Privacy Policy
Effective 10 July 2025
(supersedes all prior versions, incl. 27 Dec 2023)

1 Who We Are
Passion Partners LLC (“Company”, “we”, “us”, “our”) is a limited liability company registered at 42A Mashtots St, Unit 16, Kentron District, Yerevan 0010, Armenia.
Contact for privacy matters: hello@pp.marketing (subject line “Data Request”).

2 Scope
This Policy applies to the website https://pp.marketing and any related services (together the “Service”). It explains what personal data we collect, why, on what legal basis, for how long, how we protect it, where we transfer it, and which rights you have under:
  • EU / EEA & UK GDPR
  • California CPRA and other US-state privacy laws
  • Brazil LGPD
  • Armenia Law on Personal Data Protection

3 What We Collect

Category

Data Elements

Source

Purpose

Account Data

Name, e-mail, phone, Telegram @username

You

Create & manage account (Art 6-1-b GDPR / Contract)

Usage Data

IP, device ID, browser & OS info, pages viewed, session timestamps

automatic

Security, troubleshooting, analytics (Art 6-1-f GDPR / Legitimate interest)

Tracking Data

Cookie ID, advertising ID, referrer URL

automatic

Analytics (Google Analytics 4, Yandex Metrica) & ad-retargeting (Meta Ads, Google Ads) – collected only with consent via our Cookie banner (Art 6-1-a GDPR / Consent)

We do not intentionally collect “special categories” of data nor user-generated content.

4 Cookies & Similar Tech

Type

Tool(s)

Retention

Opt-out

Strictly Necessary

First-party session cookie

Session

Via browser settings

Analytics

Google Analytics 4, Yandex Metrica

26 months

CMP banner (“Analytics”)

Advertising

Meta Pixel, Google Ads tag

3–12 months

CMP banner (“Marketing”)

On your first visit we display a Consent-Management Banner. Non-essential cookies load only after you click “Accept” or configure granular choices.

5 How We Use Data
  1. Provide the Service & fulfil contracts you request
  2. Account administration and customer support
  3. Security & fraud-prevention (rate-limiting, anomaly detection)
  4. Analytics & product optimisation (aggregated statistics)
  5. Direct marketing of our own similar services (opt-out anytime)
  6. Advertising retargeting – only if you consent to Marketing cookies
  7. Legal compliance (tax, bookkeeping)
We never sell personal data.

6 Retention Schedule

Data Set

Retention Rule

Account records & contracts

6 years after last commercial interaction (legal bookkeeping)

Support tickets

24 months

Analytics events

26 months (GA4 default)

Advertising identifiers

12 months or until consent is withdrawn

Cookie consents

3 years (regulatory requirement)

Data needed to establish, exercise or defend legal claims may be kept longer.

7 International Transfers
Servers are in AWS (eu-central-1) & GCore (Frankfurt). Staff and some processors operate in Armenia, EEA, UK and US.
Transfers from EEA/UK to Armenia / US are covered by:
  • EU Standard Contractual Clauses (2021/914)
  • UK International Data Transfer Addendum
  • Supplementary technical measures (TLS 1.3, encryption-at-rest).
Copies of executed SCCs are available on request.

8 Security Measures
  • Transport encryption TLS 1.3 for all traffic
  • AES-256 encryption at rest (databases & backups)
  • Least-privilege, role-based access; MFA for admin accounts
  • Quarterly vulnerability scans & annual penetration test
  • Incident Response Plan incl. 72-hour breach notice to authorities and users where required

9 Automated Decision-Making
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.

10 Your Rights

Region

You May

How

EU / UK

Access, rectify, erase, restrict, portability, object, withdraw consent, lodge complaint with supervisory authority

Email hello@pp.marketing

US (CPRA etc.)

Know, delete, correct, opt-out of “sale/share”, limit sensitive data

“Do Not Sell / Share” link in cookie banner

Brazil

Confirm, access, correct, anonymise, delete, portability, information, revoke consent

Same e-mail

We respond within 30 days (extendable once by 30 days).

11 Children
Service not directed to individuals under 18. If we learn we collected data from a minor without parental consent, we delete it immediately (COPPA / GDPR Art8).

12 Links to Third-Party Sites
We are not responsible for external sites’ privacy practices. Review their policies.

13 Changes
We may update this Policy. Major changes → notice on the Website + e-mail to registered users. “Last updated” date shows current version; previous versions are archived [here].

14 Contact
Questions, requests or complaints → hello@pp.marketing
Postal: Privacy Lead, Passion Partners LLC, 42A Mashtots St #16, Yerevan 0010, Armenia.

(End of Policy)