Traffic9 Media Privacy Policy

1. Who We Are and How to Contact Us

Traffic9 Media is a digital marketing agency headquartered in Cincinnati, Ohio that provides AI search optimization (AEO and GEO), programmatic display advertising, retargeting, AI content strategy, and local SEO services to businesses across the United States. For purposes of the EU and UK GDPR, Traffic9 Media is the data controller for personal information you submit through this website. For purposes of the California Consumer Privacy Act (as amended by the CPRA), Traffic9 Media is the "business" that determines the purposes and means of processing your personal information.

You can reach us by email at support@traffic9media.com, by phone at (888) 803-4427, or by mail at Traffic9 Media, Cincinnati, OH 45202, United States. For privacy-specific requests, please write "Privacy Request" in the subject line so we can route it to the right team and respond within the timeframes required by applicable law.

2. Information We Collect

We collect personal information that you provide directly to us, information we collect automatically when you visit the site, and information we receive from third parties such as advertising platforms, analytics providers, and email service providers. The specific categories of information include:

• Identifiers and contact information — your full name, business name, email address, phone number, mailing address, and job title when you submit a Revenue Leak Audit request, download a whitepaper, or contact us through any form on the site.
• Commercial information — details about your current marketing program, advertising spend ranges, services of interest, and the business outcomes you are trying to achieve.
• Internet and network activity — IP address, browser type and version, device type, operating system, referring URL, exit URL, pages visited, time spent on pages, click paths, search terms used to reach the site, and other usage data collected via cookies, pixels, and similar technologies.
• Geolocation data — approximate geographic location derived from your IP address. We do not collect precise GPS location.
• Communications — the contents of any emails, chat messages, voicemails, or other communications you send us, and our responses.
• Marketing preferences — your subscription status for our email newsletter, SMS messaging consent, and whether you have opted out of targeted advertising.

We do not knowingly collect Social Security numbers, government identification numbers, biometric identifiers, precise geolocation, health information, financial account credentials, or any information that would qualify as "sensitive personal information" under the CPRA. We do not sell personal information, and we do not process personal information for cross-context behavioral advertising in a way that would qualify as a "sale" or "share" under the CPRA.

3. How We Use Your Information

We use the personal information we collect for the following business and commercial purposes:

• To respond to your inquiries, deliver requested resources, and schedule consultations such as the free Revenue Leak Audit.
• To provide and improve our services, including building and refining customized AI search, content, and advertising strategies for clients.
• To send you transactional communications such as audit results, proposals, invoices, and account updates.
• To send you marketing communications about our services, industry insights, and research reports — only where you have opted in or where we are otherwise permitted by law. Every marketing email includes a clear unsubscribe link.
• To measure the performance of our website and marketing channels using analytics platforms such as Google Analytics 4 (via Google Tag Manager), Meta (Facebook) Pixel, and a self-hosted Matomo-style analytics instance.
• To operate paid advertising on platforms such as Google Ads, Microsoft Advertising, and Meta, including conversion measurement and audience-based retargeting where permitted.
• To protect the security and integrity of our site, prevent fraud and abuse, and enforce our terms of service.
• To comply with legal obligations, respond to lawful requests by public authorities, and exercise or defend legal claims.

4. Legal Bases for Processing (EU/UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases for processing your personal information:

• Consent (Art. 6(1)(a) GDPR) for marketing emails, SMS messages, non-essential cookies, and any other processing that requires opt-in. You can withdraw consent at any time without affecting the lawfulness of processing already carried out.
• Performance of a contract (Art. 6(1)(b) GDPR) when we deliver the services you have requested, such as the Revenue Leak Audit or a paid engagement.
• Legitimate interests (Art. 6(1)(f) GDPR) for operating, improving, and securing our site; understanding how visitors use our content; and contacting business prospects in a B2B context, where those interests are not overridden by your rights and freedoms.
• Legal obligation (Art. 6(1)(c) GDPR) for tax, accounting, and other compliance requirements.

5. Cookies and Similar Technologies

We use cookies, pixels, local storage, and similar technologies to make the site work, measure performance, and support advertising. Cookies fall into four broad categories:

You can control cookies through your browser settings, through the consent banner on first visit, and through industry opt-out tools such as the Digital Advertising Alliance opt-out and the Network Advertising Initiative opt-out. We honor Global Privacy Control (GPC) signals where applicable. Note: analytics and advertising scripts are only loaded on our production domain (traffic9media.com) and are not loaded on staging or preview domains.

6. How We Share Your Information

Traffic9 Media does not sell your personal information. We share information only with the following categories of recipients and only as necessary to operate our business:

• Service providers that process information on our behalf under contractual confidentiality and data-protection obligations — for example, email delivery (Resend), email marketing automation (GetResponse), hosting and infrastructure providers, analytics platforms, and advertising platforms.
• Professional advisors such as lawyers, accountants, and auditors, when reasonably necessary for the establishment, exercise, or defense of legal claims.
• Authorities and other parties when required by law, subpoena, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Successors in interest in connection with a merger, acquisition, financing, or sale of all or part of our business, with appropriate confidentiality safeguards.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. Typical retention periods include: contact-form and audit submissions retained for up to 36 months from your last interaction with us; email-marketing subscribers retained for as long as you remain subscribed plus up to 24 months for suppression-list purposes after you unsubscribe; website analytics data retained for up to 26 months at the user-level; advertising and conversion data retained per the policies of the respective ad platforms; and accounting records retained for 7 years to comply with US tax law. When the applicable retention period ends, we securely delete or de-identify the information.

8. Your Privacy Rights

Depending on where you live, you may have the following rights regarding your personal information:

• Right to know / access — request a copy of the personal information we hold about you and details of how we process it.
• Right to correct — request that we correct inaccurate or incomplete information.
• Right to delete — request that we delete personal information we hold about you, subject to legal exceptions.
• Right to portability — request a copy of your information in a structured, machine-readable format.
• Right to opt out of sale or sharing — Traffic9 Media does not sell or share personal information for cross-context behavioral advertising, but you may submit this request at any time.
• Right to limit use of sensitive personal information — we do not collect sensitive personal information.
• Right to withdraw consent — where we rely on consent, you may withdraw it at any time.
• Right to non-discrimination — we will not deny you services, charge different prices, or provide a different level of quality because you exercised a privacy right.
• Right to lodge a complaint — if you are in the EEA, UK, or Switzerland, you have the right to lodge a complaint with your local data-protection authority.

To exercise any of these rights, email us at support@traffic9media.com with the subject line "Privacy Request" and tell us which right you are exercising. We will verify your identity using the information we already hold about you (typically by matching your email address). We will respond within 45 days for CCPA requests and within 30 days for GDPR requests, and we will extend that period only when permitted by law and only after notifying you.

9. International Data Transfers

Traffic9 Media is based in the United States. If you access the site from outside the US, your information will be transferred to, stored, and processed in the United States. Where required by law, we rely on appropriate safeguards for international transfers, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum. By using the site, you understand that your information may be processed in countries whose data-protection laws may differ from those of your country of residence.

10. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These safeguards include TLS encryption in transit, role-based access controls, security logging, vendor due diligence, and least-privilege handling of contact and audit submissions. No internet transmission or storage system is 100% secure, however, and we cannot guarantee absolute security. If we become aware of a security breach that affects your personal information, we will notify you and any required authorities in accordance with applicable law.

11. Children's Privacy

Our services are directed to businesses and are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will delete it promptly.

12. Third-Party Links

Our site contains links to third-party websites, including ad platforms, research sources, and our own social media profiles on LinkedIn, Facebook, and X (Twitter). We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policies of every site you visit.

13. Do Not Track and Global Privacy Control

Most browsers offer a "Do Not Track" signal. Because there is no industry standard for how to respond, we currently do not respond to Do Not Track signals. We do honor Global Privacy Control (GPC) signals where required by applicable law, and we treat a valid GPC signal from a California resident as a request to opt out of any "sale" or "share" of personal information.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable laws. When we make material changes, we will revise the "Last updated" date at the top of this page and, where appropriate, notify you by email or through a prominent notice on the site. We encourage you to review this Privacy Policy periodically. Your continued use of the site after a change becomes effective constitutes your acceptance of the updated policy.

15. Related Policies

This Privacy Policy should be read alongside our Terms of Service and our Refund Policy. Defined terms used here have the meanings given to them in those documents unless otherwise specified.