What we collect, and what we do not.

Straw Holdings, Nepal. You can reach us through the contact page.

When you send an enquiry we receive what you typed into the form: normally your name and a phone number, sometimes an email address, and whatever you told us about your business. We also record which page you sent it from and, if you arrived from an ad, the campaign parameters on that link.

If you go on to become a client, we hold what running your advertising requires: the contact details of the people we work with, access to the ad accounts and analytics properties you grant us, and the campaign and billing records that come out of them. We ask for nothing an account does not need, and we do not ask for logins to systems we have no work in.

We keep our own record of page visits so we can see which pages are useful. It stores the page address, the time, and a random identifier that lives only until you close the browser tab. It does not store your name, phone number, email address or IP address, and a visit cannot be traced back to a person, including by us.

This site sets no advertising or tracking cookies of its own. Google Analytics and Microsoft Clarity are wired in but load only when the site is configured with an account for them; where they are on, they set their own cookies under their own policies.

Where we run advertising for you, data goes to the platforms that advertising runs on — Meta, Google, TikTok, LinkedIn and Spotify — under your own account and your instruction, and under those platforms’ terms.

We do not sell your information, and we do not pass it to other agencies or resellers.

Two suppliers handle data because they run parts of this website: Cloudflare, which serves it and filters malicious traffic, and Google Fonts, which serves the typefaces. Our servers are provided by Contabo.

An enquiry that does not become an engagement is kept for two years, so a business that comes back to us later is not starting again from nothing.

A client file is kept for five years after the last campaign closes. Billing and account records are the kind of thing people need copies of years later.

Website visit records are kept for two years.

Ask us through the contact page. You can ask for a copy of what we hold about you, ask us to correct something that is wrong, or ask us to delete it.

We will do it within 30 days. The one thing we may not be able to delete immediately is a record tied to live advertising spend, because the platform and the payment processor hold their own copies and we may need ours until the account settles.

The site and the staff console are served over HTTPS. Client records are held in a system only our own staff can sign into, each with their own account, and every change is recorded against the person who made it. Files are stored outside the public website and are served only to signed-in staff.

No system is perfect. If something involving your information does go wrong, we will tell you rather than hope you do not notice.

If what we collect changes, this page changes with it and the date at the top moves. We do not make changes quietly and backdate them.