GDPR Privacy Notice

Last updated: April 14, 2026

1. Introduction

This General Data Protection Regulation (GDPR) Notice supplements our Privacy Policy and applies to individuals in the European Economic Area (EEA) and the United Kingdom. PIBP Media is committed to protecting the personal data of all individuals we interact with, including European residents who may access our website.

This notice explains how we collect, use, and protect your personal data in accordance with the requirements of the GDPR (EU) 2016/679 and the UK GDPR.

2. Data Controller Information

PIBP Media acts as the Data Controller for personal data collected through our website and lead generation activities. This means we are responsible for determining how and why your personal data is processed.

• Organization: PIBP Media
• Website: www.pibpmedia.com
• Data Protection Contact: dpo@pibpmedia.com

3. Personal Data We Process

We process the following categories of personal data:

• Contact Data: Name, email address, telephone number, and postal address
• Technical Data: IP address, browser type and version, device identifiers, operating system
• Usage Data: Information about how you use our website, including pages visited and time spent
• Marketing Data: Preferences, enquiries, and responses to marketing communications
• Transaction Data: Details about the services you inquired about through our lead forms

4. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR Article 6:

• Consent (Article 6(1)(a)): Where you have given clear, affirmative consent — for example, by submitting a lead form and agreeing to be contacted by our partners, or consenting to marketing communications
• Contractual Necessity (Article 6(1)(b)): Where processing is necessary to perform a contract with you or to take steps you have requested prior to entering a contract
• Legitimate Interests (Article 6(1)(f)): Where processing is necessary for our legitimate business interests — such as fraud prevention, website security, and business analytics — provided these interests are not overridden by your rights
• Legal Obligation (Article 6(1)(c)): Where we are required to process your data to comply with a legal obligation

5. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights, which you can exercise free of charge:

• Right of Access (Article 15): The right to obtain confirmation of whether we process your personal data and, if so, to receive a copy of that data along with supplementary information
• Right to Rectification (Article 16): The right to have inaccurate personal data corrected without undue delay
• Right to Erasure (Article 17): The right to have your personal data erased ("right to be forgotten") where certain conditions apply
• Right to Restriction of Processing (Article 18): The right to request that we restrict how we use your data in certain circumstances
• Right to Data Portability (Article 20): The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller
• Right to Object (Article 21): The right to object to processing based on our legitimate interests, including for direct marketing purposes
• Rights Related to Automated Decision-Making (Article 22): The right not to be subject to decisions made solely by automated processing that significantly affect you

To exercise any of these rights, please contact our Data Protection Officer at dpo@pibpmedia.com. We will respond within 30 days of receiving your request.

6. International Data Transfers

PIBP Media is based in the United States. If you are located in the EEA or UK, your personal data may be transferred to and processed in the United States, which does not have an equivalent level of data protection to the GDPR.

We ensure appropriate safeguards are in place for such transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Binding Corporate Rules where relevant

7. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, in accordance with applicable law:

• Lead Data: Retained for up to 24 months from the date of collection, unless deletion is requested earlier
• Website Analytics: Aggregated data retained indefinitely; individual session data retained for 26 months
• Legal Records: Retained for the period required by applicable law (typically 6–7 years)

8. Cookies and Consent

We use cookies and similar tracking technologies on our website. Where required by law, we obtain your consent before placing non-essential cookies. You can withdraw consent at any time by adjusting your browser settings or contacting us.

9. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with the GDPR, you have the right to lodge a complaint with your local supervisory authority. For EEA residents, this is typically the data protection authority in your member state. For UK residents, this is the Information Commissioner's Office (ICO) at www.ico.org.uk.

We encourage you to contact us first at dpo@pibpmedia.com and we will do our best to resolve your concern directly.

10. Contact Our Data Protection Officer

• Email: dpo@pibpmedia.com
• Subject Line: GDPR Data Rights Request
• PIBP Media — Data Protection