Legal
Privacy Policy
Last updated: 24 August 2026
This policy explains how Adaudit ("we", "us", "our") collects, uses, and protects your personal data when you use adaudit.co.uk or purchase an audit from us.
Adaudit is operated by Gina Baylis. Our contact details are:
- Email: hello@adaudit.co.uk
We are the data controller for the personal data described below.
What data we collect
- Contact details: name, email address, phone number (if provided)
- Business details: business name, website
- Ad account information: Google Ads and/or Meta Ads account IDs, and any notes you provide about what you'd like us to focus on
- Payment information: handled entirely by Stripe — we do not see or store your card details
- Communications: emails and any correspondence between us
Why we collect it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| To deliver the audit you've purchased | Performance of a contract |
| To process payment | Performance of a contract |
| To send order and delivery updates | Performance of a contract |
| To respond to sample report requests | Legitimate interest |
| To keep accounting records | Legal obligation |
Who we share data with
We use the following third-party services to run Adaudit. Each processes data on our behalf under their own privacy and security terms:
- Stripe — payment processing
- Lovable / Supabase — website hosting and order/request database
- Windsor.ai — retrieves your Google Ads/Meta Ads account data for the purposes of the audit, using the read-only access you grant
- Notion — internal workspace where audit findings are drafted and reviewed before delivery to you
- Google Workspace — our business email
We do not sell your data, and we do not share it with any third party for their own marketing purposes.
Ad account access
When you grant us access to your Google Ads and/or Meta Ads account (as a Partner/Manager, per our access instructions), that access is:
- Read-only, limited to what's needed to complete the audit
- Used only for the purpose of preparing your audit
- Revoked by us once your audit has been delivered, unless you've separately agreed to ongoing management
You can revoke this access yourself at any time from your own Google Ads or Meta Business Manager settings.
How long we keep your data
- Order and payment records: retained for 6 years to meet UK accounting/tax obligations (HMRC requirement)
- Ad account data pulled for your audit: retained only as long as needed to complete and deliver your audit, then deleted
- Audit drafts and delivered reports: retained in our internal systems (Notion) for our own records, unless you request deletion
- Marketing/sample requests: retained until you ask us to delete them, or 2 years of inactivity, whichever is sooner
Your rights
Under UK GDPR, you have the right to:
- Request a copy of the personal data we hold about you
- Ask us to correct inaccurate data
- Ask us to delete your data (subject to our legal obligations, e.g. accounting records)
- Object to or restrict certain processing
- Withdraw consent where processing is based on consent
- Complain to the Information Commissioner's Office (ico.org.uk) if you believe we've mishandled your data
To exercise any of these rights, email hello@adaudit.co.uk.
Cookies
Our website uses cookies required for the checkout process (via Stripe) to function correctly.
Changes to this policy
We may update this policy from time to time. The "last updated" date at the top will reflect the most recent change. Significant changes will be communicated by email where appropriate.
Contact
Questions about this policy or your data: hello@adaudit.co.uk