Your data, handled

01Who this policy covers

This Privacy Policy explains how Thrievo ("Thrievo," "we," "us," "our") handles information when you visit our website, fill in a form, book a call, email or phone us, or work with us as a client.

Thrievo is a marketing agency. We run social media, paid social advertising, websites, funnels, lead generation, graphic design, content and online-presence work for small and mid-sized businesses. That work sometimes means handling data on behalf of our clients, which we cover in its own section below.

By using our website or our services, you agree to the practices described here. If you do not agree, please stop using the site and let us know so we can close out anything we hold.

02Information we collect

Information you give us

• Your name, business name, email address and phone number when you submit our contact form, book a strategy call or email us.
• Anything you write in a message to us — what your business does, what you are struggling with, budgets, goals, timelines.
• Billing information needed to invoice you. Card and bank details are handled by our payment processors, not stored by us.
• Materials you hand over during a project: logos, photos, copy, product information, brand guidelines, existing customer lists.

Information collected automatically

• Device and browser type, operating system, screen size and language.
• Pages viewed, links clicked, time on page, and the page or ad that sent you here.
• An approximate location derived from your IP address — city or region level, not a street address.

Information from third parties

• Aggregate campaign and audience reporting from advertising and analytics platforms.
• Publicly available business information used for research and outreach.
• Referral details when an existing client or partner introduces you to us.

03How we use information

We use the information above to:

• Reply to your enquiry, schedule your strategy call and prepare for it.
• Send proposals, contracts, invoices and receipts.
• Deliver, manage and report on the services you have hired us for.
• Send service updates, and — only where you have opted in — marketing emails about what we do. Every marketing email has an unsubscribe link.
• Understand which pages, ads and messages actually work, so we can improve our own marketing.
• Keep the site secure, prevent spam and abuse, and troubleshoot problems.
• Meet our accounting, tax and record-keeping obligations.

We do not make decisions with legal or similarly significant effects about you using automated processing alone.

04Why we are allowed to use it

Where data protection law requires us to name a legal basis, we rely on one of the following:

• Contract — to provide the services you have engaged us for, or to take steps you asked for before entering an agreement.
• Legitimate interests — to run and improve our business, secure our site, and market our services to businesses in a proportionate way.
• Consent — for non-essential cookies and for marketing emails where consent is required. You can withdraw consent at any time.
• Legal obligation — to keep financial records and respond to lawful requests.

05Cookies and similar technologies

Our site uses cookies and similar technologies — small files stored by your browser — to keep the site working and to measure how it performs.

• Essential — needed for the site to load and function. These cannot be switched off.
• Analytics — tell us which pages are visited and where visitors come from, in aggregate.
• Advertising — where used, let advertising platforms measure whether an ad led to an enquiry, and show relevant ads to people who have visited us.

You can block or delete cookies in your browser settings. Blocking essential cookies may break parts of the site. Where the law requires it, we ask for your permission before setting non-essential cookies.

We honour Global Privacy Control signals where our systems detect them.

06When we share information

We do not sell your personal information, and we do not share it for cross-context behavioural advertising in exchange for money.

We do share information in these situations:

• Service providers we rely on to operate — website hosting, email, form handling, scheduling, cloud storage, project management, accounting and payment processing. They may only use the data to provide their service to us.
• Advertising and analytics platforms such as Meta, Google, LinkedIn and TikTok, when we run or measure campaigns. Their own privacy policies apply to what they do with the data.
• Legal reasons — where we are required to by law, court order or a valid government request, or to protect our rights, safety or property.
• Business transfer — if Thrievo is ever merged, acquired or reorganised, information may transfer as part of that deal. We will tell you if it materially changes how your data is handled.

07Data we handle for clients

When we run marketing for a client, we often work inside systems that hold that client's customer data — ad accounts, email platforms, CRMs, analytics and social accounts.

In that work the client decides what data is collected and why. We act on their instructions. Specifically:

• We only access what we need to do the job, and only for as long as the engagement runs.
• We do not use one client's customer data to benefit another client.
• We do not add a client's customer list to our own marketing lists.
• On request, or when an engagement ends, we return or delete the data we hold and hand back account access.

If you are a customer of one of our clients and want your data corrected or removed, please contact that business directly — they hold the relationship. You can also contact us and we will pass the request along.

08How long we keep it

• Enquiries that do not become clients — up to 24 months, then deleted.
• Client project files and correspondence — for the engagement plus 24 months, in case you come back or need past work.
• Invoices and financial records — as long as tax and accounting rules require.
• Analytics data — retained in aggregate; individual-level records expire on the platform's own schedule.

You can ask us to delete your information sooner and we will, unless we are legally required to keep it.

09How we protect it

We use reasonable technical and organisational measures to protect information: encrypted connections, access limited to people who need it, multi-factor authentication on business accounts, and reputable vendors for storage and processing.

No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and any required authority as the law requires.

10Your rights and choices

Depending on where you live, you may have the right to:

• Ask what personal information we hold about you and get a copy.
• Have inaccurate information corrected.
• Have your information deleted.
• Object to or restrict certain processing, including direct marketing.
• Receive your data in a portable format.
• Withdraw consent where we relied on it.
• Opt out of the sale or sharing of personal information — we do not do either, but the right stands.
• Not be discriminated against for exercising any of these rights.

To exercise a right, email hello@thrievo.com from the address you use with us, or write to us at the postal address below. We will verify your identity before acting and respond within the timeframe the law allows. An authorised agent may act on your behalf with written proof.

To stop marketing email, click unsubscribe in any message. You will still receive necessary service messages about active work.

11Children

Our website and services are aimed at businesses, not children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, email us and we will delete it.

12International transfers

We work with clients and vendors in different countries, so your information may be stored or processed outside the country you live in. Where we transfer personal information across borders, we use appropriate safeguards — such as standard contractual clauses or transfers to countries recognised as providing adequate protection.

13Links to other sites

Our site and our work product may link to sites we do not control. We are not responsible for their content or their privacy practices. Read their policies before handing over information.

14Changes to this policy

We update this policy when our practices, tools or the law change. The effective date at the top always reflects the current version. If a change materially affects how we handle your information, we will make that clear on this page and, where appropriate, tell you directly.

15Contact us

If you have questions about this policy, reach us any of these ways:

• Email hello@thrievo.com
• Phone +1 646-624-8392
• Mail Thrievo, 30 N Gould St Ste N, Sheridan, WY 82801

We answer within 24 hours on weekdays.