Privacy Policy

The information we collect depends on how you interact with Botes & Co.

Information you provide directly

You may provide information including:

• your name
• company name
• job title
• email address
• telephone number
• information submitted through contact forms
• correspondence with Botes & Co.
• project briefs
• business and marketing information
• information necessary to provide consulting services
• information you choose to share during a client engagement

Please do not submit sensitive personal information through our general contact form unless it is genuinely necessary and we have agreed to receive it.

Website and technical information

When you use our website, we or our technology providers may collect technical information such as:

• IP address
• browser and device information
• approximate geographic region
• referring website or campaign
• pages viewed
• interaction with the website
• timestamps
• diagnostic and security logs
• cookie or consent preferences

Where required by applicable law, non-essential analytics and advertising technologies will only operate after appropriate consent has been obtained.

Client platform information

Where a client authorises Botes & Co. to access marketing, advertising, analytics or related systems, we may process information from platforms including Google Ads, Google Analytics and other authorised client systems.

Depending on the service and permissions granted, this may include:

• account and property identifiers
• campaign structures
• advertising performance
• spend and budget information
• impressions, clicks and conversions
• search terms and keyword information
• website and analytics performance
• event and conversion data
• attribution information
• audience or aggregated performance information
• account configuration
• recommendations or diagnostic information
• changes made through the authorised platform

We access only the information reasonably necessary to provide the authorised service.

We may use information to:

• respond to enquiries
• assess potential client engagements
• provide marketing strategy and consulting services
• develop positioning, narrative and go-to-market strategies
• analyse marketing and advertising performance
• operate and improve the Botes & Co. Control Room
• identify marketing opportunities, anomalies or issues
• prepare recommendations
• implement actions expressly authorised by a client
• verify the outcome of approved actions
• provide reporting
• maintain records relating to client work
• administer our website and business
• protect our systems and prevent fraud or misuse
• comply with contractual, legal or regulatory obligations
• improve our services using appropriately aggregated or de-identified information

The Botes & Co. Control Room is a marketing intelligence and execution system used to support Botes & Co. client engagements.

With a client's authorisation, the Control Room may connect to selected marketing and analytics platforms to retrieve authorised information, analyse performance, identify issues, prepare recommendations and support approved marketing actions.

Our intended operating model is:

Where a client authorises Botes & Co. or the Botes & Co. Control Room to access Google services, we may receive information through Google APIs, including where applicable Google Ads and Google Analytics information.

We use Google-connected information only to provide or improve the services the client has authorised, such as:

• retrieving marketing and advertising performance
• analysing account performance
• diagnosing issues
• preparing recommendations
• creating reports
• implementing authorised advertising changes
• verifying whether approved changes produced the intended result

We request only the permissions reasonably necessary for the functionality being provided.

Access may be read-only or may permit account management depending on the service requested and the permissions the client has expressly granted.

Google-connected information is not sold.

Google-connected information is not used for unrelated advertising.

Google-connected information is not provided to data brokers.

Botes & Co. uses modern technology and may use artificial-intelligence-assisted tools as part of its work.

These tools may assist with tasks such as:

• research
• summarisation
• data analysis
• performance diagnostics
• pattern detection
• drafting
• recommendation development
• approved operational execution

We apply data minimisation and do not intentionally provide an AI service with more client or personal information than is necessary for the relevant task.

Where appropriate, information may be aggregated, pseudonymised or redacted before processing.

Botes & Co. does not sell client information to AI providers.

Botes & Co. does not permit Google API data to be used to train general-purpose artificial-intelligence models.

Material client decisions remain subject to human judgement and applicable approval controls.

The legal basis on which we process personal information depends on the applicable law, the information concerned and the context in which it is collected.

Depending on the circumstances, we may process information:

• with your consent
• where processing is necessary to provide a service or perform a contract
• where processing is necessary to take steps requested before entering into a contract
• where necessary for legitimate business interests that do not improperly override individual privacy rights
• where required to comply with legal obligations
• where another lawful basis is available under applicable data-protection law

Where we rely on consent, you may withdraw that consent where applicable.

Our website may use cookies and similar technologies. These can include:

Strictly necessary technologies

Required for security, website operation, consent management or other functionality requested by the visitor.

Analytics technologies

Used to understand how visitors use the website and improve its performance and content. This may include Google Analytics.

Marketing technologies

If introduced, these may be used to measure campaigns, understand advertising performance or support marketing activity.

Where consent is legally required, analytics or marketing technologies will not operate until the visitor has made the relevant choice.

Visitors may change their preferences using the Cookie Preferences control available on the website.

Browser settings may also allow users to block or delete cookies.

We may disclose information to carefully selected service providers where reasonably necessary to operate Botes & Co. or provide client services.

These providers may include:

• website hosting and infrastructure providers
• cloud computing providers
• email and communications providers
• analytics providers
• consent-management providers
• security providers
• professional advisers
• contractors or specialist partners supporting an authorised engagement
• AI or technology providers used to support an authorised service
• marketing and advertising platforms where authorised by the relevant client

Service providers are expected to process information only for authorised purposes and subject to appropriate confidentiality, security or contractual requirements.

We may also disclose information where required by law, court order or competent regulatory authority or where reasonably necessary to protect Botes & Co., our clients, users or others from fraud, security threats or unlawful activity.

If Botes & Co. undergoes a merger, acquisition, reorganisation or sale of assets, information may be transferred as part of that transaction subject to applicable privacy requirements.

We do not sell personal information.

Botes & Co. works with multiple businesses.

Client information is used only for the relevant engagement and authorised purposes.

We do not intentionally disclose one client's confidential information, advertising data, strategic information or credentials to another client.

The Botes & Co. Control Room is designed to separate client workspaces and permissions.

Access to client information is limited to people and systems that reasonably require it to provide the authorised service.

Botes & Co. is based in the United Arab Emirates and may use technology providers or specialist service providers operating in other countries.

As a result, information may be processed outside the country in which it was originally collected.

Where required, we use appropriate safeguards for international transfers and select providers that maintain suitable privacy and security measures.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to satisfy applicable contractual, accounting, security, legal or regulatory requirements.

Our intended retention approach is:

General enquiries

Normally up to 24 months after the most recent meaningful interaction unless an engagement begins or continued retention is appropriate.

Client records

For the duration of the client relationship and afterwards for the period reasonably necessary to meet contractual, professional, accounting or legal obligations.

Connected platform information

Only for as long as required to provide the authorised service or maintain agreed reporting/history, after which information will be deleted, aggregated or anonymised where reasonably practicable and subject to client agreements and legal requirements.

Security and technical logs

Retained for an appropriate period based on their security and operational purpose.

Consent records

Retained for as long as reasonably necessary to demonstrate and respect the individual's privacy choices.

Where a client relationship ends, Botes & Co. will remove or anonymise unnecessary client data according to the applicable agreement and retention requirements.

We use reasonable administrative, organisational and technical safeguards intended to protect information against:

• unauthorised access
• loss
• disclosure
• misuse
• alteration
• destruction

Measures may include:

• encryption in transit
• encryption of sensitive credentials at rest
• access controls
• authentication
• restricted permissions
• separation of client environments
• secure credential management
• audit and activity logging
• software and dependency updates
• backup and recovery processes

No system can guarantee absolute security.

If we become aware of a material personal-data incident, we will take appropriate steps in accordance with applicable law and contractual obligations.

Depending on where you live and the law that applies, you may have rights in relation to your personal information.

These may include rights to:

• request information about how your data is processed
• request access to personal information we hold about you
• correct inaccurate or incomplete information
• request deletion in applicable circumstances
• object to or restrict certain processing
• withdraw consent where processing depends on consent
• request transfer or portability of information where applicable
• raise a complaint with an appropriate regulator or authority

To exercise a privacy right, contact: hello@botesandco.com

We may need to verify your identity before completing a request.

Where information is processed by Botes & Co. solely on behalf of a client, we may refer the request to that client as the relevant controller.

We may contact existing or prospective clients where permitted by applicable law.

Where consent is required, marketing communications will only be sent with appropriate consent.

You can unsubscribe from marketing emails using the unsubscribe function provided or by contacting us.

Service, contractual or security messages relating to an active client engagement are not marketing communications and may still be sent where necessary.

Our website may link to third-party websites and services.

Botes & Co. is not responsible for the privacy practices or content of independent third parties.

We recommend reviewing the privacy information provided by those services.

Botes & Co. provides business-to-business professional services and is not intended for children.

We do not knowingly seek to collect personal information from children through the website.

If you believe a child has provided personal information to us inappropriately, please contact us so that we can take appropriate action.

We may update this Privacy Policy as Botes & Co., our technology or applicable requirements develop.

The latest version will always be published on this page and will state its effective date.

Where a change materially affects how we use information already collected, we will take any additional steps required by applicable law.