Personal Data Protection
Effective date: 26 October 2026. How Traffic Wave protects personal data of website visitors, prospects and clients' customers in day-to-day work. For what we collect and why, see the Privacy Policy.
1. Principles
- Minimization: we collect only the data needed to reply to a request or deliver the service.
- Purpose limitation: data is used only for the purposes stated in the Privacy Policy.
- Accuracy: we correct or delete inaccurate data on request.
- Storage limitation: data is kept only for the periods stated in the Privacy Policy, then deleted or anonymized.
2. Security measures
- HTTPS encryption on the whole website.
- Two-factor authentication on email, advertising and analytics accounts.
- Access on a need-to-know basis; access is removed when a team member or contractor no longer needs it.
- Client advertising accounts are accessed through official partner access (for example Meta Business Manager partner access) rather than shared passwords.
- Customer lists uploaded to advertising platforms are hashed before upload.
- Confidentiality obligations for team members and contractors.
3. Clients' customer data
When we run campaigns for a client, the client is the controller of their customers' data, and we act on the client's instructions. We process such data only inside the client's own advertising, analytics and CRM accounts, do not use it for other clients or our own marketing, and stop accessing it when the engagement ends.
4. Incident response
If we detect a personal data breach, we contain it, assess the risk, notify affected clients without undue delay and, where required by law, inform the competent authority and the affected people.
5. Requests and contact
To exercise your rights, including access, correction or deletion of your data, email traffficwave@gmail.com. We reply within 30 days. Data controller: Andrii Braunahel, Sole Proprietor (Ukraine).
