Privacy Policy
Last updated: November 13, 2025
Serum Agency (“we,” “us,” or “our”) operates the website located at https://www.serum.agency (the “Site”). This Privacy Policy explains what we collect, how we use it, and the choices you have.
If you have questions, contact hello@serum.agency.
Scope
This Policy covers personal information collected through the Site, contact forms, calendars, and our marketing. It does not cover client data processed inside third‑party platforms under a separate agreement or Data Processing Addendum.
What we collect
Information you provide
- Contact details: name, email, phone, company
- Messages and form submissions
- Booking details from scheduling tools
- Newsletter sign ups
- Files you upload or links you share
Information collected automatically
- Log data: IP address, browser, device, pages viewed, timestamps
- Cookies and similar tech
- UTM parameters and referral data
Information from partners
- Ad platforms and analytics
- CRM enrichment tools
Cookies and tracking
We use cookies and similar technologies to operate the Site, remember preferences, analyze traffic, and run marketing. You can control cookies in your browser. See “Your choices” below.
Common categories
- Strictly necessary: security, load balancing
- Performance: analytics and diagnostics
- Functional: preferences
- Advertising: retargeting and measurement
How we use information
- Provide, maintain, and improve the Site
- Respond to inquiries and schedule calls
- Send marketing emails with your consent or where permitted
- Personalize content and ads
- Measure campaign performance and audience reach
- Detect, prevent, and address security or abuse
- Comply with legal obligations
Legal bases (EEA, UK)
- Consent
- Contract
- Legitimate interests such as Site operation, marketing to business contacts, and security
- Legal obligation
Sharing
We share personal information with:
- Service providers that host, store, analyze, or send communications on our behalf. Examples: Webflow, Google Analytics, Google Tag Manager, HubSpot or GoHighLevel, scheduling tools, email providers, call tracking vendors.
- Advertising partners for measurement and attribution. Examples: Google Ads, Meta Ads, TikTok Ads, X Ads, YouTube.
- Professional advisors and authorities when required by law
- Business transfers in connection with a merger, acquisition, or sale of assets We do not sell personal information for money. We may share limited data for cross‑context behavioral advertising. See “Your rights” for opt out.
Analytics and ads
We may use GA4, server‑side tagging, and ad pixels for measurement and improvement. These tools place cookies and may collect IP and device data. You can opt out using the controls listed below.
Email communications
You can unsubscribe any time using the link in our emails or by contacting us. We may still send essential transactional messages.
Data retention
We keep personal information only as long as needed for the purposes above, then delete or anonymize it according to our retention rules and applicable law.
International transfers
We are based in Canada and use vendors in multiple countries including the United States and the EEA. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
Security
We use technical and organizational measures to protect personal information, including encryption in transit, access controls, and regular reviews. No system is perfectly secure.
Children
The Site is not for children under 16 and we do not knowingly collect their data.
Healthcare and PHI
This Site is for marketing. Do not submit protected health information (PHI) or sensitive medical details through general contact forms. If a project requires handling PHI, we will use HIPAA‑eligible tools and, if needed, sign a Business Associate Agreement.
Your rights
Your rights depend on your location. Subject to limits in law you may have the right to:
- Access, correct, or delete your information
- Object to or restrict processing
- Port your data
- Withdraw consent
- Opt out of targeted advertising or the “sale” or “sharing” of data as defined by state laws
How to act on your rights
- Email hello@serum.agency with your request
- Use the unsubscribe link in our emails
- Use browser controls to clear or block cookies
Region specific notes
- EEA and UK: you can contact your data protection authority. Our primary contact is via hello@serum.agency.
- California: we honor requests to opt out of “sale” or “sharing” for cross‑context behavioral advertising. Send a request to hello@serum.agency and adjust your cookie preferences.
Your choices
- Browser controls: block or delete cookies
- Ad settings: Google Ads Settings, Meta Ad Preferences, TikTok Ad Settings
- Analytics opt‑out: Google Analytics Opt‑out add‑on
- Do Not Track: we do not respond to DNT signals. Use the options above.
Third‑party links
Our Site may link to third‑party sites. Their privacy practices are their own.
Changes to this Policy
We may update this Policy. If we make material changes, we will post a notice on the Site and update the date at the top.
.png)