Effective Date: April 2, 2026
Privacy Policy
IMPORTANT LEGAL NOTICE: This document constitutes a legally binding agreement. Please read all sections carefully. Momentum recommends consulting a qualified legal professional for jurisdiction-specific guidance.
Legal Entity: Momentum
Website: www.themomentumhq.com
Contact: legal@themomentumhq.com
Registered Address: Karachi, Pakistan
Jurisdiction: Pakistan (with GDPR & CCPA compliance provisions)
1. Introduction & Scope
Momentum ("we," "us," or "our") is committed to protecting the privacy of individuals who interact with our website (www.themomentumhq.com) and engage with our marketing services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and relevant Pakistani data protection standards.
By accessing our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use of our website and services.
2. Data Controller
Entity: Momentum
Address: Karachi, Pakistan
Email: legal@themomentumhq.com
Website: www.themomentumhq.com
3. Information We Collect
3.1 Identity & Contact Information
- Full name and email address
- Job title and professional designation
- Company name and organisation details
3.2 Business & Commercial Information
- Marketing budget ranges and spend information
- Business objectives, goals, and campaign briefs
- Industry sector and existing marketing activities
3.3 Technical & Usage Data
- IP address and approximate geolocation
- Browser type, version, and operating system
- Pages visited and navigation patterns via Google Analytics / GA4
- Professional audience data via LinkedIn Insight Tag
3.4 Communication Data
- Email correspondence and enquiry form submissions
- Newsletter subscription preferences managed via Mailchimp
- Records of project meetings and communications
4. Legal Basis for Processing (GDPR)
- Contractual Necessity: Processing required to deliver agreed services.
- Legitimate Interests: Analytics and business development where your interests do not override ours.
- Consent: Email marketing and non-essential cookies. Withdrawable at any time.
- Legal Obligation: Compliance with applicable laws or court orders.
5. How We Use Your Information
- To provide marketing, SEO, content strategy, social media management, branding, content management, and fractional CMO services
- To communicate regarding projects, proposals, and service updates
- To send marketing newsletters where consent has been given
- To process invoices, retainer fees, and financial records
- To analyse website usage and improve user experience
- To comply with legal and regulatory obligations
6. Data Sharing & Third Parties
We do not sell, rent, or trade your personal data. We share information only with:
- Google LLC (Google Analytics / GA4) — website analytics
- LinkedIn Corporation (LinkedIn Insight Tag) — campaign measurement
- Mailchimp / The Rocket Science Group LLC — email marketing
- Legal counsel and accountants under confidentiality obligations
- Regulatory authorities where required by law
7. International Data Transfers
Third-party tools including Google Analytics and LinkedIn may transfer data outside Pakistan and the EEA. Where such transfers occur, we ensure appropriate safeguards including Standard Contractual Clauses (SCCs) are in place.
8. Data Retention
- Client data: Duration of engagement plus 7 years for financial records
- Prospect and enquiry data: Up to 2 years from last contact
- Analytics data: Up to 14 months per Google Analytics default settings
- Marketing email data: Until unsubscription or withdrawal of consent
9. Your Data Protection Rights
9.1 GDPR Rights (EU/EEA Residents)
- Right of Access, Rectification, Erasure, Restriction, and Portability
- Right to Object to processing based on legitimate interests
- Right to Withdraw Consent at any time
- Right to Lodge a Complaint with your local supervisory authority
9.2 CCPA Rights (California Residents)
- Right to Know, Delete, and Opt-Out of sale (note: we do not sell personal data)
- Right to Non-Discrimination for exercising your rights
Submit rights requests to legal@themomentumhq.com. We respond within 30 days (GDPR) or 45 days (CCPA).
10. Data Security
- SSL/TLS encryption for all data in transit
- Role-based access controls and staff confidentiality obligations
- Regular security assessments
No method of internet transmission is completely secure. We cannot guarantee absolute security.
11. Children's Privacy
Our services are not directed at children under 13. If we become aware a child has provided data without parental consent, we will delete it promptly.
12. Changes to This Policy
We may update this Policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email or website notice with a revised effective date.
13. Contact Us
Email: legal@themomentumhq.com
Address: Momentum, Karachi, Pakistan
Website: www.themomentumhq.com
