Privacy Policy

1. Introduction & Data Controller

This Privacy Policy governs the manner in which Growth By Ayaan ("we", "our", "us"), operated under the leadership of founder Ayaan Mustafa Ghazi, collects, uses, maintains, and protects information gathered from users ("User", "you", "Client") of the website https://ayaanit.com ("Site") and associated digital marketing services.

For questions regarding this policy or our data management protocols, the primary contact email is business@ayaanit.com.

2. Information We Collect

We collect information in two primary ways: direct submission and automated technical logging:

• Personally Identifiable Information (PII): When you submit a project inquiry, discovery form, or reach out via WhatsApp or email, we may collect your full name, business email address, company name, website URL, phone number, and project budget details.
• Client Operational Data: During client engagements, clients may grant authorized administrative or partner access to Google Analytics, Google Ads, Meta Business Manager, Google Search Console, or WordPress hosting platforms.
• Automated Technical & Device Data: When browsing our Site, our web servers and analytics tools automatically record your Internet Protocol (IP) address, browser type, operating system, referring URLs, pages viewed, time spent on pages, and click paths.

3. Cookies, Pixels & Tracking Technologies

Our Site employs standard web cookies and measurement scripts to analyze traffic trends, understand audience behavior, and improve user experience:

You can configure your browser settings to refuse all cookies or notify you when a cookie is placed. However, some interactive features may experience reduced functionality.

4. Client Confidentiality & Proprietary Ad Data Protection

We hold client trade secrets, revenue metrics, cost-per-acquisition records, and marketing strategies under strict professional confidentiality:

• We enter into bilateral Non-Disclosure Agreements (NDAs) upon request before reviewing proprietary assets.
• Client ad account logins, API keys, and website credentials are stored using encrypted, multi-factor authenticated password managers.
• We do not disclose proprietary client sales volumes, margin structures, or internal operational workflows without express written permission. Case studies published on our website only display agreed-upon metrics with anonymized or approved branding.

5. How We Use Collected Information

We utilize collected data solely for legitimate business operations:

• To review your digital footprint and formulate tailored audit recommendations.
• To execute agreed-upon scope of work, including SEO audits, Meta/Google ad campaign builds, and WordPress development sprints.
• To communicate project milestones, performance reports, and invoices.
• To detect, prevent, and mitigate security threats, fraudulent inquiries, or server vulnerabilities.

6. Legal Basis for Processing (GDPR & International Standards)

For users and clients based in the European Economic Area (EEA), United Kingdom (UK), or United States, our legal grounds for processing personal data include:

• Contractual Necessity: Processing required to prepare proposals, onboard accounts, and fulfill agency service deliverables.
• Legitimate Interests: Improving service performance, securing web infrastructure, and measuring marketing reach without overriding user privacy rights.
• Consent: Where you have voluntarily opted in to receive direct marketing or submit project details.

7. Data Retention & International Transfers

We retain contact information only as long as necessary to fulfill project requirements, provide customer support, and satisfy legal accounting obligations. Inactive prospect records are securely archived or purged after 18 months.

As a global agency serving clients in the USA, UK, and Pakistan, data may be transferred to and maintained on cloud servers located outside of your state or province. We implement appropriate technical safeguards (TLS 1.3 encryption, least-privilege IAM roles) to ensure your data remains protected.

8. Your Data Rights

Depending on your geographic location, you have legal rights regarding your personal information:

• Right of Access: Request a copy of the personal data we hold about you.
• Right of Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure ("Right to Be Forgotten"): Request deletion of your personal data from our operational repositories.
• Right to Restrict or Object: Object to specific data processing activities or withdraw consent.

To exercise any of these rights, send an email to business@ayaanit.com. We respond to all verified requests within 30 days.

9. Changes to This Policy

Growth By Ayaan reserves the right to update this Privacy Policy at any time to reflect regulatory changes or service enhancements. The revised date will be reflected at the top of this document. Continued use of the Site after revisions indicates acceptance of the updated terms.