Privacy Policy

Privacy Policy – Lott Agency

Last updated: 7 Decemver 2025

This Privacy Policy explains how Lott Agency (“Lott”, “we”, “us”, or “our”) collects, uses, and protects information when you visit lott-agency.com or use any of our products, tools, or services (together, the “Services”).

We help businesses manage and optimise their advertising across major platforms (such as Meta, Google, TikTok and others) through technology, data and strategic guidance. We are committed to handling your information in line with applicable data protection laws, including the GDPR, CCPA (where applicable), and other relevant regulations.

1. Data We Collect
We collect different types of information depending on how you interact with us and which Services you use.

1.1 Contact & Account Information
When you get in touch with us, request access, or become a client, we may collect:

• Name and surname

• Business email address

• Telephone number

• Company name, registration details and tax information

• Job title or role

• Billing and invoicing details

 

1.2 Advertising & Business Data
In order to operate and optimise campaigns, we may process:

• Ad account identifiers and structures (e.g. BM IDs, user permissions)

• Campaign, ad set and ad performance metrics

• Budgets, spend levels and pacing information

• Landing pages, funnels, creatives and offer details (where shared with us)

 

1.3 Technical & Usage Data
When you browse our site or use our platform, we may automatically collect:

• IP address and approximate location

• Browser type and device information

• Pages visited, click paths and session duration

• Cookies, pixels and similar identifiers

 

1.4 Payment & Compliance Information
For billing and regulatory purposes, we may also collect:

• Payment-related data (via our payment processors, e.g. card tokens, transaction IDs)

• Business and identity verification information (e.g. corporate documents, KYC/KYB checks)

• Referral or partner programme data where applicable

We only collect information that is relevant for the purposes described in this Policy.

​

2. How We Use Your Information
We use the information we collect for the following purposes:

• Service delivery:
  To set up and manage your access to our platform, tools and advertising infrastructure.

• Client communication:
  To respond to enquiries, schedule calls, send onboarding information, and provide support.

• Performance, analytics & optimisation:
  To monitor usage, improve our Services, troubleshoot issues, and develop new features.

• Billing & financial operations:
  To issue invoices, process payments, manage refunds and maintain financial records.

• Compliance & risk management:
  To verify your business, prevent fraud or abuse, and comply with legal and platform requirements.

• Marketing (limited and optional):
  To send you relevant updates, insights, or product information, where permitted by law and your preferences.

We do not sell your personal data.

3. Legal Bases (for EEA/UK and similar jurisdictions)
Where data protection law requires a legal basis, we rely on one or more of the following:

• Performance of a contract:
  When we process data to deliver Services you or your company have requested.

• Legitimate interests:
  For security, fraud prevention, product improvement, analytics, and business operations, provided these interests are not overridden by your rights.

• Legal obligation:
  When we need to retain or process information for accounting, tax, KYC/KYB, or other regulatory requirements.

• Consent:
  For certain types of cookies, analytics, or marketing communications where consent is required. You can withdraw your consent at any time.

 

4. Sharing Your Information
We may share your information with carefully selected third parties, strictly on a need-to-know basis:

• Payment processors and financial partners
  (e.g. Stripe, banks, fintech/payment infrastructure such as Currencycloud group entities) to process payments, handle payouts and manage accounts.

• Analytics and UX tools
  (e.g. Google Analytics, Hotjar or similar) to understand how people use our site and improve usability.

• Verification and compliance providers
  To perform identity, business, or sanctions checks where required.

• IT, hosting and support providers
  That host our systems or help us maintain and secure the platform.

• Professional advisers and legal/regulatory bodies
  Where necessary to comply with the law, enforce our terms, or defend legal claims.

All such providers are required to handle your data securely and only according to our instructions and applicable law.
We do not sell or rent your personal information to third parties.

5. Cookies and Similar Technologies
We use cookies and similar technologies on our website and platform to:

• Keep you logged in and maintain sessions

• Understand traffic and usage patterns

• Improve functionality and performance

You can control or delete cookies through your browser settings. Some features of the site or platform may not function properly if certain cookies are disabled.
Where required by law, we will request your consent before using non-essential cookies.

6. Data Retention
We keep your data only for as long as reasonably necessary for the purposes described in this Policy, including:

• Providing Services and maintaining your account

• Meeting legal, tax, and regulatory obligations

• Resolving disputes and enforcing our agreements

• Maintaining business and audit records

Once data is no longer needed, we aim to either delete it securely or anonymise it so it can no longer be linked to you.

7. Your Rights
Depending on your location, you may have some or all of the following rights in relation to your personal data:

• Access:
  Request a copy of the personal data we hold about you.

• Rectification:
  Ask us to correct inaccurate or incomplete information.

• Erasure:
  Request deletion of your data where there is no longer a valid reason for us to keep it.

• Restriction:
  Ask us to limit how we use your data in certain circumstances.

• Objection:
  Object to specific types of processing, including direct marketing or processing based on legitimate interests.

• Data portability:
  Receive your data in a structured, commonly used format and request transfer to another controller (where applicable).

 

You can exercise these rights, or ask questions about them, by contacting us at info@lott-agency.com. We may need to verify your identity before acting on your request.

You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

8. International Transfers
Because we work with clients and partners in multiple countries, your information may be transferred and processed outside the country where you live, including in jurisdictions that may have different data protection standards.
Where such transfers occur, we take appropriate measures to protect your data, such as:

• Using Standard Contractual Clauses (SCCs) or equivalent contractual protections

• Working with providers that implement robust security and privacy safeguards

 

9. Security Measures
We implement a variety of technical and organisational measures to help protect your data, including:

• Encrypted transmission (e.g. TLS/SSL)

• Access controls and authentication

• Role-based permissions and least-privilege principles

• System monitoring, logging and periodic reviews

While we strive to safeguard your information, no system can be completely secure. You acknowledge that you use the Services with this understanding and agree to notify us promptly if you suspect any unauthorised access to your account or data.

 

10. Use by Minors
Our Services are designed for businesses and professionals. They are not intended for use by individuals under 18 years of age. We do not knowingly collect information from minors. If you believe we have inadvertently collected data from a minor, please contact us at info@lott-agency.com and we will take appropriate steps to delete it.

 

11. Changes to This Policy
We may update this Privacy Policy from time to time, for example to reflect changes in law, our Services, or our data practices. When we make material changes, we will notify you by email or by posting a notice on our website or platform.
The most current version will always be available on our website. By continuing to use the Services after changes take effect, you agree to the updated Policy.

 

12. Contacting Us
If you have any questions, requests, or concerns about this Privacy Policy or how we handle your data, you can reach us at:
Lott Agency
Email: info@lott-agency.com