Privacy Policy

Last updated 21 September 2026

This policy explains what data I handle, why I handle it, and what I do not do with it. It covers this website and the advertising work I carry out for clients, including data accessed through the advertising platforms' own APIs.

This website

This site is a static set of pages. It does not use analytics, advertising pixels, tracking cookies or third-party embeds, and it does not set cookies of its own. Nothing about your visit is recorded by me beyond the standard server request logs kept by the hosting provider for security and reliability purposes.

If you email me, I hold your message and contact details for as long as needed to answer you and to keep a record of our correspondence.

Client advertising data

When a client engages me, they grant me access to advertising and analytics accounts they own, through each platform's own permission system. This typically includes Meta Ads, TikTok Ads, Google Ads and the client's e-commerce platform. The data I access through those accounts includes:

• aggregate advertising performance metrics such as spend, impressions, clicks, conversions and conversion value;
• campaign, ad group and ad configuration, including budgets, targeting settings and creative assets;
• conversion and pixel event data generated by the client's own website;
• audience segments built from the client's own first-party customer data;
• order and revenue data from the client's e-commerce platform, used to verify that reported advertising results match actual sales.

How I use it

Solely to operate, optimise and report on that client's own advertising. Specifically: to build and manage campaigns, to build and apply audiences from the client's first-party data, to reconcile platform-reported results against the client's actual orders, and to produce performance reports for that client.

What I do not do

• I do not sell, rent, syndicate, license or otherwise disclose client or platform data to any third party.
• I do not combine one client's data with another client's data, and I do not build cross-client audiences, models or benchmarks that expose one client's figures to another.
• I do not use platform APIs to collect data about individual platform users beyond the aggregate advertising metrics and the clients' own first-party audiences described above.
• I do not use client data to train machine learning models, my own or anyone else's.
• I do not retain access to accounts after an engagement ends.

Access, storage and retention

Access is granted by the client through each platform's own authorisation flow, is limited to the accounts they nominate, and can be revoked by them at any time without my involvement. Reporting extracts are kept on encrypted devices under my control, and are limited to what is needed to produce and support the client's reports. When an engagement ends, I ask the client to revoke my access, and I delete working copies of their data other than any records I am required to keep for tax or contractual reasons.

Platform terms

Advertising data accessed through the Meta, TikTok and Google advertising platforms is handled in accordance with each platform's developer and advertising terms, in addition to this policy. Where a platform's terms are stricter than this policy, the platform's terms apply.

Your rights

If you are a client, or an individual whose data may sit within a client's advertising account, you can ask me what data I hold, ask me to correct it, or ask me to delete it. For data belonging to a client's account, I will act on the account owner's instructions and will refer requests from individuals to that account owner, since they are the controller of that data. Email [email protected] and I will respond within 30 days.

Changes

If this policy changes, the revised version will be posted on this page with a new last updated date.