Privacy Policy

Last Updated: May 11, 2026

This Privacy Policy explains how Pitbull Agency (“Pitbull Agency,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information when you visit https://pitbullagency.com/, contact us, submit a form, request a consultation, request a website or marketing audit, subscribe to communications, or use our digital marketing services.

This Privacy Policy is intended to describe our privacy practices for visitors, leads, prospects, clients, and business contacts, including individuals located in the European Union, European Economic Area, the United Kingdom, and the United States.

Specific legal rights and obligations may vary depending on your location and applicable law. Privacy obligations depend on the company’s actual data practices, tools, locations, contracts, and technical implementation.

Who We Are

Pitbull Agency is a full-cycle digital marketing agency that provides services such as digital strategy, SEO, PPC advertising, lead generation, web development, conversion rate optimization, analytics, email marketing, marketing automation, branding, creative production, and related consulting services.

For the purposes of the GDPR and UK GDPR, we may act as a data controller when we collect and use personal information through our website, contact forms, marketing communications, and business development activities.

When we process personal information on behalf of a client in connection with advertising, analytics, CRM, SEO, email, or other marketing services, we may act as a data processor or service provider, depending on the contract and applicable law.

Data Protection Contact

Pitbull Agency has not appointed a formal Data Protection Officer unless required by applicable law. Privacy questions, requests, or concerns may be sent to our privacy contact at Official.pitbullagency@gmail.com. If we are required to appoint an EU or UK representative under applicable data protection laws, we will update this Privacy Policy with the representative’s contact details.

Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through:

our website;
contact forms;
consultation requests;
free audit or website check forms;
newsletter or marketing sign-up forms, if used;
email, messenger, phone, or social media communications;
analytics and tracking technologies;
advertising and retargeting activities, if used;
client onboarding and project delivery;
CRM, reporting, and marketing automation systems;
business development, partnerships, and vendor communications.

This Privacy Policy does not apply to third-party websites, platforms, advertising networks, social media platforms, or client-owned systems that we do not control.

Personal Information We Collect

We collect only the categories of personal information that are relevant to our business relationship, website functionality, marketing, analytics, and service delivery.

Information you provide directly

We may collect:

first and last name;
email address;
phone number;
company name;
job title;
website URL;
business location;
message or request details;
consultation preferences;
project requirements;
marketing goals;
budget or service interest, if submitted;
information provided during calls, emails, or client onboarding;
billing and payment-related information, if you become a client or make a payment to us;
contract and business communication records.

Information collected automatically

When you visit our website, we may collect:

IP address;
device type;
browser type;
operating system;
pages viewed;
referring URLs;
session data;
approximate location derived from IP address;
cookie identifiers;
analytics events;
advertising interaction data, if advertising pixels are used;
website performance and security logs.

Information processed for clients

When providing services, we may process information contained in or connected to client systems, such as:

advertising account data;
analytics data;
CRM records;
lead and customer data;
website traffic data;
campaign performance data;
conversion data;
email marketing data;
sales funnel data;
reporting and attribution data.

The exact categories depend on the services selected by the client and the tools used.

Sensitive personal information

We do not intentionally request sensitive personal information through our website forms. Please do not submit sensitive information such as government identification numbers, financial account details, health information, biometric data, precise geolocation, religious beliefs, political opinions, or other sensitive information unless we specifically request it and have a lawful reason to process it. We do not use or disclose sensitive personal information for purposes that would require a right to limit the use or disclosure of sensitive personal information under California law, unless we provide additional notice and a method to exercise that right where required.

Sources of Personal Information

We may collect personal information from:

you directly, when you submit a form, contact us, or communicate with us;
your company or employer;
our website and tracking technologies;
analytics tools;
advertising platforms;
CRM and email marketing tools;
social media platforms, if you interact with us there;
public business sources, such as company websites or professional profiles;
clients, when they provide access to accounts, systems, or data for service delivery;
service providers and business partners.

If we receive personal information from a client or third party, we process it according to the applicable contract and privacy obligations.

How We Use Personal Information

We may use personal information to:

respond to your inquiries;
provide consultations;
prepare proposals;
send audit results or website check reports;
evaluate whether our services fit your business needs;
provide digital marketing, SEO, PPC, analytics, lead generation, web development, CRO, email marketing, and automation services;
manage client relationships;
create reports and performance insights;
configure and optimize campaigns;
improve our website and user experience;
analyze website traffic and marketing performance;
send marketing communications where permitted;
manage events, webinars, or content downloads, if applicable;
protect our website, systems, and business;
prevent fraud, abuse, spam, and security incidents;
comply with contracts, legal obligations, accounting, tax, and regulatory requirements;
enforce our agreements;
manage business transfers, restructuring, or similar transactions.

We do not use personal information for purposes that are materially different from those described in this Privacy Policy unless we provide additional notice or obtain consent where required.

Notice at Collection for California Residents

This section applies to California residents where the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to Pitbull Agency. At or before the point of collection, we may collect identifiers, business contact information, internet or network activity information, commercial information, professional or employment-related information, and inferences related to your service interest, business needs, marketing goals, or interaction with our website.

We collect and use this information to respond to inquiries, provide consultations, prepare proposals, deliver services, manage client relationships, measure marketing and website performance, improve our services, protect our website and systems, comply with legal obligations, and enforce our agreements. We may disclose this information to service providers, contractors, advertising and analytics partners, CRM and marketing automation providers, security providers, professional advisors, and other third parties as described in this Privacy Policy.

We do not knowingly collect, sell, or share personal information of consumers under 16 years of age. For more information about your California privacy rights, including your rights to access, delete, correct, opt out of sale or sharing, and limit certain uses of sensitive personal information, please see the “Your Privacy Rights” section below.

Legal Bases for Processing under GDPR

For individuals in the EU/EEA and the UK, we rely on the following legal bases depending on the purpose of processing:

Responding to inquiries and consultation requests

We process personal information to respond when you contact us, submit a form, request a consultation, or ask about our services.

Legal basis: pre-contractual steps or legitimate interests.

This means we may process your information when it is necessary to take steps before entering into a contract, or when we have a legitimate business interest in responding to your request.

Preparing proposals and discussing services

We use personal information to understand your business needs, discuss potential services, prepare proposals, and communicate about possible cooperation.

Legal basis: pre-contractual steps or legitimate interests.

This allows us to evaluate whether our services are suitable for your request and to provide relevant information before a formal agreement is signed.

Providing services to clients

We process personal information when delivering our services to clients, including digital marketing, analytics, advertising, SEO, web development, reporting, and related work.

Legal basis: contract or legitimate interests.

This means processing may be necessary to perform a contract with a client, or it may be based on our legitimate interest in providing professional services.

Managing client relationships

We use personal information to communicate with clients, manage projects, maintain business records, coordinate work, and support ongoing cooperation.

Legal basis: contract or legitimate interests.

This processing helps us operate the client relationship and provide effective service delivery.

Website analytics

We may use analytics tools to understand how visitors use our website, improve website performance, measure traffic, and identify technical or usability issues.

Legal basis: consent where required; legitimate interests where permitted.

In jurisdictions where consent is required for analytics cookies or similar technologies, we rely on consent. Where the law allows it, we may rely on legitimate interests.

Advertising pixels, retargeting, and personalized ads

We may use advertising pixels, retargeting tools, and similar technologies to measure advertising performance, show relevant ads, and understand how users interact with our marketing campaigns.

Legal basis: consent where required.

Where applicable law requires consent for advertising cookies, retargeting, or personalized advertising, we will rely on your consent before using these technologies.

Email marketing

We may use personal information to send marketing emails, newsletters, service updates, or other business communications.

Legal basis: consent or legitimate interests, depending on jurisdiction and context.

In some cases, we rely on your consent. In other cases, where permitted by law, we may rely on legitimate interests, especially for relevant business-to-business communications.

Security, fraud prevention, and abuse prevention

We process personal information to protect our website, systems, business, users, and clients from fraud, spam, unauthorized access, abuse, and security incidents.

Legal basis: legitimate interests.

This processing is based on our legitimate interest in maintaining the security and integrity of our website, systems, and business operations.

Accounting, tax, and legal compliance

We process personal information when necessary to meet accounting, tax, regulatory, recordkeeping, and other legal obligations.

Legal basis: legal obligation.

This means we process certain information because the law requires us to keep or use it for compliance purposes.

Legal claims and contract enforcement

We may process personal information to establish, exercise, defend, or enforce legal rights, contracts, policies, and claims.

Legal basis: legitimate interests or legal obligation.

This may include using information to resolve disputes, enforce agreements, respond to legal requests, or protect our rights.

Our legitimate interests include operating and improving our business, communicating with business contacts, securing our website, analyzing performance, and providing relevant B2B services. We balance these interests against your privacy rights. You may object to processing based on legitimate interests where applicable.

Cookies and Tracking Technologies

We may use cookies, pixels, tags, scripts, local storage, and similar technologies to operate our website, remember preferences, analyze traffic, measure campaign performance, and support advertising activities.

Cookies may include:

Where required by law, we will ask for your consent before placing non-essential cookies or using tracking technologies for analytics, advertising, retargeting, or personalized ads. You can manage your cookie preferences through our cookie banner or “Manage Cookie Preferences” link.

If you are located in the EU/EEA, UK, or Switzerland, non-essential analytics and advertising cookies should not be activated before valid consent is obtained, where required.

How We Share Personal Information

We may share personal information with:

hosting, CDN, and security providers;
website maintenance providers;
CRM providers;
email marketing and automation platforms;
analytics providers;
advertising platforms;
payment processors;
accounting and legal advisors;
contractors and team members who support service delivery;
project management and communication tools;
social media platforms, if you interact with us there;
clients, where information is processed as part of service delivery;
government authorities, courts, or regulators where required by law;
buyers, investors, or successors in connection with a business transaction.

We require service providers to process personal information only for authorized purposes and to use appropriate confidentiality and security measures. We do not authorize service providers to use personal information for their own unrelated purposes unless legally permitted and disclosed.

Sale, Sharing, Targeted Advertising, and Opt-Out Rights

Some US privacy laws, including the California Consumer Privacy Act as amended by the CPRA, use broad definitions of “sale,” “sharing,” and “targeted advertising.” These definitions may include certain disclosures to advertising networks, analytics providers, retargeting platforms, or social media platforms, even when no money is exchanged.

Because our website and services may use analytics, advertising pixels, retargeting, CRM, or third-party marketing tools, we do not state that we “do not sell or share” personal information unless this has been technically and legally confirmed.

Depending on your location and applicable law, you may have the right to opt out of:

To exercise these rights, use:

Where required by applicable law, we will honor legally recognized opt-out preference signals, such as Global Privacy Control, if our website is technically configured to receive and process such signals.

Automated Decision-Making / Profiling

We do not make decisions based solely on automated processing that produce legal or similarly significant effects concerning you. We may use analytics, advertising audiences, CRM segmentation, campaign attribution, website behavior data, and similar tools to understand business interest, measure marketing performance, personalize business communications where permitted, and improve our website and services.

These activities may involve limited profiling or audience segmentation, but they are generally used for marketing analysis, lead attribution, campaign measurement, and business communication rather than decisions that have legal or similarly significant effects. Depending on your location and applicable law, you may have the right to opt out of certain profiling, targeted advertising, or similar processing activities as described in this Privacy Policy.

International Data Transfers

We may process and store personal information in countries other than the country where you live, including Ukraine, the United States, the European Union, the United Kingdom, and other countries where our service providers operate. These countries may have data protection laws that differ from those in your location.

Where required, we use appropriate safeguards for international transfers, which may include:

Standard Contractual Clauses;
UK International Data Transfer Addendum or other UK-approved transfer mechanisms;
Data Processing Agreements and contractual privacy, confidentiality, and security obligations;
vendor due diligence and transfer risk assessments where applicable;
technical and organizational security measures designed to protect personal information;
other lawful transfer mechanisms permitted by applicable data protection laws.

Data Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Contact form inquiries

We retain information submitted through contact forms for the period needed to respond to your request, manage follow-up communication, and maintain business records.

Retention period: 24 months after the last interaction, unless a longer period is required to resolve a dispute, comply with legal obligations, or maintain necessary business records.

Consultation and proposal records

We retain information related to consultations, service discussions, proposals, and pre-contract communications for business, reference, and legal purposes.

Retention period: up to 24 months after the last interaction if no contract is signed, unless a longer period is needed for legal, accounting, dispute-resolution, or compliance purposes.

Client contract records

We retain client contracts and related business records for the duration of the client relationship and for any additional period required for legal, tax, accounting, or dispute-resolution purposes.

Retention period: for the term of the client relationship and up to 7 years after the end of the relationship, unless a longer period is required by applicable law or needed to establish, exercise, or defend legal claims.

Marketing email records

We retain marketing email records to manage subscriptions, preferences, unsubscribe requests, and suppression lists.

Retention period: until you unsubscribe or request deletion. We may retain limited suppression-list information, such as your email address and opt-out status, for as long as necessary to ensure that we do not send you future marketing emails.

Website analytics data

We retain website analytics data according to the settings and retention periods configured in the analytics tools we use.

Retention period: up to 26 months where the analytics tool allows configuration, unless the data is aggregated, anonymized, or required for security, legal, or business-record purposes.

Advertising and retargeting data

We retain advertising, conversion tracking, retargeting, and campaign performance data according to the settings and retention periods of the advertising platforms we use.

Retention period: for the period available or configured within the relevant advertising platform, and no longer than reasonably necessary for campaign measurement, reporting, attribution, fraud prevention, legal compliance, or opt-out management.

Cookie data

Cookie-related data is retained according to the duration of the relevant cookie or tracking technology, as described in our Cookie Policy where available.

Retention period: for the lifetime of the relevant cookie or until you delete cookies, change your browser settings, withdraw consent, or adjust your cookie preferences, where applicable.

Payment and invoice records

We retain payment, invoice, billing, and transaction-related records for accounting, tax, legal, and financial reporting purposes.

Retention period: up to 7 years after the transaction or the end of the client relationship, unless a longer period is required by applicable tax, accounting, financial, anti-fraud, or legal obligations.

Security logs

We retain security logs to protect our website, systems, users, clients, and business from fraud, abuse, unauthorized access, and security incidents.

Retention period: up to 12 months, unless a longer period is required to investigate security incidents, prevent fraud or abuse, comply with legal obligations, or protect our legal rights.

Client project data

We retain client project data according to the applicable client agreement, Data Processing Agreement, project requirements, and legal obligations.

Retention period: for the duration of the project or client relationship and for a reasonable period afterward as needed for reporting, backup, continuity, legal, accounting, dispute-resolution, or compliance purposes. Where we process personal information on behalf of a client, retention and deletion may be governed by the client agreement or Data Processing Agreement.

If we cannot delete information immediately due to legal, security, backup, or compliance reasons, we will limit its use and retain it only as needed.

Your Privacy Rights: EU/EEA, UK, California, and Other US States

EU/EEA and UK rights

Depending on the circumstances, you may have the right to:

access your personal information;
correct inaccurate information;
request deletion;
restrict processing;
object to processing based on legitimate interests;
object to direct marketing;
request data portability;
withdraw consent at any time;
lodge a complaint with a data protection authority.

Withdrawing consent does not affect processing that happened before withdrawal.

California privacy rights

If you are a California resident and the CCPA/CPRA applies to us, you may have the right to:

know what categories of personal information we collect;
know the sources of personal information;
know the purposes for collection, use, disclosure, sale, or sharing;
know the categories of third parties to whom information is disclosed;
request access to specific pieces of personal information;
request deletion;
request correction;
opt out of sale or sharing;
limit use and disclosure of sensitive personal information, if applicable;
not be discriminated against for exercising privacy rights.

Other US state privacy rights

Depending on your state, you may have rights to:

access personal information;
correct personal information;
delete personal information;
obtain a portable copy;
opt out of targeted advertising;
opt out of sale;
opt out of certain profiling;
appeal a denied privacy request.

These rights vary by state and may be subject to exceptions.

How to Exercise Your Rights

You can submit a privacy request by contacting us at:

Please include enough information for us to verify your identity and understand your request. We may ask for additional information if needed to verify your request. We will respond within the timeframe required by applicable law.

How we verify requests

We may verify your request by matching the information you provide with information we already have, such as your email address, name, company name, prior communications, form submissions, or client records. We will use verification information only to process and respond to your privacy request, maintain request records, comply with legal obligations, prevent fraud or unauthorized access, and protect privacy and security.

If we cannot reasonably verify your identity or authority to make the request, we may deny the request, limit our response, or ask for additional information where permitted by law. Authorized agents may submit requests where permitted by law. We may require proof that the agent is authorized to act on your behalf. If we deny your request, you may have the right to appeal depending on your location. Appeal instructions will be included in our response where required.

Marketing Communications

We may send marketing communications if you subscribe, request content, contact us about services, or otherwise provide information in a context where marketing communication is permitted by law. You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or contacting us directly.

We do not intend to send marketing emails without a valid legal basis. Where consent is required, we will request it separately. Transactional, service-related, or legal communications may still be sent even if you unsubscribe from marketing emails.

Children’s Privacy

Our website and services are intended for business users and are not directed to children. We do not knowingly collect personal information from children under 13. For EU/UK users, we do not intentionally offer services directly to children under 16.

Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

These safeguards may include:

access controls;
confidentiality commitments;
secure business tools;
vendor review;
limited access to project data;
secure account management practices;
backup and recovery measures where appropriate;
internal procedures for handling personal information.

No website, transmission, or storage system is completely secure. We cannot guarantee absolute security. If we become aware of a data incident that requires notification, we will notify affected individuals, clients, regulators, or other parties as required by applicable law and contract.

Third-Party Links

Our website may contain links to third-party websites, platforms, social media pages, or tools. We are not responsible for the privacy practices, content, or security of third-party websites. We encourage you to review the privacy policies of any third-party websites or services you use.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top of this page shows when the Privacy Policy was last revised. If we make material changes, we may provide additional notice where required by law. Your continued use of the website after changes are posted means the updated Privacy Policy applies from the effective date, unless applicable law requires otherwise.

Contact Information

For privacy questions or requests, contact us at: