Privacy Policy

Section 01

Who We Are

AdFlux Ltd ("AdFlux", "we", "us", or "our") is a digital marketing agency specializing in Search Engine Optimization (SEO), Content Marketing, Website Design, and digital advertising consultancy services.

We are registered as a limited company and operate as the data controller for the personal information we process in connection with our services.

This Privacy Policy applies to all information collected through our website (adfluxltd.com), related domains, social media, marketing communications, and in the course of delivering our services.

Section 02

Information We Collect

We collect different types of information depending on how you interact with us. This includes information you provide directly, and information collected automatically.

2.1 Information You Provide to Us

• Identity Data: Full name, job title, company name
• Contact Data: Email address, phone number, mailing address
• Account Data: Username, password (hashed), account preferences
• Transaction Data: Billing information, payment details, invoices, purchase history
• Communication Data: Messages, emails, support tickets, form submissions
• Project Data: Briefs, files, strategies, and materials shared with us during service delivery
• Marketing Preferences: Your opt-in/opt-out preferences for our marketing communications

2.2 Information We Collect Automatically

• Usage Data: Pages visited, time on site, links clicked, referral URLs
• Technical Data: IP address, browser type and version, device type, operating system
• Cookie Data: Session cookies, analytics cookies, preference cookies (see Section 6)
• Location Data: Approximate geographic location derived from IP address

2.3 Information from Third Parties

• Data from analytics providers such as Google Analytics
• Data from advertising platforms (Google Ads, Meta Ads) in the course of campaign management
• Publicly available information (LinkedIn, business directories) for outreach purposes
• Referrals from partners or clients

Section 03

How We Use Your Information

We use the information we collect for the following purposes:

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose.

Section 04

Legal Basis for Processing

Under applicable data protection law (including GDPR where applicable), we rely on the following legal bases to process your personal data:

• Contractual Necessity: Processing required to perform our contract with you or to take steps prior to entering into a contract at your request (e.g., delivering SEO or design services).
• Legitimate Interests: We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your data protection rights (e.g., improving our website, security monitoring, business analytics).
• Consent: Where you have given explicit consent for us to process your data for a specific purpose (e.g., subscribing to our newsletter or accepting optional cookies).
• Legal Obligation: Where we are required to process data to comply with a legal obligation (e.g., tax records, fraud prevention).

You may withdraw consent at any time by contacting us at support@adfluxltd.com. Withdrawal of consent does not affect the lawfulness of processing prior to its withdrawal.

Section 05

Sharing Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your data in the following limited circumstances:

5.1 Service Providers & Sub-processors

We engage trusted third-party providers who process data on our behalf to deliver our services. These include:

• Cloud hosting and infrastructure providers
• CRM and project management software
• Email and communication platforms
• Analytics and performance monitoring tools
• Payment processing providers (Stripe, PayPal, etc.)
• Accounting and invoicing software

All sub-processors are bound by contractual obligations to handle your data securely and in accordance with applicable data protection laws.

5.2 Professional Advisors

We may share data with lawyers, accountants, auditors, and insurers where necessary for legal, financial, or compliance purposes, subject to confidentiality obligations.

5.3 Legal Requirements

We may disclose your information if required by law, court order, regulatory authority, or to protect the rights, property, or safety of AdFlux Ltd, our clients, or the public.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity, who will be bound by this Privacy Policy.

Section 06

Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and help us understand how visitors use our site.

On your first visit, you will be presented with a cookie consent banner. You can update your cookie preferences at any time via the "Cookie Settings" link in our website footer, or by clearing cookies in your browser settings.

Section 07

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.

• Client service data: Retained for the duration of the service agreement plus 5 years thereafter.
• Financial and transaction records: Retained for 7 years in accordance with tax and accounting regulations.
• Marketing data (email lists): Retained until you unsubscribe or withdraw consent, plus 6 months for suppression records.
• Website analytics data: Retained for up to 26 months in anonymized or aggregated form.
• Support and communication records: Retained for 3 years from the date of last contact.
• Job applicant data: Retained for 12 months if unsuccessful, or for the duration of employment if successful.

When data is no longer required, we will securely delete or anonymize it in accordance with our data disposal procedures.

Section 08

International Data Transfers

AdFlux Ltd operates primarily in Vietnam. Some of our third-party service providers are located outside your country, which may involve transferring your data internationally.

Whenever we transfer data internationally, we ensure that appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by relevant data protection authorities
• Adequacy decisions by the relevant regulatory body
• Binding Corporate Rules (BCRs) where applicable
• Certification schemes such as the EU–US Data Privacy Framework

Section 09

Your Rights

Depending on applicable data protection law in your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you (a "Subject Access Request").
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where there is no compelling reason for us to continue processing it ("right to be forgotten").
• Right to Restrict Processing: Request that we suspend processing of your personal data in certain circumstances.
• Right to Data Portability: Request transfer of your personal data to you or a third party in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Rights Related to Automated Decision-Making: Request human review of automated decisions made about you, where applicable.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please submit a written request to support@adfluxltd.com. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are dissatisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

Section 10

Data Security

We take the security of your personal data seriously and have implemented appropriate technical and organizational measures to protect it against unauthorized access, loss, alteration, or disclosure.

• SSL/TLS encryption on all data transmitted to and from our website
• Encrypted storage of sensitive data at rest
• Role-based access controls — data accessible only to authorized personnel on a need-to-know basis
• Regular security audits and vulnerability assessments
• Multi-factor authentication (MFA) on all internal systems
• Staff training on data protection and security best practices
• Incident response plan for data breaches

Section 11

Children's Privacy

Our services are intended for business professionals and are not directed at individuals under the age of 16 years.

We do not knowingly collect, solicit, or process personal data from children under 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will delete it immediately.

If you believe we may have collected information from a child under 16, please contact us immediately at support@adfluxltd.com.

Section 12

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When this page is updated, we will revise the version number noted in the document header.

For material changes, we will notify you by:

• Displaying a prominent notice on our website
• Sending an email notification to registered users
• Requesting renewed consent where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after a policy update constitutes your acceptance of the revised terms.