Who is responsible
ADVERTCIX LTD is responsible for enquiries whose country is in the SEPA area; ADVERTCIX LIMITED for enquiries from all other countries. Enquiries marked “several countries” stay in manual review, under the joint responsibility of both entities, until confirmed in writing. The entity reviewing an enquiry is not necessarily the entity that will sign an engagement. Privacy questions and rights requests may be sent to privacy@advertcix.net.
Information and purposes
We collect identity, organisation, business contact details, contracting country, service interest, project description, budget band, timeframe, contact preference and any optional supporting document. We use them to route, assess and answer the enquiry; protect the service; maintain an auditable business record; and, if agreed, prepare contractual steps.
- Enquiry handling: steps requested before a contract and legitimate interests in operating a secure B2B service.
- Legal and security records: compliance with legal obligations and legitimate interests in establishing or defending rights.
- Marketing is not inferred from an enquiry. A separate valid basis is required where direct marketing rules apply.
Recipients, storage and transfers
Access is limited to authorised people supporting the relevant ADVERTCIX entity and documented service providers with a need to know. The website is hosted and served by the Lovable platform (Cloudflare network); enquiries and documents are stored privately in Lovable Cloud. Namecheap is only the domain registrar. No automatic notification is sent: enquiries are checked in the administration workspace. The internal CRM is not connected until its location, access controls, deletion and incident procedures are documented.
Where information is accessed outside its originating jurisdiction, ADVERTCIX will use an adequacy decision where available or the relevant EU Standard Contractual Clauses and UK IDTA/Addendum, with supplementary assessment where required.
Retention and security
Each enquiry is recorded with a review date 12 months after receipt; enquiries that do not become an engagement are then deleted. Deletion is currently performed manually by the owner, not by an automated job. Converted enquiries move to the applicable contractual, accounting and legal retention schedule. Documents are stored privately, limited to approved types and 10 MB, and are not publicly addressable. No internet service can promise absolute security.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent where consent is the basis. We may request proportionate identity evidence. You may complain to the CNIL for French/EU matters or the ICO for UK matters, without affecting other remedies.