Privacy Policy

CiteWorks Studio is a digital marketing and social media services company that helps brands increase their online presence and engagement, including on platforms such as Reddit and other social networks.

If you have any questions about this Policy or how we handle your data, you can contact us at:

• ·Company name: CiteWorks Studio
• ·Email: mark@citeworksstudio.com
• ·Website: citeworksstudio.com

This Privacy Policy applies to:

• ·Website visitors
• ·Prospective clients and leads
• ·Clients and their representatives
• ·People whose information we process in the course of providing Services to our clients (e.g., social media users we interact with on behalf of clients)

When we handle personal data on behalf of our clients (for example, interacting with their audiences on social media), we generally act as a processor/service provider, and the client's own privacy policy and instructions govern how that data is ultimately used.

If you believe a brand we work with has shared your data with us, you may also need to contact that brand directly to exercise your rights.

The information we collect depends on how you interact with us.

3.1 Information you provide directly

You may provide personal information to us when you:

• ·Fill out a contact or inquiry form on our Site
• ·Request a proposal or sign a Service Agreement
• ·Subscribe to a newsletter or updates
• ·Communicate with us by email, phone, or social media
• ·Provide access to your social media or advertising accounts so we can manage them on your behalf
• ·Make payments for our Services

This may include contact details (name, business name, job title, email, phone, country); account and access details (usernames, page IDs, roles or permissions on platforms such as Reddit and other social networks, advertising platforms, and analytics tools); business information (company, products or services, target audience, marketing goals, brand guidelines); billing information (invoicing details, billing address, tax information — payment card details are typically processed by third-party payment processors and we do not store full card details); and content and communications (emails, messages, files you upload such as briefs, customer lists, or content).

3.2 Information we collect automatically

When you visit our Site or interact with our Services, we may automatically collect certain information using cookies and similar technologies (see Section 9). This can include usage data (pages visited, links clicked, time spent on pages, referring URLs) and device and technical data (IP address, browser type and version, device type, operating system, approximate location, and other technical identifiers). We use this information to maintain and improve our Site, understand how visitors use it, and secure our systems.

3.3 Information we receive from third parties

We may receive information about you from clients (if you are an employee, representative, or customer of one of our clients); from social media and advertising platforms when you connect or grant us access (e.g., Reddit, Facebook, Instagram, LinkedIn, Google, X), including account-related data, analytics, and engagement metrics as allowed by the platform's APIs and your permissions; and from partners and service providers such as analytics providers, CRM tools, or lead sources.

We use personal information to provide and manage our Services (setting up and managing client accounts; planning, executing, and optimizing marketing campaigns and social media activities; creating and publishing content, including AI-assisted content subject to your approvals and instructions; monitoring and reporting performance); to communicate with you (responding to inquiries, sending service-related notifications, sending administrative information, invoices, and reminders); to operate, improve, and secure our Site and Services (analyzing how visitors use our Site; troubleshooting and improving functionality; detecting and preventing fraud and security incidents); to market our Services (newsletters and promotional communications where permitted by law; case studies and testimonials with appropriate consent); and to comply with legal obligations and enforce rights.

If you are in a region that requires a legal basis for processing (such as the European Economic Area or UK), we rely on one or more of the following:

• ·Performance of a contract — when processing is necessary to provide the Services or take steps at your request before entering into a contract.
• ·Legitimate interests — for example, to manage relationships with clients, improve our Services, secure our systems, and carry out marketing activities in a proportionate and privacy-respecting way.
• ·Consent — where required by law (e.g., certain marketing communications or non-essential cookies). You can withdraw consent at any time.
• ·Legal obligations — where processing is necessary to comply with applicable laws and regulations.

We do not sell your personal information. We may share it in the following limited situations:

• ·Service providers and vendors — trusted third parties that perform services for us, such as hosting and infrastructure, analytics, CRM, email tools, payment processing, and collaboration tools. They may only process personal information as necessary to provide services to us and must protect it appropriately.
• ·Clients (when acting as a processor) — when we process information on behalf of a client, we may share relevant data and reports with that client in accordance with our contract and their instructions.
• ·Social media and advertising platforms — when we manage your presence or campaigns on third-party platforms, information may be shared with those platforms as needed, according to their own terms and privacy policies.
• ·Business transfers — if we are involved in a merger, acquisition, restructuring, or sale of assets, personal information may be transferred as part of that transaction, subject to appropriate confidentiality protections.
• ·Legal and safety reasons — to comply with laws or court orders, respond to lawful requests from authorities, protect rights, property, or safety, and detect or investigate fraud, abuse, or security incidents.

Because we work with clients and service providers in different countries, your personal information may be transferred to, stored, and processed in jurisdictions other than your own, which may have different data protection laws.

Where required by law, we take steps to ensure that appropriate safeguards are in place for such transfers, such as contractual protections (e.g., standard contractual clauses) and/or transfers to countries recognized as providing an adequate level of protection.

We retain personal information for as long as reasonably necessary to provide the Services to you or our clients, fulfill the purposes described in this Privacy Policy, comply with legal, tax, and accounting requirements, and resolve disputes and enforce our agreements. When no longer needed, we will take reasonable steps to delete or anonymize the information. The specific retention period may vary depending on the type of data and our legal obligations.

We may use cookies, pixels, and similar technologies on our Site to remember your preferences and settings, analyze how visitors use and navigate the Site, and improve our Site and marketing efforts.

The types of cookies we may use include:

• ·Strictly necessary cookies — required for basic Site functionality.
• ·Analytics/performance cookies — help us understand Site usage and improve performance.
• ·Functionality cookies — remember your choices and preferences.
• ·Advertising/marketing cookies — help us or partners show more relevant ads (if used).

You can usually control cookies through your browser settings or cookie banners (where provided), including blocking or deleting them. However, if you disable certain cookies, some parts of the Site may not function properly.

Depending on your location and applicable law, you may have some or all of the following rights regarding your personal information:

• ·Access — obtain confirmation of whether we process your personal data and receive a copy.
• ·Correction — request correction of inaccurate or incomplete information.
• ·Deletion — request that we delete your personal data, subject to certain exceptions.
• ·Restriction — request that we limit the processing of your information in certain circumstances.
• ·Objection — object to processing based on our legitimate interests or for direct marketing.
• ·Data portability — receive personal data in a structured, commonly used, machine-readable format and have it transferred to another controller, where technically feasible.
• ·Withdraw consent — where we rely on consent, you can withdraw it at any time.

To exercise your rights, please contact us at mark@citeworksstudio.com. We may need to verify your identity before responding. If you receive marketing emails from us, you can opt out at any time by using the unsubscribe link in the email or contacting us directly. If you are in the EEA/UK and believe we have not handled your data properly, you also have the right to lodge a complaint with your local data protection authority.

Our Site and Services are intended primarily for business users and are not directed to children under the age of 16 (or the age required by your local law). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us, and we will take appropriate steps to delete such information.

We use reasonable technical and organizational measures to protect personal information from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

If you believe your interaction with us is no longer secure (for example, you suspect your account access with us has been compromised), please contact us immediately.

Our Site or communications may contain links to third-party websites, services, or social media platforms. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites or services you use.

When we provide Services to clients, we may process personal data (for example, social media usernames, comments, or other engagement data) strictly on their instructions. In these situations the client is usually the controller of the personal data, and we act as a processor/service provider under our contract with them.

If you are an end user or customer of one of our clients and have questions or requests about your personal information, please contact the relevant client directly. We will support them, as appropriate, in responding to your requests.

We may update this Privacy Policy from time to time. When we do, we will post the updated Policy on this page with a new "Last updated" date. If the changes are material, we may also provide additional notice (e.g., by email or via the Site), where required by law.

Your continued use of the Site or Services after any changes become effective means you accept the updated Policy.