Legal

Privacy Policy

Last updated: 5 May 2026

Your data, in plain language. This page explains what we collect, why we collect it, and what control you have over it.

1. Who We Are

Somizu LTD ("Somizu", "we", "us", "our") is a digital marketing agency operating across London, Toronto, and Colombo. This Privacy Policy explains what personal data we collect through somizumedia.com (the "Site"), how we use it, who we share it with, and the rights you have over it.

If you have any questions, you can reach us at [email protected].

2. Information We Collect

Information you give us

When you submit a form on the Site (Apply, Contact, Strategist, Careers, Manager, Intern, Executive), we collect the details you provide, which may include:

  • Name, email address, phone number, Instagram handle
  • City, year of birth, school, fields of study, academic grades
  • Work history, English proficiency, salary expectation, migration plans
  • CV / resume files (PDF or DOC) when applying for a role
  • Any free-text message or notes you choose to include

Information collected automatically

When you visit the Site, we (or our service providers) automatically collect:

  • IP address, browser type, device type, operating system
  • Pages visited, time on page, referring URL, clicks
  • Cookies and similar tracking identifiers (see Section 5)

3. How We Use Your Information

We use the information we collect to:

  • Respond to inquiries and process job applications
  • Evaluate candidates for open roles at Somizu
  • Operate, maintain, and improve the Site and our services
  • Measure and optimize our marketing campaigns, including ads on Meta (Facebook, Instagram)
  • Comply with legal obligations, prevent fraud, and enforce our terms

Our lawful bases under GDPR include: your consent (cookies, marketing), legitimate interest (security, analytics, recruiting), and contract performance (responding to your inquiry).

4. Who We Share Your Information With

We do not sell your personal data. We share it only with trusted service providers strictly for the purposes above:

  • Google LLC: form submissions are processed via Google Apps Script and stored in Google Sheets and Google Drive (CV uploads)
  • Cloudflare, Inc.: website hosting, DNS, and CDN delivery
  • Meta Platforms, Inc.: pixel-based analytics and ad measurement (Facebook Pixel)
  • Resend / email providers: transactional notifications when forms are submitted

We may also disclose information if required by law, court order, or to protect the safety and rights of Somizu, our team, or third parties.

5. Cookies and Tracking Technologies

We use cookies and similar technologies (pixels, web beacons, local storage) to remember you, understand how the Site is used, and measure ad performance.

Meta (Facebook) Pixel

We use the Meta Pixel to track standard events (PageView, Lead) and a custom event (StrategistApplication) for the purpose of measuring conversions and optimizing advertising delivered through Meta. Meta may set cookies on your browser to enable this. You can manage Meta's use of your data in your Meta ad preferences.

Your choices

Most browsers let you block or delete cookies. Blocking cookies may affect Site functionality. You can also opt out of interest-based advertising via the Digital Advertising Alliance (US) or Your Online Choices (EU).

6. Data Retention

We keep job application data (including CVs) for up to 24 months from submission, so we can consider you for future roles. Contact form submissions are retained for up to 12 months. Analytics and pixel data are retained according to the providers' default settings (typically 24 months for Meta).

You can request earlier deletion at any time, see Section 8.

7. International Transfers

Somizu operates internationally, and your data may be processed and stored on servers located in the United States, the United Kingdom, the European Union, or other countries where our service providers operate. Where required, we rely on standard contractual clauses or equivalent safeguards for cross-border transfers.

8. Your Rights

Depending on your jurisdiction (GDPR, UK GDPR, CCPA, PIPEDA), you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of your data ("right to be forgotten")
  • Restrict or object to certain processing
  • Receive your data in a portable format
  • Withdraw consent at any time (where consent is the legal basis)

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

9. Security

We use industry-standard security measures, including TLS encryption in transit and access controls on stored data, to protect your information. No system is 100% secure, but we work to minimize risk and respond promptly to any incident.

10. Children

The Site is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent revision. Material changes will be highlighted on the Site or communicated by email where appropriate.

12. Contact

Questions, requests, or complaints? Reach us at:

Somizu LTD

Email: [email protected]

Phone: +1 437 869 1720

Offices: London · Toronto · Colombo