Privacy Policy

360eMarket, trading as 360 eMarket (registration number J402204). This Privacy Policy explains how we handle personal information when you visit our website, contact us, or use our services.

Our company website is https://360emarket.io. For privacy questions or requests, email info@360emarket.io or telephone +44 7308474231. References to ‘we’, ‘us’, and ‘our’ mean 360eMarket.

This Policy covers our business activities involving digital marketing, web development, SEO, Generative Engine Optimization (GEO), graphic design, automation, mobile development, AI video production, social media management, domains, and hosting.

We determine how information is used for our own enquiries, client administration, billing, security, and marketing. When handling a client’s customer, user, or employee data solely under their instructions, we act as their service provider or processor as applicable. That processing is governed by the client agreement and any required data processing agreement. The client’s privacy notice governs its own relationship with those individuals.

Depending on your interaction with us, we may collect contact and business details such as name, email, telephone, job title, company, address, and billing details; enquiry messages, briefs, contracts, approvals, support requests, and project communications; and transaction references, invoices, and payment status.

When needed for an agreed service, information may also include account identifiers and delegated access; website or app content and user records; campaign and analytics reports; social media messages and comments; automation inputs and outputs; hosting logs; and domain registrant contact details.

For creative and AI video projects, supplied materials may contain photographs, recordings, voices, likenesses, or other identifiable information. We ask clients to avoid unnecessary sensitive information and provide only material they are authorized to share. Any sensitive or biometric processing requires separate assessment and appropriate safeguards.

Technical information may include IP address, browser and device details, timestamps, referral information, pages accessed, diagnostic records, and security events. Collection depends on the website and tools actually deployed. Payment-card handling depends on the chosen provider; do not send full card details or passwords by ordinary email.

We use a custom CRM to manage enquiries, business contacts, client relationships, and project communications. Information recorded there depends on your interaction and the services requested. CRM hosting, access, integration, and retention arrangements must be confirmed against the actual deployment.

Information may come directly from your forms, emails, calls, meetings, uploads, or account interactions; from your authorized team members and representatives; and from platforms or accounts you authorize us to access.

Where lawful and relevant, we may receive limited business contact information from referrals, public business sources, or service partners. We provide any additional notice required when information is obtained indirectly. This Policy does not authorize indiscriminate collection or use of publicly accessible personal information.

We use necessary information to answer enquiries, prepare quotes, enter into and administer agreements, deliver and support services, manage accounts, issue invoices, reconcile payments, and communicate project updates.

We may also use information to diagnose technical issues, secure systems, prevent fraud and abuse, improve service quality, maintain records, comply with legal duties, and establish or defend legal claims. Marketing and advertising uses are subject to the choices and requirements explained below.

We limit use to the stated purposes or compatible purposes permitted by law. If a materially different use requires notice or consent, we provide that notice or obtain consent before proceeding. If required information is not provided, we may be unable to deliver the relevant service; optional information is identified where practical.

Where applicable law requires a legal basis, we rely on the basis appropriate to each activity: steps you request before a contract and performance of a contract with you; legal obligations for required records and disclosures; consent for activities requiring it; and legitimate interests for proportionate business administration, security, fraud prevention, and improvement, after considering your rights.

A contract with a company does not automatically provide a contractual basis for every use of its employees’ data. We assess the relevant basis for their business contact information. Where we rely on consent, you may withdraw it at any time without affecting earlier lawful processing. These grounds apply only to the extent recognized by the laws governing the activity.

The cookies and similar technologies used on a website depend on its actual configuration. Essential technologies may support security, sessions, and requested features. Optional analytics may measure usage; advertising pixels or identifiers may support campaign measurement, audience matching, or remarketing if deployed.

Before activating technologies requiring consent, we obtain consent through an appropriate control. Where provided, cookie settings allow you to accept, reject, or change optional choices. Browser controls can also block or delete cookies, although some features may be affected. Continuing to browse does not by itself constitute consent where affirmative consent is required.

Implementation details to confirm before this Policy takes effect: the technologies and provider names, their purposes and lifetimes, and the available preference controls. This draft page itself adds no analytics or advertising scripts. The hosting platform may process technical data or use its own necessary technologies.

We send service messages needed for enquiries, contracts, invoices, security, and support. Promotional communications are sent only where permitted by law and with consent where required.

You may opt out of marketing using an unsubscribe option where supplied or by emailing info@360emarket.io. Opting out does not stop essential service communications. We may keep limited suppression information to respect your choice. Client campaigns must use lawfully obtained audience data and comply with applicable marketing and platform rules.

For marketing, SEO, GEO, and social media work, access may include campaign accounts, analytics, lead records, audience data, and messages. Website and mobile projects may involve test data, databases, and diagnostic records. Automation can transfer information between client-approved systems. Hosting and domain services may involve registrant records, access logs, backups, and support data.

Access and use must be limited to the agreed purpose and permissions. Clients are responsible for providing lawful instructions, necessary notices, and an appropriate basis for sharing personal data. We remain responsible for our own legal and contractual duties. Where we process for a client, we assist with rights and security obligations as required by law and the agreement.

Requests about a client’s data should normally be directed to that client. If received by us, we will refer or assist with the request as appropriate rather than disclose data without authority.

AI-assisted work may involve prompts, scripts, images, audio, video, and associated project information. Use of identifiable material must be within the agreed scope, supported by the necessary permissions and lawful basis, and subject to appropriate provider safeguards.

We do not submit client confidential information or personal data to an AI tool without authorization and appropriate safeguards. Training uses, retention settings, and provider access must be assessed for the selected tool and disclosed as required. This Policy does not grant permission to train general-purpose AI models on client personal information or to repurpose a person’s voice or likeness.

AI output may be inaccurate and requires suitable review before use. We do not use AI to make solely automated decisions about individuals with legal or similarly significant effects as part of the services described here without a separate assessment, appropriate notice, and any safeguards required by law.

Our currently identified AI tools are OpenAI, Google Gemini, and Anthropic Claude. The specific service, account plan, and configuration determine what information each provider receives, its retention, whether content may be used for model improvement, and available processing controls. We assess these settings before sharing personal or confidential information and do not assume identical terms across consumer tools, business plans, and APIs.

Where necessary and lawful, recipients may include hosting and infrastructure providers, domain registrars and registries, payment providers, business communication and CRM services, analytics and advertising platforms, approved AI and automation providers, professional advisers, and personnel or contractors delivering the agreed work.

Recipients receive information needed for their role, subject to appropriate contractual restrictions and safeguards where applicable. Some providers act independently for their own regulated, security, billing, or platform purposes and describe those uses in their own notices.

We may disclose information to comply with lawful requests, protect rights and safety, investigate abuse, or support a business transfer subject to appropriate protections and notice where required. The exact provider list and processing locations must be confirmed against our actual systems before this draft is adopted.

Our confirmed business systems include a custom CRM, and our identified AI providers are OpenAI, Google (Gemini), and Anthropic (Claude). Naming a provider does not mean that every project or every personal record is sent to it. Access and disclosure depend on the authorized workflow. Analytics, advertising pixels, payment providers, and other integrations remain to be confirmed.

We do not sell personal information for money. Some privacy laws define ‘sale’ or ‘sharing’ more broadly, including certain advertising disclosures. Whether those definitions apply depends on the actual tracking and advertising configuration and applicable law.

If activities trigger a regional opt-out right, we provide the required notice and method and honor legally required preference signals where applicable. Email info@360emarket.io to request information or exercise an applicable opt-out. We do not claim that an unverified tracking configuration is exempt from these requirements.

We operate from Pakistan. Depending on the providers selected and the services you request, information may be accessed or processed in other countries, whose legal protections may differ.

Where cross-border transfer rules apply, we use the required lawful transfer arrangements and safeguards, such as approved contractual terms or an applicable adequacy mechanism, and conduct assessments where required. These measures must be verified for the relevant provider and destination. Contact info@360emarket.io for information about transfers affecting your data and available safeguard details, subject to lawful confidentiality limits.

We retain identifiable information only as long as reasonably needed for the relevant purpose, required legal or accounting periods, contractual obligations, security, and legitimate dispute handling.

Enquiries are kept while being handled and for an appropriate follow-up period; project and account records during delivery and necessary follow-up; financial records for legally required periods; and logs and backups for operational and recovery needs. Marketing records are reviewed when consent is withdrawn or an objection is received, while limited suppression records may remain to prevent further contact.

Exact periods depend on the record category, legal requirements, and agreed service settings. A retention schedule, including log and backup lifetimes, must be confirmed before adoption. When no longer needed, information is deleted or anonymized, subject to lawful holds. Backup copies may remain until scheduled overwrite with restricted access.

We use reasonable technical and organizational measures appropriate to the information and risk. These should include controlled access, secure transmission, credential protection, appropriate updates, and safeguards for service providers and backups where relevant. Specific controls depend on the service and must be verified during implementation.

No system can guarantee absolute security. We investigate suspected incidents, take reasonable containment and remediation steps, and notify affected clients, individuals, or authorities when required by law or contract. Report suspected privacy or security incidents to info@360emarket.io; do not include passwords or unnecessary sensitive data.

Depending on applicable law, you may have rights to access information, correct inaccuracies, request deletion, restrict or object to processing, receive a portable copy, withdraw consent, or opt out of certain advertising, sale, or sharing activities. Some rights apply only in particular circumstances and may be subject to lawful exceptions.

Send requests to info@360emarket.io with enough detail to identify the relevant interaction. We may request proportionate identity or authority verification and respond within the timeframe required by applicable law. Requests are generally free unless a lawful exception permits a fee or refusal; we explain any such decision.

You may complain to us and, where available under applicable law, to a competent data protection authority or other regulator. We will not unlawfully discriminate against you for exercising a privacy right. Region-specific notices or additional contact arrangements will be provided where required.

Our website and business services are not directed to children under 13, consistent with our existing website policy, or to children below any higher age threshold protected by applicable law. We do not knowingly collect their personal information through our own website.

If you believe a child has supplied information without appropriate authorization, contact info@360emarket.io so we can investigate and take appropriate action. Projects intentionally involving children’s information require a separate agreement, lawful permissions, and suitable safeguards.

Links, embedded content, social platforms, app stores, and external services may apply their own privacy practices. Review their notices before providing information. This Policy explains our handling of information and does not replace notices issued by independent third parties.

We may update this Policy to reflect changes to services, practices, or legal requirements. The adopted version will show its effective and last-updated dates. Material changes will be communicated where required, and consent will be obtained if required before new processing begins.

Draft prepared: 22 October 2026. Effective date: to be confirmed when the company verifies the described practices and adopts the Policy. This draft does not itself verify or implement cookie controls, provider agreements, retention settings, or regional compliance mechanisms.

Legal company name: 360eMarket • Trading name: 360 eMarket • Registration number: J402204

Privacy contact: info@360emarket.io • Telephone: +44 7308474231 • Website: https://360emarket.io