Privacy Policy

AEACommerce is an e-commerce growth agency providing Ads management (Google Ads, Meta Ads), SEO, and Google Shopping system services to online store owners worldwide. We act as the data controller in relation to any personal information you provide to us directly through our website.

For questions about this policy or your data, you can reach us at the contact details provided at the end of this document.

We collect information in two ways: directly from you, and automatically when you use our website.

Information you provide directly:

• Contact details such as name, email address, phone number, and business name when you fill out a contact form, request a consultation, or sign up for our services
• Business information including your store URL, advertising budget, and platform details when onboarding as a client
• Payment and billing information processed through our secure payment processors (we do not store full card data ourselves)
• Communication content when you email us or use our chat tools

Information collected automatically:

• Usage data such as pages visited, time spent on site, and clicks
• Device and browser information (browser type, operating system, screen resolution)
• IP address and approximate geographic location
• Referral sources (e.g. which Google search or ad brought you to our site)
• Conversion events tracked via Google Tag Manager, Google Ads conversion tags, and Meta Pixel

We use the information we collect to:

• Respond to your inquiries and provide the services you have requested
• Manage your client account, deliver campaign reports, and communicate campaign performance
• Process payments and send invoices
• Improve our website experience, landing pages, and conversion funnels
• Run our own Google Ads and Meta Ads campaigns to attract relevant prospective clients (using anonymised audience data)
• Send you service-related communications and, where you have consented, marketing emails about our offers and insights
• Comply with legal obligations

Where applicable (e.g. for visitors based in the EU/EEA or UK), we rely on the following legal bases under GDPR:

We use cookies and similar tracking technologies on our website. These include:

• Essential cookies – required for the website to function (session management, security)
• Analytics cookies – Google Analytics / GA4 to understand how visitors use our site
• Advertising cookies – Google Ads conversion tracking and the Meta Pixel, used to measure the performance of our own paid campaigns and build remarketing audiences
• Functional cookies – remembering your preferences and form data

You can manage or withdraw consent for non-essential cookies at any time via our cookie settings banner, or by adjusting your browser settings. Note that disabling certain cookies may affect site functionality.

For more on how Google uses data from sites that use its tools, visit google.com/policies/privacy/partners.

We work with trusted third-party services to operate our website and deliver services. These may include:

• Google LLC – Google Analytics, Google Ads, Google Tag Manager, Google Search Console
• Meta Platforms, Inc. – Meta Pixel, Meta Business Suite
• Stripe / payment processors – for secure payment handling
• Email service providers – for transactional and marketing emails
• Hosting providers – for website and data hosting infrastructure

Each of these providers has their own privacy policy. We recommend reviewing them separately. We only share the minimum data necessary for these providers to perform their functions.

We do not sell, rent, or trade your personal data to any third parties for their own marketing purposes.

We may disclose your information in the following limited circumstances:

• To our service providers and sub-processors who assist in running our operations (as described above), bound by data processing agreements
• If required by law, court order, or government authority
• To protect the rights, property, or safety of AEACommerce, our clients, or others
• In connection with a business sale or merger, where your data may be transferred as part of that transaction (you will be notified in advance)

We retain your personal data only for as long as necessary for the purposes outlined in this policy or as required by law:

• Client data – retained for the duration of our engagement and up to 5 years afterward for legal and financial record-keeping
• Enquiry / contact form data – retained for up to 2 years if no engagement follows
• Marketing consent records – retained until you withdraw consent, plus a reasonable administrative period
• Analytics data – typically 14 months in Google Analytics (our default setting)

When data is no longer needed, we securely delete or anonymise it.

Depending on your location, you may have the following rights regarding your personal data:

• Access – request a copy of the personal data we hold about you
• Rectification – ask us to correct inaccurate or incomplete data
• Erasure – request deletion of your data ("right to be forgotten")
• Restriction – ask us to limit how we process your data
• Portability – receive your data in a structured, machine-readable format
• Object – object to processing based on legitimate interests or for direct marketing
• Withdraw consent – where processing is based on consent, withdraw it at any time without affecting prior processing

To exercise any of these rights, contact us using the details at the end of this policy. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

We take the security of your data seriously. We implement industry-standard technical and organisational measures including SSL/TLS encryption on all data in transit, access controls limiting who within our team can access personal data, and regular security reviews of our infrastructure and third-party tools.

However, no method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

AEACommerce operates internationally and your data may be transferred to and processed in countries outside your own, including the United States, where our third-party service providers (such as Google and Meta) operate.

Where personal data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses (SCCs) approved by the European Commission — to protect your data in accordance with applicable law.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify active clients by email.

We encourage you to review this page periodically. Continued use of our website or services after any changes constitutes acceptance of the updated policy.