Privacy Policy.
What we collect. How we use it. What you can do.

ISM Media Group LLC, doing business as Think Cre8tive ("Think Cre8tive," "we," "us," or "our"), is a digital marketing agency headquartered at 129 S. Main Street, Suite 260, Grapevine, TX 76051. This Privacy Policy explains how we collect, use, share, and safeguard information when you visit thinkcre8tive.com and our subdomains, when you contact us, when you request a proposal or audit, and when you become a client of ours.

This policy does not cover how our clients use their own websites, email lists, or advertising accounts. When we manage marketing on behalf of a client, that client is the data controller for their visitors and their privacy policy governs.

Information you give us directly

When you fill out a contact form, request a free audit, sign up for our newsletter, refer a friend, apply for a job, or work with us as a client, we collect the information you provide. That typically includes:

• Your name, business name, job title, email address, and phone number.
• Your website URL, industry, and a description of what you're working on.
• Budget, timeline, and goals you choose to share in a proposal request.
• Resume, portfolio links, and references when you apply for a role.
• Billing and tax information once you are a paying client.

Information collected automatically

When you visit our site, we and our service providers automatically log technical information, including:

• IP address, approximate location (city or region), and time of visit.
• Browser type, operating system, and device characteristics.
• Referring URL, pages viewed, links clicked, scroll depth, and time on page.
• Anonymous identifiers from cookies and similar technologies.

Information from third parties

We may receive information about you from advertising platforms (such as Google Ads and Meta), our CRM and email tools, public business directories, and partners who refer you to us. We use this information to understand which marketing efforts are working and to make sure we are talking to the right people.

We use information about you to:

1. Respond to your inquiries, schedule calls, and prepare proposals or audits.
2. Deliver the marketing services our clients have engaged us to perform.
3. Send you administrative messages about your account, projects, or invoices.
4. Send marketing communications about our services, only when you have opted in or are already a client.
5. Measure and improve our website, content, and advertising performance.
6. Detect, prevent, and address fraud, security incidents, and abuse of our services.
7. Comply with legal obligations and enforce our agreements.

We do not use any personal information you give us to train third-party artificial intelligence or machine learning models. Our internal AI tooling operates on de-identified data, or on client data under contract, with no model training rights granted to external vendors.

If you are in the European Economic Area, the United Kingdom, or another jurisdiction with similar laws, our legal basis for processing your personal information depends on the specific information and the context in which we collect it. In general:

• Contract. We process information to take steps at your request before entering into a contract and to perform a contract with you or your employer.
• Legitimate interests. We process information to operate our business, respond to inquiries, improve our services, and market to existing and prospective clients in a measured way.
• Consent. Where required, we rely on your consent — for example, for non-essential cookies or for marketing emails to new contacts.
• Legal obligation. We process information to comply with tax, accounting, and other laws that apply to us.

We use cookies, pixels, local storage, and similar technologies. These generally fall into four categories:

You can manage cookies through your browser settings or our on-site cookie banner. Disabling some categories may break parts of the site. Where you are located in a jurisdiction that requires it, we honor recognized opt-out signals such as Global Privacy Control.

We do not sell your personal information. We share it only with the people and platforms that help us run the business.

• Service providers. Hosting, email, CRM, analytics, accounting, advertising, and similar vendors who are bound by contract to use the information only for the services they provide to us.
• Advertising platforms. Google, Meta, LinkedIn, Microsoft, and similar networks, in hashed or aggregated form, to measure conversions and reach audiences similar to people who already engage with us.
• Professional advisors. Lawyers, accountants, and auditors when it is necessary to receive their advice.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, your information may be one of the assets transferred.
• Legal compliance. When required by subpoena, court order, law enforcement request, or to protect rights, safety, and property.
• Client work. If you submit information through a campaign or form we operate on behalf of a client, that client receives the lead. The client's privacy policy then applies to their use of it.

We run advertising campaigns on Google, Meta, LinkedIn, Microsoft, YouTube, TikTok, and other platforms. These platforms place cookies and pixels on our site so we can:

• Measure which ads, keywords, and audiences drive results.
• Re-engage people who showed interest but did not reach out.
• Build lookalike audiences from people who already converted.

You can limit these uses by opting out of personalized advertising through the platforms directly:

• Google Ad Settings
• Meta Ad Preferences
• LinkedIn Advertising Settings
• Digital Advertising Alliance opt-out

We keep personal information only as long as we have a legitimate business reason to. In practice that means:

• Prospect inquiries. Up to 24 months after your last interaction, unless you ask us to delete it sooner.
• Active clients. For the duration of the engagement and 7 years after, to meet tax, accounting, and legal requirements.
• Marketing list. Until you unsubscribe, after which we keep a suppression record to honor your opt-out.
• Analytics data. 14 months by default in Google Analytics, or as configured by us.
• Job applicants. 12 months from your application date.

Depending on where you live, you may have some or all of the following rights over the personal information we hold about you:

• Access. Request a copy of what we have.
• Correct. Ask us to fix information that is wrong.
• Delete. Ask us to erase information we no longer need.
• Portability. Get a copy in a portable format.
• Restrict or object. Limit certain processing.
• Opt out of sale or sharing. Where applicable. (We do not sell personal information.)
• Withdraw consent. Where processing is based on consent.
• Lodge a complaint. With a supervisory authority.

To exercise any of these rights, email privacy@thinkcre8tive.com. We will respond within 30 days. We will need to verify your identity before we can act on the request, and we will not discriminate against you for asserting a right.

California residents. Under the CCPA and CPRA, you have the right to know what categories of personal information we collect and the purposes for collecting it, to request deletion, to correct inaccurate information, and to opt out of sharing for cross-context behavioral advertising. You may submit a request yourself or through an authorized agent.

We use technical and organizational safeguards designed to protect personal information against loss, misuse, and unauthorized access. These include encryption in transit, access controls, single sign-on with multi-factor authentication on internal systems, vendor due diligence, and a written incident response process.

No system is perfectly secure. If we ever become aware of a breach involving your personal information, we will notify you and the appropriate authorities as required by law.

We operate from the United States. If you access our site from outside the U.S., your information will be transferred to, stored, and processed in the U.S. and in other countries where our service providers operate. Where required, we rely on Standard Contractual Clauses or equivalent transfer mechanisms.

Our services are designed for businesses and the adults who run them. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will delete it.

Our site and emails sometimes link to third-party sites, including our clients' websites and our own social profiles. We are not responsible for the privacy practices of those sites. Read their policies before sharing information with them.

We update this policy from time to time. When we do, we'll change the "last updated" date at the top. If the change is significant, we'll let active contacts know by email or with a notice on the site before it takes effect.

For any privacy question, request, or complaint, the fastest way is email. We aim to reply within two business days.

• Privacy team: privacy@thinkcre8tive.com
• General: hello@thinkcre8tive.com
• Phone: (817) 431-6700
• Mail: ISM Media Group LLC dba Think Cre8tive, 129 S. Main Street, Suite 260, Grapevine, TX 76051