Security & Trust.

Igloo Media Group LLC operates marketing technology and advertising services on behalf of consumer brands across multiple platforms — including Amazon, Google, Meta, and TikTok. This page summarizes our security posture, governance commitments, and platform compliance.

1. Governance commitments

Igloo Media Group LLC maintains the following documented policies and operational practices:

• Risk Assessment & Incident Response Plan An annually-reviewed risk assessment process and an incident response plan covering monitoring, detection, and response for potential threats and security incidents. The plan defines responsibilities, communication paths, and escalation procedures for handling security events affecting our systems or any data we process on behalf of platform partners or clients.
• Organizational Change Notification A standing commitment to notify relevant platform partners — including Amazon — within 30 days of any material organizational change affecting our use of partner information or services, in accordance with Amazon's Data Protection Policy and equivalent partner-program requirements.
• Data Classification & Handling Data accessed under client engagements or platform integrations is classified, access-controlled, and handled according to the requirements of the relevant agreement and policy (including platform-specific data protection policies).
• Access Control Production system access is restricted to authorized personnel on a need-to-know basis, secured with multi-factor authentication. Access is reviewed periodically and revoked promptly when no longer required.
• Vendor Management Third-party service providers used in the delivery of our services are evaluated for security posture and bound by confidentiality and data-handling obligations consistent with our own.

2. Platform compliance

Amazon

Igloo Media (through its Amazon-specialist practice, Vega North) operates as an Amazon Ads Verified Partner. Our use of Amazon information is governed by the Amazon Acceptable Use Policy and Amazon Data Protection Policy. We acknowledge, and commit to compliance with, the obligations of those policies — including secure handling, restricted access, and prompt notification of organizational changes or security incidents that affect our access to or use of Amazon information.

Google, Meta, TikTok and other platforms

Where we access platform information on behalf of clients (e.g. Google Ads, Meta Business Manager, TikTok Ads Manager), we comply with the respective platform's terms of service, data use policies, and partner-program requirements.

3. Infrastructure

Our public website is hosted on Cloudflare Pages with TLS encryption in transit, HTTPS-only redirects, and DDoS / WAF protection at the edge. Source code is version-controlled in private repositories with enforced two-factor authentication. Our team email and document collaboration are hosted on Google Workspace with enforced two-factor authentication and security alerting.

4. Reporting a security concern

If you believe you have identified a security vulnerability affecting Igloo Media, please report it to andrew@igloomedia.co. We acknowledge legitimate reports promptly and investigate every report received. Please do not exploit the issue beyond what is necessary to demonstrate it, and do not access, modify, or exfiltrate data that is not your own.

5. Document requests

Platform partners, auditors, and prospective clients with a legitimate need may request copies of our internal policy documents — including the Risk Assessment & Incident Response Plan and the Organizational Change Notification Policy — by writing to andrew@igloomedia.co. Requests are evaluated on a case-by-case basis and may be subject to a non-disclosure agreement.

6. Contact

For all security and compliance matters:

Igloo Media Group LLC
42 W 82nd St, New York, NY 10024
andrew@igloomedia.co