Last updated: October 27, 2026
This Privacy Policy explains how Alluka LLC (“Alluka,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit https://allukallc.com (the “Website”), contact us, book a call, buy a service package, or work with us as a client. It also explains the choices and rights available to you.
In short: We collect the information you give us through our forms and online store, plus limited technical data needed to run and secure the Website. We use it to respond to you, deliver and improve our services, keep records, and, where permitted, send marketing emails. We do not sell or rent your personal information. Analytics and advertising cookies are used only if you accept them in our cookie banner. You can ask us to access, correct, or delete your data at any time by writing to [email protected].
1. Who We Are and Scope of This Policy
Alluka LLC is a growth marketing and paid media agency organized as a limited liability company in the State of New Mexico, USA, with its business address at 8206 Louisiana Blvd NE, Albuquerque, New Mexico 87113, USA. For personal information collected through the Website and our own business operations, Alluka is the business (or “controller”) responsible for that information.
This Policy applies to Website visitors, people who contact us or book a consultation, customers who purchase service packages, the individual contacts at our client companies, and people who receive our emails. It does not apply to personal information we process strictly on behalf of clients as part of a marketing engagement, which is governed by our agreement with the client and the client’s own privacy policy (see Section 8).
2. Information We Collect
We collect only the information we reasonably need for the purposes described in this Policy.
2.1 Information you provide to us
- Contact and booking forms. When you use our contact or booking forms, we collect your name, email address, phone number, company name, social media handle, the service you are interested in, your message, and your preferred call date and time.
- Orders and customer accounts. When you buy a service package through our online store, we collect your name, company name, billing address, email address, phone number, order details, and, if you create an account, your username and password (stored in hashed form).
- Payment information. Payments are processed by third-party payment gateways configured in our store, such as Stripe or PayPal. You enter your card or account details directly with the payment processor. We do not receive or store full card numbers; we may receive limited information such as card type, the last four digits, expiration date, and transaction status.
- Onboarding and project information. When you become a client, we collect information needed to deliver the services, such as business goals, brand assets, platform access, and the names, emails, and roles of your team members.
- Communications. When you email, call, or message us, we keep a record of the communication and any information you choose to include.
2.2 Information collected automatically
- Device and log data. Our servers record technical information such as your IP address, browser type, operating system, referring URL, pages requested, and the date and time of your visit.
- Security data. Our security tools, including Wordfence and WP Hide & Security Enhancer, process IP addresses, request details, and login attempts to detect and block malicious traffic and other threats. Wordfence may set security cookies for logged-in users.
- Cookies. We use strictly necessary cookies to operate the Website, cart, and checkout and to remember your cookie choices. Analytics and advertising cookies are placed only if you consent (see Section 5).
Our fonts and scripts are hosted on our own servers, so loading the Website does not send your IP address to third-party font or script providers.
2.3 Information from third parties
- Payment processors tell us whether a payment succeeded, failed, was refunded, or was disputed.
- Advertising and analytics platforms. When a client grants us access to accounts such as Google Ads, Meta Business Manager, TikTok Ads Manager, or LinkedIn Campaign Manager, we can see the information in those accounts as needed to manage campaigns.
- Public sources and referrals. We may review publicly available business information, such as your company website, to prepare for a call, and we may receive your contact details from someone who refers you to us.
2.4 Sensitive information
We do not ask for, and ask that you do not send us, sensitive personal information such as Social Security numbers, government ID numbers, health information, or precise geolocation. If such information is sent to us unprompted, we will delete it unless we must keep it to meet a legal obligation.
3. How We Use Your Information
- To respond to you: answering inquiries, scheduling calls, and preparing proposals.
- To provide our services: processing orders, onboarding clients, managing campaigns, producing reports, and communicating about projects and billing.
- To process payments: charging one-time and recurring fees, issuing receipts, and handling refunds and disputes.
- To improve our services and Website: understanding which pages and services are useful and fixing errors. Where analytics tools are used, this happens only after you consent.
- To send marketing communications about our services, in line with your preferences and applicable law (see Section 9).
- To keep internal records: maintaining business, accounting, and tax records and preparing internal reports and analysis.
- To secure the Website: preventing fraud, spam, abuse, and security incidents.
- To comply with law and protect rights: meeting legal obligations, responding to lawful requests, and establishing or defending legal claims.
We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.
4. Legal Bases for Processing (EEA and UK Visitors)
If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR and UK GDPR:
| Purpose | Legal basis |
|---|---|
| Responding to inquiries and booking requests | Steps taken at your request before entering into a contract; our legitimate interest in responding to business inquiries |
| Processing orders and delivering services | Performance of a contract |
| Billing, accounting, and tax records | Compliance with a legal obligation |
| Website security and fraud prevention | Our legitimate interest in keeping our systems secure |
| Analytics and advertising cookies | Your consent, which you can withdraw at any time |
| Marketing emails | Your consent, or our legitimate interest in marketing similar services to existing customers where permitted |
| Improving our services | Our legitimate interest in developing our business |
Where we rely on legitimate interests, we have concluded that our interests are not overridden by your rights and expectations. You can ask us for more information about this assessment.
5. Cookies and Similar Technologies
We use cookies to keep the Website working, improve your experience, and, only with your permission, understand performance and measure advertising. Our cookie banner, provided by CookieYes, lets you accept, reject, or customize non-essential cookies and stores your choice in a consent cookie.
- Strictly necessary cookies set by WordPress, WooCommerce, Wordfence, and CookieYes support login, the cart, checkout, security, and your consent choice. They do not require consent.
- Analytics cookies (for example, Google Analytics 4) and advertising cookies and pixels (for example, the Meta Pixel, LinkedIn Insight Tag, or TikTok Pixel) are not installed by default. If we add them, they load only after you consent.
You can change your choices at any time through the cookie settings link on the Website. Full details are in our Cookie Policy.
6. How We Share Information
We do not sell or rent your personal information. We share it only as described below, and we require recipients to protect it and use it only for the purposes we specify.
- Service providers that help us run our business, such as website hosting, email, cloud storage, scheduling, and accounting tools. They may use personal information only to perform services for us, under confidentiality and data protection obligations.
- Payment processors such as Stripe or PayPal, which process payment details under their own privacy policies and security standards.
- Advertising platforms. If you consent to advertising cookies on our Website, platforms such as Google, Meta, TikTok, and LinkedIn may receive device and browsing information through their pixels.
- Trusted partners and contractors, such as vetted designers, copywriters, or developers working on client projects, who receive only what they need and are bound by confidentiality obligations.
- Professional advisers, such as lawyers, accountants, and insurers, where needed.
- Legal requirements. We may disclose information if required by law, subpoena, or court order, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Alluka, our clients, or others.
- Business transfers. If Alluka is involved in a merger, acquisition, reorganization, or sale of assets, personal information may be transferred subject to this Policy or one at least as protective.
- With your consent or at your direction.
7. Third-Party Websites and Platforms
The Website may link to third-party websites and social media profiles, and payment pages may be operated by our payment processors. We are not responsible for the privacy practices of third parties and encourage you to read their privacy policies before sharing information with them.
8. Data We Process on Behalf of Clients
When we manage marketing for a client, we may handle personal information that the client controls, such as advertising account data, lead form submissions, or customer lists used for audience matching. In those cases, we act as a service provider or processor. We process that information only on the client’s instructions and to provide the services, we do not sell it or use it for our own purposes, we protect it with appropriate security measures, and we return or delete it at the end of the engagement unless the law requires us to keep it.
Clients are responsible for having the necessary notices, consents, and legal bases to share personal information with us and with advertising platforms. If you are a customer of one of our clients and want to exercise privacy rights, please contact that business directly; we will assist our clients in responding.
9. Marketing Communications
We may send promotional emails about our services where you have opted in or, where the law allows, where you are an existing customer or have shown interest in similar services. Every marketing email includes an unsubscribe link, and you can also opt out by emailing [email protected]. We comply with the CAN-SPAM Act and, where applicable, EU and UK electronic marketing rules. Opting out does not stop service messages such as order confirmations, invoices, and project updates. We do not send marketing text messages without your prior express consent.
10. Data Retention
We keep personal information only as long as needed for the purposes in this Policy, including legal, accounting, and reporting requirements. As a general guide:
- Inquiries that do not lead to an engagement are kept for up to 24 months, then deleted or anonymized.
- Client and order records, including contracts, invoices, and transaction records, are kept for the relationship and up to seven years afterward to meet tax and legal obligations.
- Marketing preferences are kept until you unsubscribe; we keep a minimal suppression record so we do not email you again.
- Security logs are typically kept no longer than 12 months, unless needed to investigate an incident.
- Cookies are kept for the durations described in our Cookie Policy.
11. How We Protect Your Information
We use technical and organizational measures designed to protect personal information against loss, misuse, and unauthorized access, disclosure, alteration, or destruction. These include encrypted connections (HTTPS), a web application firewall and malware scanning, login protection and access controls, hardening of our WordPress installation, least-privilege access for staff and contractors, multi-factor authentication on key systems where available, and confidentiality commitments from everyone who handles personal information.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a security incident affects your personal information, we will notify you and the relevant authorities where required by law.
12. Your Privacy Rights
Depending on where you live, you may have the right to access your personal information, correct it, delete it, receive a portable copy, opt out of the sale of personal information or targeted advertising, and withdraw consent at any time. Whatever your location, you can ask us to access, correct, or delete your information by emailing [email protected] or calling +1 (575) 378-3891. We will respond within the time required by applicable law. Some rights are subject to exceptions; for example, we may need to keep certain records to comply with tax law. We will explain if we cannot fully meet your request.
Verification. We will verify your identity before acting on a request, usually by matching information you provide with information we already hold. We use verification information only for that purpose.
Authorized agents. You may use an authorized agent to submit a request. We may ask the agent for proof of your written permission and ask you to verify your identity directly with us.
No discrimination. We will not deny you services, charge you different prices, or provide a different quality of service because you exercised your privacy rights.
13. California Privacy Rights (CCPA/CPRA)
This section applies to California residents and supplements the rest of this Policy, to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”), applies to Alluka.
13.1 Categories of personal information we collect
In the past 12 months, we have collected the following categories of personal information:
| Category | Examples | Disclosed for a business purpose to |
|---|---|---|
| Identifiers | Name, email, phone number, postal address, IP address, social media handle, account username | Service providers, payment processors, professional advisers |
| Customer records (Cal. Civ. Code § 1798.80(e)) | Name, address, phone number, limited payment card information | Payment processors, service providers |
| Commercial information | Service packages purchased, order and payment history | Service providers, payment processors, professional advisers |
| Internet or network activity | Website browsing activity, security logs, and (with consent) analytics data | Hosting and security providers; analytics and advertising providers only with consent |
| Professional information | Company name, job title, business role | Service providers |
| Inferences | Service interests drawn from your inquiry | Service providers only |
We collect this information from the sources in Section 2, for the purposes in Section 3, and keep it for the periods in Section 10. We do not use or disclose sensitive personal information for purposes that would give rise to a right to limit under the CCPA.
13.2 Sale and sharing of personal information
We do not sell personal information for money. By default, we do not “share” personal information for cross-context behavioral advertising. If we enable advertising pixels and you consent to advertising cookies, device and browsing information from our Website may be made available to advertising platforms, which may be considered “sharing” under the CCPA. You can opt out at any time by withdrawing consent through the cookie settings link, enabling Global Privacy Control in your browser, or contacting us. We do not knowingly sell or share the personal information of consumers under 16.
13.3 Your California rights
California residents have the right to know what personal information we collect, use, disclose, sell, or share; to request deletion and correction; to opt out of sale or sharing; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights. We will confirm receipt of a request within 10 business days and respond within 45 calendar days, which may be extended by another 45 days where reasonably necessary, with notice to you.
Under California Civil Code § 1798.83 (“Shine the Light”), we confirm that we do not disclose personal information to third parties for their own direct marketing purposes. For more information, see the California Attorney General’s CCPA page.
14. Other US State Privacy Rights
Many US states, including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and others, have comprehensive consumer privacy laws. To the extent those laws apply to us, residents may have the right to confirm whether we process their personal information, access, correct, or delete it, obtain a portable copy, and opt out of targeted advertising, the sale of personal information, and certain profiling. We do not sell personal information, and we do not engage in targeted advertising based on your activity on our Website unless you consent to advertising cookies. We honor Global Privacy Control signals as an opt-out request.
Appeals. If we decline to act on your request, you may appeal by emailing [email protected] with the subject line “Privacy Request Appeal.” We will respond within the time required by your state’s law and explain our decision. If you are not satisfied, you may contact your state Attorney General.
Nevada residents may request to opt out of the sale of covered information. We do not sell covered information, but you may still contact us with such a request.
15. Rights for EEA, UK and Swiss Visitors (GDPR and UK GDPR)
If you are located in the EEA, the UK, or Switzerland, you have the right, subject to legal exceptions, to access your personal information; to rectify inaccurate data; to erasure; to restrict processing; to data portability; to object to processing based on legitimate interests and, at any time, to direct marketing; and to withdraw consent where processing is based on consent.
We will respond within one month, which may be extended by up to two further months for complex requests, with notice. You may also lodge a complaint with your local supervisory authority, such as the data protection authority in your EU member state or the UK Information Commissioner’s Office, although we would appreciate the chance to address your concerns first. Learn more about your rights at gdpr.eu.
16. International Data Transfers
Alluka is based in the United States, and we and our service providers process information in the United States and other countries whose data protection laws may differ from yours. When we transfer personal information from the EEA, the UK, or Switzerland, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or a recipient’s certification under the EU-US Data Privacy Framework and its UK and Swiss extensions, where applicable.
17. Children’s Privacy
The Website and our services are intended for businesses and adults. They are not directed to children under 16, and we do not knowingly collect personal information from children under 13, consistent with the Children’s Online Privacy Protection Act (COPPA). If you believe a child has provided us with personal information, please contact us and we will delete it.
18. Do Not Track and Global Privacy Control
Because there is no common industry standard for responding to “Do Not Track” browser signals, the Website does not respond to them. We do recognize the Global Privacy Control (GPC) signal: when we detect it, we treat it as a request to opt out of the sale or sharing of personal information and targeted advertising for that browser, and we will not load advertising cookies or pixels for it.
19. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will revise the “Last updated” date at the top of this page and, for material changes, provide additional notice, such as a notice on the Website or an email to clients. Your continued use of the Website after an update means you acknowledge the revised Policy.
20. Contact Us
If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us:
Alluka LLC
8206 Louisiana Blvd NE
Albuquerque, New Mexico 87113, USA
Phone: +1 (575) 378-3891
Email: [email protected]
Website: https://allukallc.com
You can also reach us through our contact page. Please include “Privacy Request” in your subject line so we can route your message quickly.