Privacy Policy

PRIVACY POLICY Effective date: 11 September 2026 1. Who We Are and How to Reach Us Marketing and Media Solutions is a limited liability company with its registered address at 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, United States of America. We operate the website https://mktmediasolutions.com and provide marketing and creative consultancy services to business clients. For all privacy-related questions, requests to exercise your rights, or other inquiries about this Privacy Policy, contact us by e-mail at info@mktmediasolutions.com. E-mail is the contact channel for privacy requests. 2. Scope of This Policy This Privacy Policy describes how we collect, use, disclose, store and protect personal information in connection with our website and our services. It applies to all visitors to our website and to all clients and prospective clients with whom we engage. 3. Information We Collect We collect personal information in the following ways: (a) Information You Provide Through the Contact Form When you submit an inquiry through the contact form on our website, you provide your name, your e-mail address, and the content of your message. The message field is free text, and you control what you choose to include. We do not knowingly collect special-category personal data (also known as sensitive personal information under certain laws), such as information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health, or data concerning a natural person's sex life or sexual orientation. Please do not include such information in your contact form submission or in any other communication with us. (b) Information Collected Automatically by the Web Server When you visit our website, the web server automatically records certain information in access logs for security, troubleshooting and abuse prevention. This information includes your IP address, the date and time of your visit, the URL you requested, and your browser user agent string. (c) Information Stored on Your Own Device Our website uses browser localStorage, a standard web technology that stores small pieces of data on your own device, to remember two settings: - 'preferred-lang': the interface language you have selected. - 'cookie-consent': your choice regarding the cookie consent notice. These items are stored locally in your browser. They are never transmitted to our server and are never used to identify you. They are strictly necessary for the website to function as you have configured it. Our website does not set cookies for analytics, advertising or tracking purposes. (d) Information We Receive in the Course of a Client Engagement When we provide services to a client under a signed service agreement, we receive and process business contact information for the client's employees, contractors and representatives (such as names, job titles, e-mail addresses and telephone numbers), as well as materials, data and content that the client supplies to us for the purpose of performing the engagement. The nature and scope of this information vary by project and are described in the applicable service agreement. 4. How We Use the Information We use the personal information we collect for the following purposes: - To receive, read and respond to inquiries submitted through the contact form. - To communicate with prospective clients about their needs and our services. - To negotiate, prepare and enter into service agreements. - To perform our obligations under a service agreement, including delivering the consulting, strategy, content production, campaign development and other services described in that agreement. - To communicate with clients and their staff during the course of an engagement. - To manage projects, coordinate work and deliver completed work product. - To issue invoices, process payments and maintain financial records. - To detect, prevent and respond to security incidents, abuse, spam and fraudulent or illegal activity on our website. - To troubleshoot technical problems with the website. - To comply with legal obligations, including tax reporting, record retention and responses to lawful requests from public authorities. - To establish, exercise or defend legal claims. 5. Legal Bases Under the GDPR For visitors and clients located in the European Economic Area, the United Kingdom or Switzerland, we process personal information on the following legal bases under the General Data Protection Regulation: - Article 6(1)(b) (performance of a contract): We process your name, e-mail address and the content of your inquiry in order to respond to your request and, if you become a client, to perform our obligations under the service agreement. We process client contact information and project materials for the same reason. - Article 6(1)(f) (legitimate interests): We process server access logs (IP address, timestamp, requested URL, user agent) based on our legitimate interest in securing our website, preventing abuse and spam, and troubleshooting technical issues. We have balanced this interest against the privacy rights of visitors and have implemented short retention periods and access controls to minimize any impact on your rights. - Article 6(1)(c) (compliance with a legal obligation): We retain certain records, including contracts, invoices and related communications, to comply with tax, accounting and other legal obligations under the laws of the United States and the State of New Mexico. - Article 6(1)(a) (consent): If we ever ask for your consent to process personal information for a specific purpose not covered by the bases above, we will do so clearly and separately, and you may withdraw that consent at any time. The two localStorage keys ('preferred-lang' and 'cookie-consent') are strictly necessary for the functionality you have requested and do not rely on consent as a legal basis. 6. Cookies and Local Storage Our website does not use cookies for analytics, advertising, tracking or profiling. The website uses browser localStorage to store your language preference and your cookie consent choice on your own device. These are strictly necessary for the website to respect your configuration choices. For further details, please see our Cookie Policy. 7. Third Parties and Service Providers We engage a limited number of service providers who may process personal information on our behalf: - Hosting provider: Our website and e-mail service are hosted on infrastructure located in Germany and operated by a hosting provider under contract with us. This provider has access to server logs and processes e-mail transmission. We have entered into Standard Contractual Clauses with this provider to govern the transfer of personal information from the European Economic Area to the United States. We do not use third-party analytics services, advertising networks, tag managers, customer relationship management platforms, or marketing automation tools in connection with our website. We do not sell personal information. We do not share personal information with third parties for their own marketing purposes. We do not disclose personal information to data brokers. We may disclose personal information if required to do so by law, regulation, legal process or governmental request, or if necessary to protect our rights, property or safety or the rights, property or safety of others. 8. International Transfers Marketing and Media Solutions is established in the United States. Our website and e-mail infrastructure are hosted in Germany (European Union) by a service provider acting on our behalf. When you submit information through our website or when we correspond with you by e-mail, personal information may be transferred between the European Union and the United States. We have implemented Standard Contractual Clauses approved by the European Commission with our hosting provider to ensure that personal information transferred from the European Economic Area to the United States receives an adequate level of protection. You have the right to request a copy of these safeguards by contacting us at info@mktmediasolutions.com. 9. Retention We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy and to comply with our legal obligations. - Contact form submissions: E-mails generated by the contact form are retained in our mailbox only as long as needed to respond to the inquiry, conduct any resulting discussions or negotiations, and perform any resulting service engagement. Once the matter is concluded and any applicable legal retention period has expired, we delete the correspondence. - Server access logs: Access logs are rotated on a short cycle for security and troubleshooting purposes and are then automatically deleted. - Client engagement records: Contracts, invoices, project files, communications and other records related to a client engagement are retained for the period required by applicable tax, accounting and commercial law (typically six to seven years from the conclusion of the engagement), after which they are securely deleted or destroyed. Specific retention periods may be longer if required by law or if necessary to establish, exercise or defend legal claims. 10. Security We implement reasonable technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure or destruction. These measures include: - Transport encryption (HTTPS/TLS) for all website traffic. - Access controls limiting access to personal information to authorized personnel who need it to perform their duties. - Data minimization: we collect and retain only the personal information necessary for the purposes described in this Privacy Policy. - Regular review of our practices and systems. No method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security. 11. Your Rights Depending on your location, you may have the following rights with respect to your personal information: (a) Rights Under the GDPR (European Economic Area, United Kingdom, Switzerland) If you are located in the European Economic Area, the United Kingdom or Switzerland, you have the following rights under the General Data Protection Regulation and equivalent laws: - Right of access: You may request confirmation of whether we process your personal information and, if so, request a copy of that information. - Right to rectification: You may request that we correct inaccurate personal information about you. - Right to erasure: You may request that we delete your personal information in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected or when you withdraw consent (where consent was the legal basis). - Right to restriction of processing: You may request that we restrict processing of your personal information in certain circumstances, such as while we verify its accuracy or our legitimate grounds for processing it. - Right to data portability: You may request that we provide your personal information in a structured, commonly used and machine-readable format and, where technically feasible, transmit it to another controller. - Right to object: You may object to processing based on legitimate interests or for direct marketing purposes. - Right to withdraw consent: Where we process your personal information based on your consent, you may withdraw that consent at any time. - Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority in the European Economic Area, the United Kingdom or Switzerland if you believe we have processed your personal information unlawfully. (b) Rights Under the California Consumer Privacy Act and California Privacy Rights Act If you are a California resident, you have the following rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act: - Right to know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collection, and the categories of third parties with whom we share personal information. - Right to delete: You may request that we delete personal information we have collected from you, subject to certain exceptions. - Right to correct: You may request that we correct inaccurate personal information we maintain about you. - Right to opt out of sale or sharing: You may opt out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising. We do not sell or share personal information as those terms are defined in the CCPA/CPRA. - Right to limit use of sensitive personal information: You may request that we limit our use of your sensitive personal information to certain permitted purposes. We do not use or disclose sensitive personal information for purposes that trigger this right. - Right to non-discrimination: You have the right not to receive discriminatory treatment for exercising any of these rights. (c) Rights Under Other United States State Privacy Laws If you are a resident of Virginia, Colorado, Connecticut, Utah, or another state with a comprehensive privacy law, you may have similar rights to those described above, including rights to access, correct, delete and opt out of the sale of personal information or targeted advertising. We do not sell personal information or engage in targeted advertising as those terms are defined under those laws. (d) How to Exercise Your Rights To exercise any of the rights described above, send an e-mail to info@mktmediasolutions.com with the subject line "Privacy Rights Request." Please include your name, the e-mail address associated with your inquiry or engagement (if applicable), and a description of the right you wish to exercise. We will respond to your request within the time period required by applicable law (typically 30 to 45 days, depending on jurisdiction). We may need to verify your identity before fulfilling your request. To verify your identity, we may ask you to confirm information we already have (such as the e-mail address from which you contacted us or details of your inquiry or engagement) or to provide additional identifying information. If we cannot verify your identity, we may decline the request. You may designate an authorized agent to submit a request on your behalf. If you use an authorized agent, we will require proof of your written authorization or a valid power of attorney. 12. Children Our website and services are directed to businesses and business professionals. We do not knowingly collect personal information from individuals under the age of 16. If we become aware that we have collected personal information from a person under 16, we will delete that information promptly. If you believe we have collected information from a person under 16, please contact us at info@mktmediasolutions.com. 13. Do Not Track and Global Privacy Control Some browsers and devices transmit "Do Not Track" signals or similar preference signals such as Global Privacy Control. Because there is no common industry or legal standard for interpreting these signals, our website does not currently respond to Do Not Track signals. Our website does not engage in tracking for advertising or analytics purposes. We do not serve third-party advertisements, and we do not use third-party analytics or tracking technologies. The server access logs described in Section 3(b) are used solely for security, abuse prevention and troubleshooting, not for tracking or profiling. 14. Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. When we make changes, we will revise the effective date at the top of this policy. If we make material changes, we will provide notice by posting a prominent announcement on our website or, where appropriate, by sending an e-mail to clients with whom we have an active engagement. We encourage you to review this Privacy Policy periodically. Your continued use of our website or services after the effective date of a revised policy constitutes your acceptance of the changes.