Politique de confidentialité

Effective date: 23 October 2026

Khanjali LLC ("Khanjali", "we", "us") is a media buying company registered in New Mexico, United States. This policy explains what we do with personal information.

We handle personal information in two very different roles, and the rules are not the same in each.

1. Information about visitors to this website

Here we decide what is collected and why, so we are the controller.

What we collect

• Information you send us. When you use the contact form or email us, we receive your name, email address, company or website, your monthly ad spend band, and whatever you write in the message.
• Technical information. Our host records standard server data: IP address, browser type and version, device type, referring page, pages viewed, and timestamps.
• Cookies. This site runs on Shopify, which sets cookies needed for the site to work (session, security, load balancing) and, where applicable, analytics cookies. You can refuse non-essential cookies in your browser; the site will still work.

Why we use it

• To answer your enquiry and, if it goes further, to prepare a proposal. Legal basis where the GDPR applies: steps taken at your request before entering a contract.
• To keep the site secure and working. Legal basis: our legitimate interest in running a functioning website.
• To send the monthly email, if and only if you asked for it. Legal basis: consent. Every email carries an unsubscribe link, and unsubscribing takes effect immediately.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

How long we keep it

Enquiries that do not become engagements: 24 months, then deleted. Enquiries that become engagements: for the duration of the engagement and 6 years after it ends, which is how long we may need them for tax and contractual records. Newsletter subscribers: until you unsubscribe.

2. Information we handle for our clients

When we run advertising for a client, we work inside systems the client owns — their Meta Business Manager, their ad account, their Shopify store, their analytics. The personal information in those systems belongs to the client's relationship with their own customers. The client decides what is collected and why; we act on the client's instructions.

In GDPR terms, the client is the controller and Khanjali is a processor. In practice this means:

• We access client systems only to the extent needed to do the work.
• We do not copy client customer data out of those systems, and we do not use it for our own purposes, our own marketing, or any other client.
• We do not build or sell audience lists from one client's data.
• When an engagement ends, our access is removed. The data stays where it always was: in the client's own accounts.

If you are a customer of one of our clients and want to exercise your rights over your data, contact that brand directly — they hold the relationship and the data. We will support them in responding.

Clients who need a formal Data Processing Agreement should write to «EMAIL» and we will put one in place before the engagement starts.

3. Who else sees the information

We use a small number of service providers, each only for what it does:

• Shopify Inc. — hosting of this website and its forms.
• Meta Platforms, Inc. — advertising platforms, accessed through client accounts rather than our own.
• Our email and document tools — for correspondence and proposals.

Each receives only what it needs. We do not give anyone your information for their own marketing. We may disclose information where the law requires it, or to establish or defend a legal claim.

4. International transfers

We are based in the United States. If you contact us from outside the US, your information will be processed there. Where the GDPR or UK GDPR applies, those transfers rely on the European Commission's Standard Contractual Clauses or an equivalent mechanism.

5. Your rights

Depending on where you live, you may have the right to ask for a copy of the information we hold about you, to have it corrected or deleted, to object to or restrict how we use it, to receive it in a portable format, and to withdraw consent at any time.

If you are a California resident, you have the rights granted by the CCPA/CPRA, including the right to know, delete, correct, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined, so there is nothing to opt out of — but you can still ask, and we will confirm.

To exercise any of these, write to «EMAIL». We answer within 30 days. We will not charge you for it and we will not treat you differently for asking.

If you think we have handled your information badly, you can complain to your local data protection authority.

6. Security

Access to client systems is individual, never shared, and protected by two-factor authentication. Access is removed when an engagement ends or a person leaves. No system is perfectly secure, and we do not claim otherwise; if a breach affects you, we will tell you and the relevant authority within the time the law allows.

7. Children

This site is for businesses. We do not knowingly collect information from anyone under 16. If you believe a child has sent us information, write to «EMAIL» and we will delete it.

8. Changes

If we change this policy we will update the effective date above. Changes that materially affect you will be announced on this page before they take effect.

9. Contact

Khanjali LLC — 8206 Louisiana Blvd NE, Ste A #10902, Albuquerque, NM 87113, United States — «EMAIL»