Privacy Policy

Who we are

nn.partners is an international PPC advertising and analytics agency based in Portugal. We are the data controller responsible for the personal data collected through this website (VAT PT310314909). If you have any questions about this policy or how we handle your data, contact us at info@nn.partners.

For Quebec: the person in charge of the protection of personal information at nn.partners is Nik Vdovenko, Founder. Contact: info@nn.partners.

Last updated: 21 October 2026.

What personal data we collect and why

We collect the information you choose to give us, plus a limited amount of technical data when you visit the site:

  • Contact and enquiry details. When you complete a form on our site or book a call, we collect the details you provide — typically your name, email address, company, website, and anything you write in your message — so we can respond and discuss working together.
  • Usage and device data. Like most websites, we collect standard analytics data such as pages viewed, referring source, approximate location, and browser and device type, to understand how the site is used and to improve it.
  • Advertising data. We use advertising and remarketing tools that may set cookies or similar identifiers to measure the performance of our marketing and to show relevant ads. This can involve building audiences based on your browsing so that ads are more relevant; we do not make decisions that produce legal or similarly significant effects about you by automated means.
  • Your cookie choice. When you choose which cookies we may use, we save that choice in a cookie in your browser, called nn_consent, with the date, the rules that applied where you were, how you chose and a random ID. This is how we respect your choice on every page and can show that you gave or refused consent.
  • Your country. To show you the right cookie choices, we look up your country from your connection through Cloudflare, our security and delivery provider. In the European Economic Area, the United Kingdom, Switzerland, Canada and Brazil, we keep only the country code in your browser and look it up again after 24 hours; elsewhere we do not keep it.

Our legal basis for using your data

Under the EU General Data Protection Regulation (GDPR), and the UK and Swiss laws that match it, we rely on these legal bases. Our legitimate interests: to reply to your enquiries and to run and protect the website, including the Cloudflare cookies that keep out bots and the cookie that remembers your choice. The performance of a contract: to deliver services you have hired us for. A legal obligation: to keep accounting records and to be able to show that you gave or refused consent. Your consent: for analytics, advertising and embedded media cookies and similar tools, and for any marketing emails you sign up for. You can withdraw consent at any time, as easily as you gave it, and withdrawing does not affect what happened before.

Cookies and tracking

We use cookies and similar tools of four types. Necessary: keep the site secure (Cloudflare) and remember your cookie choice. Analytics: show us how the site is used (Google Analytics, and Microsoft Clarity, which also records clicks, scrolling and mouse movement as session recordings). Advertising: measure our ads and show them to people who visited (Google Ads, the Meta pixel and the X pixel, plus a server-side copy of the Meta events). Embedded media: content from other sites inside our pages, such as the Calendly booking calendar, which loads without a click only when you allow embedded media; YouTube videos always wait until you press play. Google Tag Manager loads these tools and sets no cookies of its own.

In the European Economic Area, the UK, Switzerland, Canada and Brazil, and whenever we cannot tell where you are, only necessary cookies run until you choose. In the United States and elsewhere, analytics and advertising run and you can turn them off at any time. We honour Global Privacy Control everywhere: if your browser sends it, we turn off advertising and analytics for that browser. Advertising stays off while the signal is on; you can turn analytics back on in the cookie settings.

You can change or withdraw your choice at any time with Your Privacy Choices at the bottom of every page. We ask again when we change the tools we use, and after 6 months (EEA, UK, Switzerland, Canada, Brazil) or 12 months (elsewhere). You can also block cookies in your browser and turn off personalised Google ads at myadcenter.google.com.

Our Cookie Policy lists every cookie and tool, who sets it, why and for how long.

Who we share your data with

We share personal data only where needed. These providers work for us as service providers or processors: WP Engine (website hosting), Cloudflare (security and delivery), Calendly (booking calls) and the email providers we use to talk to you.

When you allow analytics or advertising, or where you have not opted out, these companies also receive data from our site, such as the pages you view, your IP address, your browser and the cookie IDs in our Cookie Policy: Google (Tag Manager, Analytics, Ads, and YouTube when you play a video), Microsoft (Clarity), Meta (the Meta pixel and server events, and a Meta script served by jsDelivr) and X. Some of them use this data for their own purposes too, as independent controllers, or jointly with us, as Meta does for data collected through its pixel. Their own privacy policies apply to that use. We may also disclose data where the law requires it.

We do not sell personal data for money. Under some US state laws, letting Google, Meta and X collect data on our site for advertising counts as selling or sharing personal information. US visitors can opt out at any time (see “Your US state privacy rights” below).

Where your data is sent

Some of our service providers are based outside the European Economic Area (EEA), including in the United States. Where personal data is transferred outside the EEA, we rely on appropriate safeguards — such as the European Commission’s Standard Contractual Clauses or another recognised transfer mechanism — to protect it. Google, Microsoft, Meta, X, Cloudflare, Calendly and WP Engine are based in the United States or send data there. For these transfers we rely on the EU-US Data Privacy Framework where the company is certified, or on the European Commission’s Standard Contractual Clauses, and on the UK and Swiss equivalents for UK and Swiss data.

How long we keep your data

We keep personal data only for as long as necessary for the purposes described in this policy. For example, we keep accounting and tax records for the minimum period required by Portuguese law, and we delete or anonymise enquiry and contact data once it is no longer needed, after a reasonable period of inactivity. Analytics and advertising data are retained according to the settings of the platforms described above. Your cookie choice stays in your browser for 6 months in the EEA, UK, Switzerland, Canada and Brazil, and 12 months elsewhere, unless you delete it sooner. We keep no copy of it on our servers. If you email us a privacy request, we keep the request and our answer for 24 months to show we handled it. How long each cookie lasts is in our Cookie Policy.

Your rights

Under the GDPR, and the UK and Swiss laws that match it, you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to certain processing, to data portability, and to withdraw consent at any time. To withdraw consent to cookies, use Your Privacy Choices at the bottom of any page; it takes effect at once. For anything else, email us at info@nn.partners. We reply within one month.

You also have the right to complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD, www.cnpd.pt), or to the authority where you live or work. For example: the Information Commissioner’s Office in the UK (ico.org.uk), the Federal Data Protection and Information Commissioner in Switzerland (edoeb.admin.ch), the Commission d’accès à l’information in Quebec (cai.gouv.qc.ca), the Office of the Privacy Commissioner of Canada (priv.gc.ca) and the ANPD in Brazil (gov.br/anpd).

Your US state privacy rights

This section is for residents of California and other US states with consumer privacy laws.

What we collect. In the last 12 months we collected: identifiers (your name, email address, IP address and cookie IDs); professional details you give us (your company, website and monthly ad spend); internet activity (pages viewed, clicks, scrolling and session recordings on our site); and approximate location (your country). We do not collect sensitive personal information.

Where it comes from. From you, from your browser and device, and from Calendly when you book a call.

Why we use it. To reply to you and deliver our services, to run and protect the website, to understand how the site is used, and to measure and show our ads.

Who receives it. Our service providers (WP Engine, Cloudflare, Calendly and our email providers), and, unless you opt out, Google, Microsoft, Meta and X for analytics and advertising.

Selling and sharing. We do not sell personal information for money. In the last 12 months, Google, Meta and X collected identifiers and internet activity on our site for cross-context behavioural advertising, which California law calls sharing and some states may call a sale. We do not knowingly sell or share the personal information of anyone under 16.

How long we keep it. As set out in “How long we keep your data” above, and in our Cookie Policy for each cookie.

Your rights. Depending on your state, you can ask to know what personal information we hold about you and get a copy, to have it deleted or corrected, and to opt out of its sale, sharing or use for targeted advertising. We do not use sensitive personal information, so there is nothing to limit. We will not treat you differently for using these rights.

How to opt out. Use Your Privacy Choices at the bottom of any page; it works at once for that browser. We honour Global Privacy Control: if your browser sends it, we treat it as a request to opt out, show “Opt-Out Preference Signal Honored” on our Your Privacy Choices page, and turn off advertising and analytics for that browser. Advertising stays off while the signal is on; you can turn analytics back on in the cookie settings. To opt out for data linked to your email address, email info@nn.partners; we act on it within 15 business days.

How to make a request. Email info@nn.partners. We will ask for enough detail to confirm the request is yours, such as the email address you used with us. Someone you authorise can make a request for you with your signed permission. We reply within 45 days. If we turn down your request, you can appeal by replying to our answer; if you are not satisfied with the result, you can contact your state attorney general.

Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “last updated” date. If you have any questions, please contact us at info@nn.partners.