Privacy Policy
Last updated: July 24, 2025
This Privacy Policy (the "Policy") explains what personal data Whitead (FOP Mazurenko Danyil Oleksandrovych) processes in connection with providing performance marketing services and using our internal Google Ads audit tool. We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
1. What data we collect
Data you provide voluntarily
- Name, email address, and other contact information when you contact us through the "Email Us" form or Telegram.
Advertising account data
- Campaign metrics, ad settings, spending history that we obtain through Google Ads API based on access you provide.
Cookies and analytics
- Anonymous information about website usage (IP address, browser type, session duration) collected by Google Analytics and other similar services.
2. Purpose and legal basis for processing
| Purpose | Example | Legal basis |
|---|---|---|
| Providing and improving services | Conducting Google Ads account audit, preparing recommendations | Contract performance (Art. 6 (1)(b) GDPR) |
| Communication | Responding to email or Telegram inquiries | Legitimate interest (Art. 6 (1)(f)) |
| Marketing analytics | Measuring website traffic | Cookie consent (Art. 6 (1)(a)) |
3. Cookies
We only use technical and analytical cookies. During your first visit to the site, you see a banner with the option to accept or decline analytical cookies. You can change your choice at any time in your browser settings.
4. Who we share data with
- Cloud service providers (Google Cloud, Vercel, Ukraine.com.ua, Railway.app) — for storing encrypted logs and reports.
- AI service providers (OpenAI, Anthropic, Google Vertex AI, etc.) — for analytical processing of advertising metrics and generating recommendations; personal data is transmitted minimally and is not used for model training.
- Only internal Whitead employees have access to tokens and client data under NDA agreement.
- Data is not sold or transferred to third parties for marketing purposes without your direct consent.
5. Retention period
- Advertising reports — up to 24 months from generation date, after which they are deleted or anonymized.
- Contact data — while cooperation continues + 12 months to resolve possible claims.
- Cookies — according to specific file settings (no more than 26 months for Google Analytics).
6. Your rights
You have the right to:
- Access your data;
- Rectify inaccurate data;
- Erasure ("right to be forgotten");
- Restrict processing;
- Data portability;
- Object to processing based on legitimate interest;
- Lodge a complaint with supervisory authority (in Ukraine — Commissioner of the Verkhovna Rada for Human Rights).
To exercise your rights, send a request to support@whitead.digital. We will respond within 30 days.
7. Data security
We apply TLS encryption for the website, store API tokens in environment variables, use role-based access model and daily server backups.
8. International transfers
Data may be processed on servers of Google Cloud, Vercel, Ukraine.com.ua, Railway.app located in EEA or USA. We rely on Standard Contractual Clauses (SCC) as appropriate transfer mechanism under GDPR.
9. Policy changes
We may periodically update this Policy. New version is published on this page with changed "Last updated" date. We will notify about significant changes via email or website banner.
10. Contact
If you have questions about this Policy or data processing, contact us:
Data controller: FOP Mazurenko Danyil Oleksandrovych
Email: support@whitead.digital
Postal address: Nova Poshta, branch 16, Vyshnevе, Kyiv region, Ukraine
Thank you for trusting Whitead. We care about the security of your data!