Last Updated: February 11, 2026
This Privacy Policy describes how HighLoadIT OÜ (“Company”, “we”, “us”, or “our”), operating under the brand name PPC.BUZZ, collects, uses, and shares personal data in connection with our website at ppc.buzz and our programmatic advertising services.
1. Who We Are
HighLoadIT OÜ is a company registered in Estonia. We operate PPC.BUZZ, a programmatic advertising platform that facilitates the buying and selling of digital advertising inventory through real-time bidding (RTB). We are a registered vendor with the IAB Transparency and Consent Framework (TCF).
2. Data We Collect
In the course of providing our advertising services, we may process the following categories of personal data:
Through our advertising platform: IP address (truncated or full), cookie identifiers, device identifiers (such as advertising IDs), browser type and version, operating system, screen resolution, language preferences, referring URLs, approximate geographic location derived from IP address, ad interaction data (impressions, clicks, conversions), and TCF consent strings.
Through our website: Information you voluntarily provide when contacting us, such as your name and email address, as well as standard web server logs.
3. Purposes of Processing
We process personal data for the following purposes in accordance with the IAB TCF v2.2 framework:
With your consent: Storing and/or accessing information on a device; using limited data to select advertising; creating profiles for personalised advertising; using profiles to select personalised advertising; and measuring advertising performance.
Special purposes (legitimate interest): Ensuring security, preventing and detecting fraud, and fixing errors; delivering and presenting advertising and content; and saving and communicating privacy choices.
4. Legal Basis for Processing
We process personal data based on the following legal grounds under the GDPR:
Consent (Article 6(1)(a)): For storing and accessing information on your device and for the advertising purposes described above. You may withdraw your consent at any time through the consent management platform (CMP) presented on the publisher’s website.
Legitimate Interest (Article 6(1)(f)): For ensuring security, fraud prevention, error resolution, and delivering advertising content.
Contractual Necessity (Article 6(1)(b)): For providing services to our business partners.
5. Cookies and Similar Technologies
Our advertising platform uses cookies and similar tracking technologies to facilitate ad delivery, frequency capping, fraud detection, and reporting. Cookies set through our platform have a maximum lifespan of approximately 140 days. We also use cookie syncing to match user identifiers across advertising partners. Our operational domains include:
• rtb.buzz – Ad serving and tracking
• shb-sync.com – Cookie synchronisation
6. Data Sharing
We may share personal data with the following categories of recipients:
Demand-side platforms (DSPs) and advertisers: To facilitate real-time bidding and ad delivery, we share bid request data (which may include device identifiers, IP address, and approximate location) with DSPs participating in our auctions.
Publishers and supply partners: To report on advertising performance and revenue.
Service providers: We use third-party infrastructure and service providers who process data on our behalf, including hosting, fraud detection, and traffic quality verification services.
Legal requirements: We may disclose data when required by law or to protect our legal rights.
7. Data Retention
Personal data processed through our advertising platform is retained for a maximum of 5 years from the date of collection, unless a shorter retention period is required by law or applicable regulation. Cookie identifiers expire after approximately 140 days. We periodically review and delete data that is no longer necessary for the purposes described in this policy.
8. International Data Transfers
As our advertising services operate globally, personal data may be transferred to countries outside the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.
9. Your Rights
If you are located in the EEA or UK, you have the following rights under the GDPR:
Right of access: You may request a copy of the personal data we hold about you.
Right to rectification: You may request correction of inaccurate data.
Right to erasure: You may request deletion of your personal data.
Right to restriction: You may request that we restrict processing of your data.
Right to data portability: You may request your data in a portable format.
Right to object: You may object to processing based on legitimate interest.
Right to withdraw consent: You may withdraw consent at any time via the publisher’s CMP.
To exercise any of these rights, please contact us at the address below. We will respond within 30 days.
10. California Residents (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of the sale or sharing of your personal information. Our processing of advertising data in the context of real-time bidding may constitute a “sale” or “sharing” under California law. To opt out, you may use the Global Privacy Control (GPC) signal in your browser or contact us directly.
11. Children’s Privacy
Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last Updated” date at the top of this page indicates when the policy was last revised.
13. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact our Data Protection Officer:
HighLoadIT OÜ
Email: legal@ppc.buzz
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.