessary to respond to your inquiry and for a reasonable period afterward in case you return as a prospective client. Active client data is retained for the duration of the engagement and for a period of seven years afterward to comply with our legal and accounting obligations.

Website analytics data is retained in accordance with Google Analytics' standard retention settings, which we have configured to 14 months.

You may request deletion of your personal information at any time by contacting us at privacy@lgg.media.

8. Client data: our role as data processor

In the course of providing paid advertising management, attribution infrastructure, and lead generation services to our clients, LGG Media processes personal data belonging to our clients' customers and prospects. This includes data flowing through Hyros, CRM systems, payment processors, and phone tracking systems that we configure and manage on behalf of clients.

In this context, LGG Media acts as a data processor, not a data controller. This means:

• Our clients are the data controllers responsible for the personal data of their customers and prospects. They determine the purpose and means of processing that data.
• LGG Media processes that data only on documented instructions from the client, as set out in the applicable Master Service Agreement.
• LGG Media does not use client customer data for any purpose other than performing the services contracted by the client.
• LGG Media does not sell, rent, or otherwise commercialize client customer data.
• Clients are responsible for ensuring they have a lawful basis to collect and share their customers' personal data with LGG Media and the third-party platforms, including Google, Meta, and Hyros, used in the delivery of services.

Data processing activities carried out on behalf of clients are governed by the data processing terms in each client's Master Service Agreement, which take precedence over this Privacy Policy with respect to client customer data.

9. Your rights

For residents of Canada (PIPEDA and provincial privacy laws):

• The right to access the personal information we hold about you
• The right to correct inaccurate information
• The right to withdraw consent to the collection or use of your personal information, subject to legal and contractual restrictions
• The right to file a complaint with the Office of the Privacy Commissioner of Canada

For residents of California (CCPA/CPRA):

• The right to know what personal information we collect, use, and disclose
• The right to delete personal information we have collected
• The right to opt out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

For residents of the European Economic Area or United Kingdom (GDPR/UK GDPR):

• Rights of access, rectification, erasure, restriction, portability, and objection
• The right to lodge a complaint with your local supervisory authority

To exercise any of these rights, contact us at privacy@lgg.media. We will respond within 30 days.

10. Data security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, use, or disclosure. These include access controls, encryption where appropriate, and limiting access to personal information to employees and contractors who need it to perform their duties.

No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your information.

11. International data transfers

LGG Media is based in Canada. We serve clients primarily in the United States. Information you provide may be processed and stored in Canada, the United States, or other countries where our service providers operate. Our service providers, including those listed in Section 5, process information in the United States, India and other countries. We remain responsible for personal information in the hands of our service providers and use contracts to require a comparable level of protection. If you are in Quebec, this means your information may be communicated outside Quebec. Visitors in Quebec are also asked before any analytics or advertising technology runs on this website. Until you accept, it stays off, and refusing does not restrict access to any part of the site.

12. Children's privacy

Our website and services are directed to businesses and business professionals. We do not knowingly collect personal information from individuals under the age of 16. If you believe we have inadvertently collected information from a minor, please contact us at privacy@lgg.media and we will delete it promptly.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Your continued use of our website after any changes constitutes your acceptance of the updated policy.

14. Contact us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or want to report a concern about how we handle your data, please contact us:

LGG Media
Privacy Officer: Juan Colicchio
Email: privacy@lgg.media
Phone: (613) 703-8739
Website: www.lgg.media/contact