Privacy Policy
Content Marketing House Website: contentmarketinghouse.com Last updated: August 1, 2026
1. Who We Are
Content Marketing House (“we,” “us,” “our”) is a remote-first content marketing agency providing content strategy, content creation, SEO, and related digital marketing services to business clients.
This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website or use our services. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection law (BDSG).
2. Scope of This Policy
This policy applies to:
- Visitors to contentmarketinghouse.com
- Prospective clients who contact us or request a quote
- Clients who engage our services
- Anyone who communicates with us by email, contact form, or other channels
It does not apply to third-party websites we link to. We are not responsible for the privacy practices or content of external sites, and we encourage you to review their policies separately.
3. What Data We Collect
3.1 Data You Provide Directly
- Contact and inquiry data: name, email address, company name, phone number, and the content of your message when you use our contact form or email us.
- Client and contract data: billing details, business address, VAT ID, project briefs, and communication history when you become a client.
- Payment data: processed via third-party payment providers; we do not store full payment card details on our systems.
3.2 Data Collected Automatically
- Server log data: IP address, browser type and version, operating system, referrer URL, date and time of access, and pages visited. This data is collected by our hosting infrastructure for security and technical operation.
- Analytics data: we use privacy-focused, cookie-less analytics to understand aggregate website usage (pages viewed, approximate location at country level, device type). This data is anonymized and cannot be used to identify you.
3.3 Data We Do Not Collect
We do not knowingly collect special categories of personal data (e.g. health, religious, or political data) and we do not knowingly collect data from children under 16. Our website and services are directed exclusively at businesses and business professionals.
4. Legal Bases for Processing (Art. 6 GDPR)
| Purpose | Legal Basis |
|---|---|
| Responding to inquiries and quotes | Art. 6(1)(b) — pre-contractual measures |
| Delivering contracted services | Art. 6(1)(b) — performance of a contract |
| Invoicing, accounting, tax retention | Art. 6(1)(c) — legal obligation |
| Website security and server logs | Art. 6(1)(f) — legitimate interest in secure, stable operation |
| Anonymized analytics | Art. 6(1)(f) — legitimate interest in improving our website |
| Marketing emails to existing clients | Art. 6(1)(f) / §7(3) UWG, with opt-out at any time |
| Newsletter (if subscribed) | Art. 6(1)(a) — consent, withdrawable at any time |
5. How We Use Your Data
We use personal data to:
- Respond to inquiries and provide quotes
- Deliver, manage, and invoice our services
- Communicate about projects, deliverables, and support
- Maintain the security and functionality of our website
- Comply with legal obligations (tax, commercial record-keeping)
- Improve our website and services based on aggregate usage data
We do not sell, rent, or trade personal data to third parties. We do not use personal data for automated decision-making or profiling that produces legal effects.
6. Cookies and Tracking
Our website is designed to operate with minimal tracking:
- Essential technical cookies: may be set for security and load-balancing purposes (e.g. by our CDN/security provider). These are strictly necessary and do not require consent.
- Analytics: we use a self-hosted, cookie-less analytics solution that does not store personal identifiers and does not track you across websites.
- No advertising cookies: we do not use third-party advertising or cross-site tracking cookies.
If our cookie usage changes in the future, we will update this policy and, where legally required, request your consent via a cookie banner.
7. Third-Party Service Providers (Processors)
We work with carefully selected service providers who process data on our behalf under data processing agreements (Art. 28 GDPR), including:
- Hosting and infrastructure providers (website hosting, server management)
- Content delivery network and security services (e.g. DDoS protection, DNS)
- Email and communication providers
- Payment processors (for client invoicing)
- Subcontractors and freelance specialists who assist in delivering client services, bound by confidentiality and data protection obligations
As a remote agency, some team members and subcontractors may be located outside the European Economic Area. Where personal data is transferred outside the EEA, we ensure appropriate safeguards under Art. 44 ff. GDPR, such as EU Standard Contractual Clauses or an adequacy decision.
8. Data Retention
We retain personal data only as long as necessary:
- Inquiry data: deleted after 12 months if no business relationship develops
- Contract, invoice, and accounting data: retained for statutory periods under German commercial and tax law (6–10 years, §257 HGB / §147 AO)
- Server logs: automatically deleted after a short rolling period (typically 7–30 days) unless needed for security investigation
- Newsletter data: retained until you unsubscribe
After the applicable retention period, data is deleted or irreversibly anonymized.
9. Your Rights Under the GDPR
You have the right to:
- Access (Art. 15) — obtain a copy of the personal data we hold about you
- Rectification (Art. 16) — correct inaccurate data
- Erasure (Art. 17) — request deletion where no legal retention obligation applies
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Object (Art. 21) — object to processing based on legitimate interest, including direct marketing
- Withdraw consent (Art. 7(3)) — at any time, without affecting prior processing
To exercise any of these rights, contact us at [privacy email]. We will respond within one month.
You also have the right to lodge a complaint with a supervisory authority. For Lower Saxony, Germany, this is: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover (lfd.niedersachsen.de).
10. Data Security
We implement appropriate technical and organizational measures (Art. 32 GDPR) to protect personal data, including TLS/SSL encryption of our website, access controls, secure hosting environments, and regular software updates. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
11. Website Content, External Links, and No-Guarantee Disclaimer
The content on contentmarketinghouse.com is provided for general informational purposes only. While we make reasonable efforts to keep information accurate and current:
- We make no warranties or representations as to the accuracy, completeness, reliability, or suitability of any content on this website.
- Nothing on this website constitutes professional, legal, financial, or business advice, and no content should be relied upon as such.
- Blog posts, guides, statistics, case studies, and marketing claims reflect general industry information or our experience and do not guarantee any specific result for your business.
- External links are provided for convenience; we have no control over, and accept no responsibility for, the content of linked third-party websites.
- We reserve the right to modify, update, or remove website content at any time without notice.
To the fullest extent permitted by law, we exclude liability for any loss or damage arising from reliance on website content. Statutory liability for intent, gross negligence, and injury to life, body, or health remains unaffected.
Note: Detailed terms governing our services, deliverables, performance expectations, and limitations of liability are set out in our Terms of Service and in individual client agreements, which take precedence over general website content.
12. Client Content and Confidentiality
When delivering services, we may process personal data contained in materials clients provide (e.g. customer testimonials, staff bios, case study data). In such cases, the client remains the data controller and warrants they have the legal right to share that data with us. We process it solely on the client’s instructions under a data processing agreement where required.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect legal, technical, or business changes. The current version is always available on this page with the “Last updated” date above. Material changes will be highlighted on our website.
14. Contact
For any questions about this Privacy Policy or how we handle your data:
Content Marketing House Email: [email protected]