Privacy Policy

Effective date: 13-Aug-2026
Last updated: 13-Aug-2026

PANDAQ, LLC (“PANDAQ,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information.

This policy covers both:

• Your visit to pandaq.co (the “Site”); and
• Our advertising and marketing activities, which we conduct on behalf of the brands we partner with. You may have encountered a PANDAQ-operated advertisement without ever seeing our name.

1. Who we are, and why you may not have heard of us

PANDAQ is a sales and market management company. We plan and run marketing and advertising campaigns for other businesses — our brand partners — and we provide sales support services to them.

Because we work on behalf of those brands, our campaigns generally carry the brand’s name rather than ours. If you clicked an advertisement and arrived at a brand’s website, that campaign may have been operated by PANDAQ even though the advertisement did not say so.

We are publishing this policy so that our data practices are transparent to consumers, partners, and regulators, whether or not you have interacted with us directly.

2. The most important thing to understand: where your transaction happens

When one of our campaigns sends you to a brand partner’s website — for example, AT&T — you are on that brand’s website, not ours.

• Any order, sign-up, or account you complete there is completed with that brand, on that brand’s systems.
• The name, address, phone number, payment card, credit information, and account details you enter there are collected by that brand, and are governed by that brand’s privacy policy — not this one. For AT&T, see the AT&T Privacy Policy.
• PANDAQ does not receive or have access to that consumer transaction data. We are not the merchant, and we do not process your payment.

What we do receive is described in the next section: campaign and performance data, which is generally about advertisements and traffic rather than about you by name.

3. Information we collect

3.1 Advertising, campaign, and traffic data

In running campaigns, we and the advertising platforms and partners we use collect information such as:

• Advertisement interaction data — impressions, clicks, click timestamps, the advertisement and campaign involved, and the keyword, placement, or audience that served it
• Source, campaign, and referral codes — parameters carried in a link that identify which campaign, partner, or affiliate sent the traffic, so that performance can be measured and referrals credited
• Device and connection data — IP address, browser type and version, operating system, device type, and general location inferred from IP address (such as country, region, or city)
• Online identifiers — cookie IDs, advertising identifiers, and similar identifiers assigned by advertising platforms
• Conversion and performance reporting — whether a click resulted in a sale or sign-up, and the value of it. We typically receive this in aggregated or de-identified form from the brand or the advertising platform.

Much of this data is collected by the advertising platforms themselves (for example, search and social advertising networks), and we access it through their reporting and audience tools. Some of it may be considered personal information under US privacy laws because it can be associated with a device or browser, even when it does not include your name.

3.2 Information from affiliates and affiliate networks

We work with affiliates and affiliate networks — third-party publishers and intermediaries who promote offers and send traffic to campaigns. Through these relationships we may receive click and conversion data, source and sub-affiliate identifiers, and performance reporting.

Affiliates and networks operate their own websites and tracking technologies under their own privacy policies. We require our affiliate partners to comply with applicable law and with the standards of the brands whose offers they promote, but we do not control their websites, and this policy does not cover them.

3.3 Information you give us directly on this Site

If you fill out the contact form on pandaq.co, we collect:

• Your name
• Your email address
• The selection you make on the form
• Anything else you choose to tell us in your message

This form is a business contact form — it is how prospective clients and partners reach us. Submissions are stored and emailed to our team. If you email or call us, we keep the information in that communication.

3.4 Site analytics and cookies

The Site uses cookies and similar technologies to make it function, to keep it secure against spam and malicious traffic, and to understand how it is used. Our web host and our website security service also record standard server log data.

Most browsers let you refuse or delete cookies in their settings. If you block cookies, parts of the Site may not work properly. See Section 6 for advertising-specific choices.

3.5 What we do not collect

We do not ask for, and ask that you do not send us, sensitive personal information — Social Security or government ID numbers, financial account or payment card numbers, credit reports, health information, or precise geolocation. As described in Section 2, consumer purchase and account information for brand partner products is collected by the brand, not by us.

4. How we use information

We use the information described above to:

• Plan, operate, target, measure, and optimise advertising campaigns for our brand partners
• Build and refine audiences and marketing strategy, including analysing which campaigns, creative, channels, and audiences perform
• Attribute results correctly among brands, affiliates, and networks, and calculate and validate commissions
• Detect and prevent advertising fraud, invalid traffic, and abuse
• Respond to inquiries submitted through the Site and communicate with prospective and current clients and partners
• Operate, secure, and improve the Site
• Comply with legal obligations, enforce our agreements, and meet the compliance requirements of our brand partners

5. How we disclose information

• To brand partners. We provide campaign performance and reporting to the brands we work for. Brand partners also provide us conversion reporting, usually aggregated or de-identified.
• To advertising platforms. We use search, social, display, and other advertising platforms to run campaigns. These platforms receive and process online identifiers and interaction data to serve and measure advertisements, including targeted advertising. See Section 6.
• To affiliates and affiliate networks. We exchange click, source, and conversion data with these partners to route traffic and settle commissions.
• To service providers. Vendors that host our website, secure it, deliver our email, and manage our business records, acting on our instructions.
• For legal reasons. Where required by law, subpoena, or legal process, or to protect the rights, property, or safety of PANDAQ, our partners, or others.
• In a business transaction. In connection with a merger, acquisition, financing, or sale of assets.

6. Targeted advertising, and your right to opt out

Advertising is our business, so please read this section carefully.

We use advertising platforms and partners that place cookies and similar technologies and use online identifiers to show advertisements and to measure them — including across different websites and services over time. Under the California Consumer Privacy Act (as amended by the CPRA) and similar laws in other US states, this activity is generally treated as “sharing” personal information for cross-context behavioral advertising, and in some states as “targeted advertising.” Some state laws define a “sale” broadly enough that exchanging identifiers with advertising and affiliate partners for value may also fall within it.

We do not exchange your personal information for money in the ordinary sense — we are not in the business of selling consumer lists. But we describe this activity plainly here rather than rely on a narrow reading of those terms.

You have the right to opt out. To opt out of the sale or sharing of your personal information and of targeted advertising, you can:

• Email us at [email protected] with the subject line “Do Not Sell or Share My Personal Information”
• Use the advertising platforms’ own controls, including Google My Ad Center, the DAA WebChoices tool, and the NAI opt-out tool

Opting out will not stop you from seeing advertisements; it means they will be less tailored to you.

7. Your privacy rights

Depending on your state of residence, you may have the right to:

• Know and access the categories and specific pieces of personal information we have about you, the sources, the purposes, and the categories of third parties we disclose it to
• Correct inaccurate personal information
• Delete personal information we hold about you
• Opt out of sale, sharing, and targeted advertising (Section 6)
• Limit the use of sensitive personal information, where applicable
• Not be discriminated against for exercising any of these rights
• Appeal a decision we make on your request, where your state provides that right

To make a request, email [email protected]. We will verify your identity before acting, and we respond within the timeframes required by law. An authorised agent may submit a request on your behalf with proof of authorisation.

A practical note: much of the campaign data we hold is tied to a device, browser, or cookie identifier rather than to your name, and some is aggregated or de-identified. That can make it impossible for us to link a request to specific records. Where we cannot reasonably verify or locate information about you, we will tell you, and we will not re-identify data solely to respond to a request. If your request concerns a purchase or account you completed with a brand partner, direct it to that brand — they hold that information, not us.

8. Retention

We keep information only as long as needed for the purposes described here — campaign measurement, commission settlement and validation, fraud prevention, responding to inquiries, and our legal, tax, and accounting obligations — after which we delete it or render it de-identified. Campaign and platform data is also subject to the retention practices of the advertising platforms that hold it.

9. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including managed hosting, encrypted connections (HTTPS), and security monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children’s privacy

Our Site and our campaigns are directed to adults and to businesses, not to children. We do not knowingly collect personal information from children under 13, and we do not knowingly target advertising to them. If you believe a child has provided us personal information, contact us at [email protected] and we will delete it.

11. Third-party websites

Our advertisements and our Site link to websites we do not operate — including brand partner websites such as AT&T, and affiliate publisher websites. We are not responsible for their privacy practices or content. Review the privacy policy of any website before providing information to it.

12. Contact us, and changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above, and we will give more prominent notice of material changes.

For questions, requests, or complaints, contact PANDAQ, LLC at [email protected].