Privacy policy
Last updated 25 September 2026
This policy explains what personal data SBTMedia collects when you visit sbtmedia.agency, why, who we share it with, and the choices you have. We keep it short and we collect as little as we need.
Who we are
SBTMedia is operated by Sebastian Thuesen and is the data controller for this website. For anything related to privacy, emailsebastian@sbtmedia.agency.
What we collect
Information you give us
- Report opt-in form: your first name, email address, phone number (optional) and approximate monthly ad spend.
- Funnel teardown questionnaire: your first name, email address, phone number, website, and your answers about your business, goals, traffic sources and ad spend.
- Booking a call: the details you enter into Calendly, such as your name, email address and meeting notes.
- Email: anything you choose to send us when you write to us.
Information collected automatically
- Usage data: pages you visit, clicks, scrolling, time on page, referring website, browser and device type, and approximate location derived from your IP address.
- Session recordings: we record how visitors move through our pages so we can see where they get stuck. Everything typed into form fields is masked and never recorded.
- Campaign data: if you arrive from an ad or a tagged link, we store the campaign parameters (such as
utm_sourceorfbclid) so we know which ad brought you here.
How we use it
- To send you what you asked for and to reply to you.
- To prepare for and hold calls you book with us.
- To understand how the site is used and to improve it.
- To measure how well our advertising works and to show our ads to people who are more likely to find them relevant.
- To keep the site secure and to block spam and abuse.
We do not sell your personal data.
Legal bases
Where data protection law such as the GDPR applies, we rely on: yourconsent for analytics and advertising cookies; the steps needed to respond to your request when you fill in a form or book a call; and our legitimate interests in running, securing and improving the site. You can withdraw consent at any time.
Who we share it with
We use a small number of service providers to run the site. They process data on our behalf or under their own privacy policies:
| Provider | Purpose | Data |
|---|---|---|
| Cloudflare | Hosting, security and server logs | IP address, request data |
| Meta (Pixel & Conversions API) | Ad measurement and targeting | Page views and conversions, cookie IDs, IP address, browser details, and your email, phone, first name and country in hashed (encrypted one-way) form |
| PostHog (EU hosting) | Product analytics and session recordings | Usage data, masked session recordings, campaign data |
| Calendly | Scheduling calls | What you enter when booking |
| Wistia | Hosting and playing videos | Viewing activity, IP address, browser details |
We may also share data if required by law, or as part of a sale or restructuring of the business.
Cookies
We and our providers use cookies and similar technologies:
sbt_attr(ours): remembers which campaign brought you here. Kept for 90 days._fbp,_fbc(Meta): ad measurement. Kept for up to 90 days.ph_*(PostHog): analytics. Kept for up to one year.- Calendly and Wistia set their own cookies on the pages where they appear.
You can block or delete cookies in your browser settings, and the site will still work. You can also control ad personalisation in yourMeta ad preferences.
International transfers
Some providers, including Meta, Cloudflare and Calendly, process data in the United States and other countries. Where required, these transfers are protected by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
How long we keep it
We keep the information you submit for as long as we need it to respond to you or work with you, and for up to two years after our last contact unless the law requires longer. Analytics data is kept for up to one year. Our providers keep data according to their own retention policies.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict how we use it, and to withdraw consent. To exercise any of these, emailsebastian@sbtmedia.agency. We will reply within 30 days. You also have the right to complain to your local data protection authority.
Security
The site is served over HTTPS, and personal data sent to Meta is hashed before it leaves our servers. No system is perfectly secure, but we take reasonable steps to protect your data.
Children
This site is for businesses and is not directed at anyone under 16. We do not knowingly collect data from children.
Changes
We may update this policy from time to time. The date at the top shows when it last changed.