GM Digital
milen@gmdigital360.com Book a call

Legal

Privacy Policy

Last updated: 17 July 2026

This Privacy Policy explains how GM Digital ("GM Digital", "we", "us", or "our") collects, uses, stores, and protects information — including data we access through third-party advertising and analytics platforms on behalf of the clients we work with. It applies to our website at gmdigital360.com and to GMD 360, our reporting and measurement platform.

1. Who we are

"GM Digital" is the trading name of GM Digital Ltd (Джи Ем Диджитал ООД), a limited liability company registered in Bulgaria under company number (EIK) 208679110, with its registered office at Manastirski Livadi, bl. B67, fl. 3, apt. 7, 1000 Sofia, Bulgaria. We are a performance-marketing agency that manages paid media and provides measurement and reporting services for e-commerce brands. For any question about this policy or about the data we hold, contact us at milen@gmdigital360.com or +359 888 417 372. GM Digital acts as a data controller for our own website and business contacts, and as a data processor for the advertising and analytics data we handle on behalf of our clients.

2. Information we collect

a. Website visitors and business contacts

  • Contact details you provide when you email us, book a call, or otherwise get in touch — such as your name, email address, company, and the contents of your message.
  • Basic usage data — such as pages viewed and referring source — collected through privacy-respecting analytics to understand how our site is used.

b. Client advertising and analytics data (via GMD 360)

When a client engages us, they authorise GM Digital to connect to their own accounts on third-party platforms so we can manage campaigns and produce reporting. Depending on the engagement, this may include data from:

  • Google Ads, Google Analytics (GA4), and Google Search Console (via the Google Ads API and related Google APIs);
  • Meta (Facebook / Instagram) Ads, TikTok Ads, and other advertising platforms;
  • Shopify and other e-commerce or order-management systems.

This data typically consists of aggregated campaign, spend, performance, and store metrics — impressions, clicks, cost, conversions, revenue, and similar. We access it only with the account owner's authorisation and only to deliver the services they have requested.

3. Google API Services — Limited Use

GM Digital's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When we access data through the Google Ads API or other Google APIs, we do so solely to provide and improve the advertising-management and reporting services our clients have authorised. Specifically, we:

  • access Google user data only with the explicit authorisation of the account owner;
  • use that data only to operate and report on the client's advertising, and to surface insights within GMD 360;
  • do not sell, rent, or transfer Google user data to third parties, and do not use it for advertising to unrelated audiences;
  • do not use Google user data to train generalised artificial-intelligence or machine-learning models;
  • allow humans to read the data only where the account owner has given consent, where it is necessary for security or to comply with the law, or where the data has been aggregated and anonymised.

4. How we use information

  • To respond to enquiries, schedule calls, and communicate with prospective and current clients.
  • To manage advertising campaigns and produce performance reporting and analysis for clients.
  • To operate, maintain, and improve GMD 360 and our measurement methods.
  • To comply with legal obligations and enforce our agreements.

5. How we store and protect data

Client advertising and analytics data is stored in secure, access-controlled cloud infrastructure (Google Cloud Platform / BigQuery). Access is restricted to authorised GM Digital personnel who need it to deliver the service. Connections to third-party platforms use OAuth and are limited to the scopes required for the engagement. We apply reasonable technical and organisational measures to protect data against unauthorised access, loss, or disclosure.

6. Sharing and sub-processors

We do not sell personal data. We share data only with:

  • Infrastructure and service providers that help us operate — for example Google Cloud (data storage and processing) and Cloudflare (website hosting) — acting as sub-processors under appropriate agreements;
  • The client the data belongs to, and people they authorise;
  • Authorities, where required by law.

7. Data retention

We keep business-contact information for as long as needed to manage our relationship and to meet legal or accounting obligations. Client advertising and analytics data is retained for the duration of the engagement and for a reasonable period afterwards, after which it is deleted or anonymised, unless a longer period is required by law or agreed with the client. You may request deletion of your Google user data at any time by contacting us.

8. Your rights

If you are in the European Union, the United Kingdom, or a jurisdiction with comparable law, you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. To exercise any of these rights, email milen@gmdigital360.com. You also have the right to lodge a complaint with your local data-protection authority (in Bulgaria, the Commission for Personal Data Protection).

9. International transfers

Some of our providers process data outside the country where you are located. Where data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

10. Cookies

Our website uses only the cookies necessary for it to function and, where applicable, privacy-respecting analytics. We do not use advertising or cross-site tracking cookies on this site.

11. Children

Our services are intended for businesses and are not directed to individuals under 16. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be communicated to active clients directly.

13. Contact

GM Digital Ltd (Джи Ем Диджитал ООД)
Company No. (EIK): 208679110
Registered office: Manastirski Livadi, bl. B67, fl. 3, apt. 7, 1000 Sofia, Bulgaria
Phone: +359 888 417 372
Email: milen@gmdigital360.com