Privacy Policy
Last updated: [date]. Template: have a qualified lawyer review before publishing.
Who we are
[Legal entity name] ("Paidology", "we", "us") provides paid advertising services. We are registered at [registered address]. For anything about your data, email privacy@paidology.co.
For UK purposes, we are the controller of the personal data described in this policy.
What we collect
Information you give us
- Booking form: name, work email, company, website, monthly ad spend band, platforms you use, and the problem you describe
- Emails and messages you send us
- Contract and billing details if you become a client
Account data you share for an audit
- Read-only access to ad, analytics and tag accounts you choose to grant. We use it only to prepare your audit and, if you become a client, to deliver our services
Information collected automatically
- Pages visited, device and browser type, approximate location, referring site, campaign parameters (UTMs) and ad click identifiers
- Collected through cookies and similar tools. See our Cookie Policy
How we use it, and our legal basis
| Purpose | UK legal basis |
|---|---|
| Scheduling and running your free audit | Steps you asked for before a contract; legitimate interests |
| Delivering services to clients | Contract |
| Follow-up emails about your audit | Legitimate interests (you can opt out any time) |
| Marketing emails | Consent, or legitimate interests for existing contacts, always with an opt-out |
| Website analytics and ad measurement | Consent, where required |
| Billing, tax and legal records | Legal obligation |
Advertising and measurement
We advertise on Google, Meta, LinkedIn and Microsoft. With your consent where required, we share website events (for example, that a booking was made) and, for measurement, hashed contact details with these platforms so they can match conversions to ads. Hashing turns your email into a code before it leaves our systems.
Who we share data with
We do not sell personal information for money. We share data only with:
- Service providers who process it for us: website hosting (Framer), scheduling (Cal.com), workspace and CRM (Notion), email, payments (for example, Stripe), and analytics and advertising platforms
- Professional advisers such as accountants and lawyers
- Authorities where the law requires it
US residents: your choices
Some US states treat sharing data with ad platforms for targeted advertising as a "sale" or "sharing". You can opt out at any time: use the "Do Not Sell or Share My Personal Information" link in our footer, or email privacy@paidology.co. We honor Global Privacy Control browser signals as an opt-out.
Depending on your state, you also have the right to know, access, correct and delete your personal information, and to appeal our response. We will not discriminate against you for using these rights.
Canadian residents
We handle personal information in line with PIPEDA and applicable provincial laws. You can access and correct your information, and withdraw consent, subject to legal limits. You may complain to the Office of the Privacy Commissioner of Canada.
UK residents: your rights
You have the right to access, correct, erase, restrict or object to processing of your data, to data portability, and to withdraw consent at any time. You can complain to the Information Commissioner's Office (ico.org.uk), though we would appreciate the chance to resolve it first.
International transfers
Some of our providers are based in the US. Where data leaves the UK, we rely on recognized safeguards such as the UK Extension to the EU-US Data Privacy Framework, the UK International Data Transfer Agreement or the UK Addendum to standard contractual clauses.
How long we keep it
- Leads who don't become clients: up to 24 months after our last contact
- Clients: for the length of the contract plus 6 years, for tax and legal records
- Audit account access: we remove our access within 30 days of the audit if you do not become a client
Security
We use access controls, two-factor authentication and the security features of our providers. Account access we receive is read-only unless you upgrade it as a client.
Children
Our services are for businesses. We do not knowingly collect data from anyone under 16.
Changes
We will post any changes here and update the date above.
Contact
[Legal entity name], [registered address], privacy@paidology.co.