Privacy Policy

Last updated: October 23, 2026

Damaxis Limited ("Damaxis", "we", "our" or "us") is committed to protecting the privacy of our clients, website visitors and the users of our internal tools. This Privacy Policy explains what information we collect, how we use it, and the rights you have in relation to it. It applies to the website damaxis.com and to the services we provide.

1. Who We Are

The data controller is Damaxis Limited, a company registered in the Republic of Cyprus, with its registered office at Ammou 17, Flat 101, 2365 Nicosia, Cyprus. You can contact us at info@damaxis.com.

2. Information We Collect

2.1 Information you provide

• Contact details submitted via email or our contact form (name, email address, company name, message content).
• Business information provided by clients for the purpose of delivering marketing services.

2.2 Information collected automatically

• Technical data such as IP address, browser type, device information and pages visited, recorded in standard server logs.

2.3 Google Ads API data

When a client authorises us to manage their Google Ads account, our internal tools access advertising data through the Google Ads API, such as campaign structure, budgets, keywords and performance metrics (impressions, clicks, costs, conversions). This data relates to the client's advertising account and is processed solely to deliver the services agreed with that client.

3. How We Use Your Information

• To provide, manage and improve our digital marketing services.
• To manage and optimise advertising campaigns on behalf of our clients.
• To produce performance reports and analytics for our clients.
• To respond to enquiries and support requests.
• To comply with legal, tax and accounting obligations.

4. Legal Basis for Processing (GDPR)

We process personal data on the basis of: (a) performance of a contract with our clients; (b) our legitimate interests in operating and improving our business and website; (c) compliance with legal obligations; and (d) your consent, where required.

5. Google API Services – Limited Use

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We access Google Ads data exclusively to manage and report on campaigns for the client whose account is accessed.
• We do not sell, share or transfer Google API data to third parties, except as necessary to provide the service, to comply with law, or with the client's explicit consent.
• We do not use Google API data for serving advertisements, for creditworthiness or lending purposes, or for any purpose unrelated to the services provided to the client.
• No humans read Google API data except where the client has consented, where necessary for security purposes, or to comply with applicable law.

6. Data Sharing

We do not sell, rent or trade personal information. We may share data with trusted service providers who support our operations (such as hosting and cloud infrastructure providers), bound by appropriate confidentiality and data protection agreements, or where required by law.

7. Cookies

Our website uses only essential cookies necessary for basic functionality. We do not use advertising or cross-site tracking cookies on damaxis.com. You can disable cookies in your browser settings at any time.

8. Data Retention

We keep personal data only as long as necessary for the purposes described in this policy. Client advertising data is retained for the duration of the service relationship and securely deleted within 90 days of its termination, unless a longer period is required by law. Contact enquiries are kept for up to 2 years.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), encrypted storage of credentials, role-based access control and regular security reviews.

10. International Transfers

Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses.

11. Your Rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. You may also withdraw consent at any time. To exercise these rights, contact info@damaxis.com; we will respond within 30 days. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus.

12. Children

Our services are not directed to individuals under 16, and we do not knowingly collect their personal data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the "Last updated" date shown above.

14. Contact