Privacy Policy

Introduction

This Privacy Policy explains what personal data we collect when you visit the Adrize website, contact us, join our waitlist or use Adrize services, why we collect it, how we use it and what rights you have over it.

This policy is intended to comply with the UK Data Protection Act 2018 and the UK General Data Protection Regulation ("UK GDPR"), and, where relevant, the EU GDPR.

By using our website or services, you acknowledge this Privacy Policy. Where we rely on your consent for a particular use of your data, we will ask for that consent separately and you can withdraw it at any time.

Who we are

ADRIZE LTD

115 New Bridge Street

Newcastle Upon Tyne

England

NE1 8ST

Company number: 13870907

Email: support@adrize.com

1. The information we collect

1a. Information you give us

We collect personal data that you provide directly to us, for example when you:

• join the Adrize waitlist;
• contact us by email;
• submit a form on our website;
• request information about Adrize;
• create or use an Adrize account; or
• contact us for support.

This may include information such as your name, company name, email address and any information you choose to provide when contacting us.

1b. Information collected when you use Adrize

When you use the Adrize website or services, we may collect limited technical and usage information necessary to operate, secure and improve our services.

This may include information such as:

• IP address;
• browser and device information;
• pages or features used;
• dates and times of access; and
• technical logs relating to the operation and security of our services.

1c. Our legal basis for processing your data

Depending on the circumstances, we may process your personal data on one or more of the following bases:

• Consent — where you have actively agreed to a particular use of your information.
• Legitimate interests — for example, responding to enquiries, operating and securing our website and services, or understanding how our services are used.
• Contract — where processing is necessary to provide services you have requested from us or to take steps before entering into a contract.
• Legal obligation — where we are required to process or retain information to comply with applicable law.

We will only process personal data where we have a lawful basis for doing so.

2. Google account and Google Ads data

Adrize allows users to connect supported Google services, including Google Ads, using Google's authorisation process.

When you choose to connect a Google account, Adrize may request permission to access information from Google that is necessary to provide the features you have chosen to use.

Depending on the permissions you grant and the Adrize features you use, this may include:

• information identifying your Google Ads account;
• advertising account structure and settings;
• campaigns, ad groups, advertisements and keywords;
• search term information;
• advertising performance and conversion information;
• budget, bidding and related performance information; and
• other Google Ads information made available through the permissions you authorise.

Adrize only requests access to Google data that is necessary to provide or improve the relevant Adrize functionality.

How we use Google data

We use information obtained from Google to provide Adrize features to the connected user or organisation.

This may include using Google Ads data to:

• analyse advertising performance;
• provide reporting and performance insights;
• identify optimisation opportunities;
• generate recommendations;
• help users understand campaign and account performance; and
• support actions that the user chooses to take through Adrize.

We do not use Google user data for unrelated advertising or marketing purposes.

How we store Google data

Some information received from Google is stored by Adrize where this is necessary to provide the service, maintain historical account information, provide analysis or reporting, generate recommendations, or support functionality selected by the user.

Adrize may retain historical observations and versions of Google Ads account structure, campaign settings, advertising configuration and performance information. This allows Adrize to show changes over time and to account for later changes to reported information, such as delayed conversions or attribution adjustments.

The authorisation credentials required to maintain a Google connection are stored separately from advertising history and are protected using encryption and access controls.

We apply appropriate technical and organisational safeguards to information we store, including access controls, encryption in transit and appropriate protection of credentials and stored information.

The precise data retained by Adrize depends on the services and functionality a user has enabled.

How we share Google data

We do not sell Google user data.

We do not share Google user data with third parties for their own advertising or marketing purposes.

We may use service providers that process information on our behalf where this is necessary to operate Adrize, host our systems, provide infrastructure, maintain security or provide functionality to our users.

Those providers are permitted to process information only for the services they provide to us and are required to protect that information appropriately.

We may also disclose information where required by law or where reasonably necessary to protect the security and integrity of Adrize or its users.

Google API data use

Adrize's use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including applicable Limited Use requirements.

We limit our use of Google user data to providing or improving user-facing Adrize features that relate to the permissions the user has granted. Google requires developers to disclose their access, collection, use and sharing of Google user data and to request only permissions necessary for the relevant functionality.

3. Who we share your data with

We do not sell or rent personal data.

We use trusted service providers to help us operate our website and services. These may include:

• HubSpot — for customer relationship management, waitlist sign-ups, website enquiries and related communications;
• Google services — where required to provide Google account or Google Ads integrations;
• authentication providers — to authenticate users and help secure access to Adrize;
• hosting and infrastructure providers — to operate and secure Adrize systems;
• email and business communication providers; and
• other technical service providers required to operate Adrize.

These providers process information on our behalf and are only permitted to use it for the services they provide to us.

We may also disclose information where required to comply with law, regulation, legal process or a lawful request from a public authority.

4. How long we keep your data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, to provide our services, or to meet legal, security or regulatory requirements.

Where you ask us to delete your personal data, we will delete or anonymise it where we are able and required to do so, subject to any information we need to retain for legal, security or legitimate business purposes.

If you disconnect a Google account from Adrize, Adrize will stop accessing new information through that authorisation. The credentials Adrize stores to maintain that Google connection are removed from Adrize's systems as part of the disconnection process.

Disconnecting an account does not necessarily delete historical advertising information that Adrize has already stored. We may retain previously collected information where reasonably necessary to provide historical reporting, maintain service records, meet legal or security requirements, or otherwise operate Adrize in accordance with this Privacy Policy.

You may separately request deletion of personal data associated with your Adrize account. We will delete, anonymise or otherwise handle that information as required by applicable law and our applicable retention obligations.

5. How we store and protect your data

We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, loss, alteration or misuse.

These measures may include:

• access controls;
• encrypted transmission of information;
• restricted access to production systems;
• monitoring and logging; and
• appropriate security controls used by our infrastructure providers.

No online service can guarantee absolute security, but we take reasonable steps to protect the information entrusted to us.

6. Your data protection rights

Under UK data protection law, you may have the right to:

• access personal data we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to delete your personal data;
• ask us to restrict how we use your information;
• object to certain processing;
• request a portable copy of certain information; and
• withdraw consent where we rely on consent.

These rights are not absolute and may depend on the circumstances.

To make a request, contact us at support@adrize.com.

We may need to verify your identity before acting on a request.

7. Disconnecting Google access

You can disconnect the relevant Google integration within Adrize.

Disconnecting removes Adrize's stored credentials for that connection and prevents Adrize from obtaining new information through that authorisation.

You may also revoke Adrize's access through your Google Account settings. Revoking access through Google similarly prevents future access through that authorisation.

Disconnecting or revoking access does not automatically constitute a request to erase all information previously stored by Adrize.

If you would like to request deletion of personal data associated with your Adrize account, contact us at support@adrize.com.

8. How to complain

If you have concerns about how we have used your personal data, please contact us first at support@adrize.com so that we can try to resolve the issue.

You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline: 0303 123 1113

Website: ico.org.uk

9. Children's data

Adrize is designed for businesses and professional users and is not intended for children.

We do not knowingly collect personal data from children under the age of 16. If you believe that a child has provided personal information to us, please contact us so that we can investigate and, where appropriate, delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time, including where our services, data practices or legal obligations change.

When we make changes, we will update the “Last updated” date at the top of this page.