Legal

Privacy Policy

Last updated: [DATE] · Data controller: [YOUR NAME / COMPANY] · ICO registration: [ICO NUMBER]

⚠️

Placeholder — complete before going live

Fill in the highlighted fields marked [IN BRACKETS] and register with the ICO at ico.org.uk/registration (£40/yr). Remove this notice once complete. Under UK GDPR you are legally required to have a privacy policy if you collect personal data.

Who we are

[YOUR FULL NAME / COMPANY NAME] ("OLLIE", "we", "us") is the data controller for personal data collected through this website and service. We are registered with the Information Commissioner's Office (ICO) under registration number [ICO NUMBER].

What data we collect

Data	Why we collect it	Legal basis
Name, email, business name	To set up and manage your campaigns and send you reports	Contract performance
Website URL	To configure ad destinations	Contract performance
Ad account IDs	To access and manage your advertising accounts	Contract performance
Social page URLs	To link your pages to ad campaigns	Contract performance
Target audience information	To configure campaign targeting	Contract performance
Creative assets (images/video)	To run your advertisements	Contract performance
Payment information	To process payments — handled by Stripe, we do not store card details	Contract performance
Campaign performance data	To provide reporting and optimise campaigns	Legitimate interest

How we use your data

Setting up and managing your advertising campaigns
Sending you weekly performance reports and campaign updates
Processing your monthly payments via Stripe
Communicating with you about your campaigns
Complying with our legal obligations

We do not sell your data to third parties. We do not use your data for our own marketing without your explicit consent.

Who we share data with

Third party	Purpose	Location
Google LLC	Running Google Ads campaigns on your behalf	USA (SCCs in place)
Meta Platforms Inc.	Running Facebook & Instagram campaigns	USA (SCCs in place)
TikTok Inc.	Running TikTok campaigns	USA (SCCs in place)
Stripe Inc.	Payment processing	USA (SCCs in place)
Zapier Inc.	Workflow automation and data routing	USA (SCCs in place)
Google Workspace	Email and document storage	EU/USA

SCCs = Standard Contractual Clauses, the approved UK/EU mechanism for transferring personal data to countries outside the UK.

How long we keep your data

Active client data: retained for the duration of your service plus 12 months
Financial records: 6 years (UK tax law requirement)
Campaign performance data: 24 months from campaign end
Enquiry data (non-clients): 6 months

Your rights under UK GDPR

You have the right to:

Access — request a copy of the personal data we hold about you
Rectification — ask us to correct inaccurate data
Erasure — ask us to delete your data (subject to legal obligations)
Restriction — ask us to limit how we use your data
Portability — receive your data in a machine-readable format
Object — object to processing based on legitimate interests

To exercise any of these rights, email us at [YOUR EMAIL]. We will respond within 30 days.

You also have the right to lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113.

Cookies

This website uses only essential cookies required for the service to function. We do not use tracking or advertising cookies. No cookie consent banner is required for essential cookies only.

Changes to this policy

We may update this policy from time to time. We will notify you by email of any material changes. The latest version is always available at this URL.

Privacy questions? Email [YOUR EMAIL]