Privacy Policy

1. Information we collect

1.1 Information you provide directly

When you interact with us through our website or services, we may collect the following personal data:

• Contact information: Your name and email address, provided when you fill out our contact form or communicate with us via email.
• Podcast information: Your podcast name, podcast URL, and any details you share about your show through our contact form or during onboarding.
• Message content: Any messages, questions, or project details you submit through the contact form or send via email.
• Payment information: Billing details necessary to issue invoices and process payments via Wise, Payoneer, and direct bank wire transfers. We do not collect, store, or process credit card data on our servers. We do not use PayPal or Stripe.

1.2 Information collected automatically

We do not run our own website analytics. Our hosting provider (Cloudflare) processes standard server-log data on our behalf to keep the site secure and reliable. This may include:

• Technical data: IP address, browser type, operating system, and the pages requested.
• Security data: Information used to detect and prevent abuse, spam, and attacks.

We do not combine this server-log data into individual visitor profiles or use it for advertising.

2. How we use your information

We use the personal data we collect for the following purposes:

• Providing services: To deliver our podcast content repurposing services, communicate about project deliverables, and manage the client relationship.
• Responding to inquiries: To reply to your contact form submissions and email communications.
• Processing payments: To issue invoices and receive payments for our services via Wise, Payoneer, and direct bank wire transfers.
• Improving our website: To understand how visitors use our site so we can improve its content, functionality, and user experience.
• Marketing communications: To send you information about our services, offers, or industry insights, only if you have opted in to receive such communications. You may unsubscribe at any time.
• Legal obligations: To comply with applicable legal requirements, resolve disputes, and enforce our agreements.

3. Legal basis for processing (GDPR)

For our clients and website visitors in the United Kingdom and European Economic Area, we process personal data under the following legal bases:

• Contractual necessity: Processing required to fulfill our service agreements with you.
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving our website and services, provided these do not override your fundamental rights.
• Consent: Where you have given clear consent for us to process your personal data for specific purposes, such as marketing emails. You can withdraw consent at any time.
• Legal obligation: Where processing is necessary to comply with a legal requirement.

4. Cookies and tracking technologies

We keep cookies to a minimum. Our website does not run its own analytics (such as Google Analytics) or advertising cookies. The only cookies that may be set come from third-party tools we embed, namely the Tally contact form and the Calendly scheduling link, and our hosting provider may set strictly necessary cookies for security and reliability. For full details, please see our Cookie Policy.

5. Third-party services

We work with trusted third-party service providers who may have access to your personal data to the extent necessary to perform their functions:

• Tally: Powers the contact form on our contact page and processes the details you submit through it. Tally Privacy
• Calendly: Powers our "book a call" scheduling link and processes the details you provide when booking. Calendly Privacy Policy
• Cloudflare: Hosts the website and processes standard server logs to keep it secure and reliable. Cloudflare Privacy Policy
• Wise (TransferWise): Receives international payments on our behalf and handles currency conversion. Wise is a regulated financial institution and processes payer details in accordance with applicable financial regulations. Wise Privacy Policy
• Payoneer: Receives international payments on our behalf for clients who prefer Payoneer. Payoneer Privacy Policy
• Email marketing platforms: We may use email marketing services to send newsletters and updates to subscribers who have opted in. These platforms process your name and email address on our behalf.

Each third-party provider is bound by their own privacy policies and applicable data protection regulations. We do not sell, rent, or trade your personal data to any third party.

6. Data retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Client records: Retained for the duration of our business relationship and for up to 3 years after the last interaction, to support any follow-up needs and for accounting purposes.
• Contact form submissions: Retained for up to 12 months from the date of submission, unless a business relationship is established.
• Analytics data: Google Analytics data is retained for 14 months, after which it is automatically deleted.
• Marketing data: Retained until you unsubscribe or request deletion.

When personal data is no longer needed, it is securely deleted or anonymized.

7. Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of any inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data, subject to certain legal exceptions.
• Right to restrict processing: Request that we limit how we use your data in certain circumstances.
• Right to data portability: Request your data in a structured, commonly used, machine-readable format.
• Right to object: Object to the processing of your data for direct marketing or based on our legitimate interests.
• Right to withdraw consent: Where we process data based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us through our contact form. We will respond to your request within 30 days.

8. Data security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted communications (SSL/TLS), secure access controls, and regular reviews of our data handling practices.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

9. International data transfers

Podcast Growth Studio operates from Pakistan and serves clients globally, including in the United Kingdom and the European Economic Area. When you provide us with personal data, it may be transferred to and processed in Pakistan. We ensure that appropriate safeguards are in place to protect your data in compliance with GDPR requirements, including the use of standard contractual clauses where applicable.

10. Children's privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will promptly delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. Any updates will be posted on this page with the revised "Last updated" date. We encourage you to review this page periodically to stay informed about how we protect your data.

12. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

• Data Controller: Fahad Younis, Podcast Growth Studio
• Contact: via our contact form
• Website: podcastgrowthstudio.com

If you are located in the EU or UK and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection supervisory authority.