Privacy Policy
Lithe Agency ("we," "us," or "our"), operating as CV Creative Digital Collective in Surabaya, Indonesia, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect information when you engage our digital advertising and social media management services.
1 Information We Collect
Account & Contact Information
- Business name, contact person name, email address, and phone number
- Billing and payment information (invoicing details, tax identification)
- Communication records (emails, chat messages, meeting notes)
Platform Account Data
With your authorization, we access and manage data on third-party advertising and social media platforms:
- Meta (Facebook & Instagram): Ad account configurations, campaign data, audience settings, page/profile metrics, ad creatives, and performance analytics
- TikTok: Ad account configurations, campaign data, audience settings, profile metrics, content scheduling data, and performance analytics
- Google Ads: Ad account configurations, campaign data, keyword lists, bid strategies, audience segments, and performance analytics
Campaign Performance Data
- Impressions, clicks, conversions, and engagement metrics
- Ad spend data and return on ad spend (ROAS) calculations
- Audience demographics and behavioral data (aggregated/anonymized)
- Content performance and scheduling data
Website Data
- Browser type, device information, IP address (when you visit our website)
- Pages visited, time spent, and navigation patterns
- Cookies and similar tracking technologies (see Section 8)
2 How We Use Your Information
We use the collected information for the following purposes:
- ✓ Service Delivery: Managing advertising campaigns, scheduling content, optimizing performance, and providing strategic recommendations across Meta, TikTok, and Google platforms.
- ✓ Performance Reporting: Creating and delivering campaign performance reports, analytics dashboards, and insights to help you understand and improve results.
- ✓ Communication: Responding to inquiries, sending service updates, sharing campaign insights, and coordinating deliverables.
- ✓ Billing & Administration: Processing payments, issuing invoices, and maintaining financial records.
- ✓ Legal Compliance: Complying with applicable laws, regulations, and platform policies.
3 Platforms We Access
As part of our Services, we access data through the following third-party platforms. Each platform has its own privacy policy governing how it handles data:
TikTok
Advertising campaigns, organic content scheduling, and profile analytics
TikTok Privacy Policy →4 Data Sharing with Third Parties
We do not sell, rent, or trade your personal information. We may share your data only in the following circumstances:
- With Platforms: Data is shared with Meta, TikTok, or Google as necessary to manage campaigns on your behalf. This is governed by each platform's terms and privacy policies.
- With Service Providers: We may engage trusted third-party service providers (e.g., analytics tools, project management software, payment processors) who assist in delivering our Services. These providers are bound by confidentiality obligations.
- Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to the same privacy protections.
- With Your Consent: We may share data for other purposes with your explicit written consent.
5 Data Storage & Security
- 🔒 Storage Location: Your data is stored on secure servers located in Indonesia and/or the regions where our third-party service providers operate. We ensure appropriate data protection measures regardless of location.
- 🔒 Security Measures: We implement industry-standard security measures including encrypted storage, secure data transmission (SSL/TLS), role-based access controls, and regular security audits.
- 🔒 Access Controls: Access to your data is limited to authorized team members who require it to perform their job functions. All team members are bound by confidentiality agreements.
- 🔒 Data Retention: We retain your data for the duration of our business relationship plus five (5) years, or as required by applicable law, whichever is longer. Upon request, we will delete your data within thirty (30) days, except where retention is legally required.
6 Your Rights
You have the following rights regarding your personal data:
- → Right to Access: Request a copy of the personal data we hold about you.
- → Right to Rectification: Request correction of inaccurate or incomplete data.
- → Right to Deletion: Request deletion of your personal data, subject to legal retention obligations.
- → Right to Restrict Processing: Request that we limit how we use your data.
- → Right to Data Portability: Receive your data in a commonly used, machine-readable format.
- → Right to Object: Object to processing of your data for specific purposes.
To exercise any of these rights, contact us at admin@litheagency.com. We will respond to your request within thirty (30) days.
7 International Data Transfers
As our Services involve third-party platforms (Meta, TikTok, Google) that operate globally, your data may be transferred to and processed in countries outside of Indonesia. These transfers are governed by the respective platform's data processing agreements and privacy policies. We ensure that appropriate safeguards are in place to protect your data during such transfers, in compliance with applicable Indonesian data protection regulations (UU PDP — Law No. 27 of 2022 on Personal Data Protection).
8 Cookies & Tracking Technologies
Our website (litheagency.com) uses cookies and similar tracking technologies to:
- Essential Cookies: Enable basic website functionality and security features.
- Analytics Cookies: Help us understand how visitors interact with our website, including pages visited and time spent, using tools such as Google Analytics.
- Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness across platforms.
You can control cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.
9 Children's Privacy
Our Services are directed to businesses and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately and we will promptly delete it.
10 Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be communicated to you via email or through a prominent notice on our website at least thirty (30) days before they take effect. Your continued use of our Services after the effective date of any changes constitutes acceptance of the updated policy.
11 Contact Us
For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us:
Lithe Agency (CV Creative Digital Collective)
📍 Surabaya, East Java, Indonesia