Privacy policy.

Effective date: 21 October 2026
Last updated: 21 October 2026

1. Who we are

BrandBid (“BrandBid”, “we”, “us”) runs Google Display & Video 360 (DV360) programmatic campaigns for advertising agencies and brands. We also provide VideoMax, an interactive (“playable”) video ad format.

Controller (the “database owner” / ba’al shlita under Israeli law): brand-bid (company number 200976470), trading as BrandBid
Shlomo HaMelech 41, Tel Aviv-Yafo 7557744, Israel
Email: asaf@brand-bid.com

This policy explains how we process personal data:

• when you visit brand-bid.com and its subdomains (including dv360.brand-bid.com);
• when you contact us or fill in a form;
• when you see or interact with a VideoMax ad we serve for our clients;
• when we contact business professionals about our services.

2. Summary

Under Israeli law, we rely on your consent, given after the notice in this policy, or on another basis the law permits. Providing personal data to us is voluntary, and there is no legal obligation to provide it. If you don’t provide the details a form asks for, we may be unable to reply to you or provide our services.

3. Data we collect and how we use it

3.1 Contact and lead forms

Our website forms collect:

• “Quick start” (homepage): name, agency, work email, monthly media budget range, how you heard about us, and your message.
• “Contact” (homepage): name, work email, how you heard about us, and your message.
• “Send a brief” (DV360 page): name, work email, company, how you heard about us, and your brief.
• With each form we also record the page it was sent from.

We use this data to reply, prepare a media plan or proposal, schedule a call, and keep a record of our business relationship.

• Form submissions are delivered to us through Formspree (a form-processing service).
• We store enquiries in our email system (Google Workspace) and our CRM (HubSpot).

3.2 Email and calls

If you email or call us, we process your name, contact details, the content of your message and any information you choose to share.

3.3 Cookies, analytics and advertising technologies on brand-bid.com

We use the following technologies:

Analytics and advertising tools above do not load until you accept them in our cookie banner. We update this list when we add or remove tools.

Your choices:

• Nothing loads before you choose. Google Analytics loads only after you accept analytics cookies. Google Tag Manager and the advertising tags it carries (Google Ads, Outbrain, Apollo), and the Meta Pixel, load only after you accept advertising cookies, in our cookie banner. Until then, Google Consent Mode is set to “denied”.
• Choose Accept, Reject, or Settings to pick analytics and advertising separately. Change your choice at any time via “Cookie settings” in the footer. If you withdraw consent, reload the page so the tags stop.
• You can also block cookies in your browser.
• For Meta, you can adjust your ad preferences in your Meta account settings. For Google, see adssettings.google.com.

3.4 VideoMax ads (ad-serving data)

When BrandBid serves a VideoMax ad for an advertiser on third-party websites and apps through Google DV360, our ad technology processes:

• Ad delivery and interaction events:
  • impressions;
  • clicks;
  • plays and other interaction events (for example “tap to play”, progress to the end card);
  • poll and quiz answers and draggable-choice positions.
• Technical data received with the ad request:
  • IP address (or a truncated form of it);
  • device type, operating system, browser or app;
  • approximate location (country or region);
  • the website or app where the ad was shown;
  • timestamps;
  • the ad, campaign and creative identifiers.
  • Advertising identifiers, if DV360 passes them.

What we use it for:

• To serve and render the ad and prevent fraud.
• To count impressions, clicks and interactions.
• To give the advertiser (and its agency) aggregated reports, for example how many people chose each answer, by size and environment.
• We do not ask for your name or contact details in a VideoMax ad. We do not try to identify individuals from their answers, and we do not sell answer data.
• If a future VideoMax ad includes a lead form, it will show its own notice at the point of collection.

Roles: for VideoMax campaigns, BrandBid generally acts for the advertiser. Google DV360, exchanges and publishers process data under their own policies (see Google’s advertising policies: policies.google.com/technologies/ads). Our contracts with advertisers set out each party’s role.

3.5 B2B outreach

We contact business professionals (for example, people at advertising agencies, brands and media companies) whom we reasonably believe may be interested in our services.

Data:

• name, job title, company, business email address and business phone, where available;
• country;
• a public professional profile URL;
• our notes on our contact with you.

Sources:

• public professional sources and company websites;
• business-contact data providers (for example Apollo);
• LinkedIn, through manual research;
• introductions.

Use:

• Sending a limited number of relevant business emails or messages.
• Recording replies and opt-outs in our CRM (HubSpot), and sending emails through our email providers.
• Every email identifies us and lets you opt out. If you reply “no” or unsubscribe, we stop and add you to a suppression list so that you are not contacted again.

Legal basis:

• EU/UK: our legitimate interest in business-to-business marketing. UK corporate subscribers: PECR permits B2B email with identification and an opt-out.
• Israel: we follow the Privacy Protection Law and the Communications Law (Telecommunications and Broadcasting), 5742-1982, section 30A, as applicable to advertising messages.

3.6 Clients, partners and suppliers

We process business contact and billing details of our clients, partner agencies, resale partners and suppliers to perform our contracts, invoice, keep accounts and comply with tax law.

4. Who we share data with

We do not sell personal data. We share it only with:

Service providers (processors) acting on our instructions:

• Google: Workspace email, Google Analytics, Tag Manager, Google Fonts, and Display & Video 360 for ad buying and serving.
• Meta Platforms: Meta Pixel.
• Outbrain: Outbrain advertising pixel.
• HubSpot: CRM.
• Email and outreach providers: Google Workspace and, where used, a dedicated email-sending platform.
• Formspree, Inc. (USA): website form submission processing.
• Apollo: business contact data and enrichment, and its website tracker.
• Our website hosting provider: Netlify, Inc.
• Professional advisers: accountants and lawyers.

Others:

• Advertisers and their agencies, who receive aggregated VideoMax campaign reports.
• Authorities, where the law requires it.
• A buyer or successor of our business, under confidentiality.

Some providers, notably Google, Meta and Outbrain for advertising measurement, may also use data as independent controllers under their own terms.

5. International transfers

• BrandBid is based in Israel. The European Commission recognises Israel as providing an adequate level of protection (decision 2011/61/EU, reconfirmed in the Commission’s January 2024 review). The UK also recognises Israel as adequate for UK GDPR transfers.
• Several of our providers are in the United States or other countries.
  • Where required, we rely on the EU–US Data Privacy Framework and its UK Extension for certified providers, or on Standard Contractual Clauses (with the UK Addendum) and the providers’ safeguards.
  • Transfers from Israel abroad follow the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001.

6. How long we keep data (retention)

7. Security

• We use reasonable technical and organisational measures, including access controls, encryption in transit, and providers with recognised security standards.
• We protect databases as required by the Israeli Privacy Protection (Data Security) Regulations, 5777-2017.
• No method of transmission or storage is completely secure.

8. Your rights

8.1 Everyone (Israel, Privacy Protection Law 5741-1981, as amended by Amendment 13, in force since 14 August 2025)

• Access: you can review personal data about you held in our database (section 13).
• Correction or deletion: you can ask us to correct or delete data that is inaccurate, incomplete, unclear or out of date (section 14). Where Amendment 13 provides for it, you can also ask for deletion.
• Direct mailing: you can ask to be removed from any database we use for direct mailing (section 17F), and we will honour this.
• Complaints: you can complain to the Privacy Protection Authority (gov.il/en/departments/the_privacy_protection_authority).

8.2 EU and UK (GDPR / UK GDPR)

You have the right to:

• access your data;
• rectification;
• erasure;
• restriction;
• data portability;
• object to processing based on legitimate interests (and an absolute right to object to direct marketing);
• withdraw consent at any time.

You can also complain to your local supervisory authority (in the UK, the ICO: ico.org.uk).

To exercise any right: email asaf@brand-bid.com. We will reply within the period the law requires (generally 30 days under GDPR and Israeli law) and may need to verify your identity.

9. Children

Our website and services are aimed at businesses and are not directed at children under 16. We ask advertisers not to target VideoMax campaigns at children, and we use DV360 controls accordingly.

10. Changes

We may update this policy. We will post the new version with a new “Last updated” date and, where appropriate, notify you.

11. Contact

brand-bid (company number 200976470), trading as BrandBid · Shlomo HaMelech 41, Tel Aviv-Yafo 7557744, Israel · asaf@brand-bid.com