Viper Hold

Legal

Privacy policy

A plain language account of what this website collects and what we do with it, alongside the formal policy that governs it.

Which document governs

The page you are reading is a summary written for humans. The controlling document is our full privacy policy, which is maintained separately and kept current with applicable law. Where the two differ, the full policy applies.

Read the full privacy policy

What this website collects

Very little, and only when you choose to give it. This site has no analytics package, no advertising pixels, no session recording, no third party trackers and no cookie banner, because there is nothing to consent to. That is unusual for an advertising agency, and it is deliberate.

There are exactly three ways data reaches us from these pages.

1. The contact form

When you submit the form on our contact page, we receive the name, email address, and message you typed, plus the optional company, phone, budget range and area of interest if you filled them in. Your IP address is recorded with the submission.

We use this to reply to you and, if we end up working together, to set up the engagement. We do not add you to a mailing list, we do not sell or share the information with anyone, and we do not use it to target you with advertising. Submissions are delivered by email to [email protected] and retained in our records so we have a history of the conversation.

2. A session cookie, on one page only

Loading the contact page sets a single first party session cookie. It holds a random token used to verify that the form was submitted from our site rather than forged by someone else. It contains nothing about you, it is not used for tracking, and it expires when you close your browser. No other page on this site sets a cookie.

3. Server logs

Our web host records ordinary access logs: IP address, timestamp, the page requested, your browser's user agent string. This is standard infrastructure logging used for security and diagnostics. We do not combine it with anything else or use it to build a profile of you.

Third parties this site touches

Two, both named plainly:

  • Google Fonts serves the typeface. Loading a page makes a request to Google's servers, which means Google sees your IP address. If that matters to you, the site remains fully readable with fonts blocked.
  • Our web host stores the files and processes form submissions on our behalf.

There is no advertising technology on this website. We do not run remarketing against our own visitors.

Client data, as distinct from website data

When we manage advertising accounts, we handle data belonging to our clients and, indirectly, to their customers. That relationship is governed by the engagement agreement rather than by this policy, but the principles are worth stating here.

  • Clients own their advertising accounts, their conversion data and their audience lists. We work inside accounts that stay in your name, never accounts held on your behalf.
  • We access client accounts under our own named users, so access can be revoked by the client at any time without changing a password.
  • We do not move customer data between clients, and we do not build cross client audiences.
  • Where a client operates under a restricted category (healthcare, finance, housing), we configure measurement to the platform policies that apply, and the client's counsel signs off on claims.
  • When an engagement ends, our access is removed and the accounts stay with the client, intact.

Your rights

Depending on where you live, you may have the right to ask what information we hold about you, to have it corrected, to have it deleted, or to object to how it is used. The full policy sets out these rights formally. In practice, the mechanism is the same in every case: email [email protected] and tell us what you want done. We will action it.

Children

This is a business to business website. It is not directed at children and we do not knowingly collect information from anyone under 18.

Changes

If this summary changes materially, the full policy changes first. The authoritative version, including its effective date, is the one linked at the top of this page.