Privacy Policy

Adpev ("we", "us", or "our") is a digital marketing agency and the Data Controller for the personal data described in this policy. We specialise in patient acquisition services for healthcare and clinic businesses.

This Privacy Policy explains what data we collect, why we collect it, how we use it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For any questions, contact us at admin@adpev.com.

We collect personal data directly from our clients in order to deliver our services. This may include:

• Business name, trading address, and company registration details
• Contact details — name, email address, and phone number
• Advertising account credentials and access permissions
• Campaign data such as budgets, targeting settings, and performance metrics

We do not collect personal data from end users, patients, or visitors to our clients' websites unless explicitly required as part of a contracted service.

Under UK GDPR, we are required to have a lawful basis for processing personal data. We rely on the following:

• Contract performance — processing necessary to deliver the marketing services we have agreed to provide
• Legitimate interests — processing necessary for our business operations (e.g. record-keeping, service improvement) where those interests are not overridden by your rights
• Legal obligation — where we are required to process data to comply with applicable law, such as financial record-keeping requirements

Client data is used solely to:

• Create and manage advertising campaigns across platforms including Google Ads and Meta
• Communicate with you about campaign performance, reporting, and service delivery
• Maintain records of our engagement as required by law
• Improve our services where we have a legitimate interest to do so

We do not sell, rent, or share your data with third parties except where strictly necessary to deliver our services or as required by law.

Adpev uses the Google Ads API to create and manage advertising campaigns on behalf of clients. Google LLC is headquartered in the United States. As a result, data processed via the API may be transferred to and stored in countries outside the UK.

Where such international transfers occur, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO). All API usage is governed by Google's API Terms of Service and Privacy Policy.

Our website (adpev.com) may use cookies and similar technologies to understand how visitors interact with our site. These may include:

• Essential cookies — required for basic site functionality
• Analytics cookies — used to measure traffic and improve user experience (e.g. Google Analytics)
• Advertising cookies — used to measure the performance of our own campaigns

You can control or disable cookies through your browser settings at any time. Note that disabling certain cookies may affect site functionality.

We implement appropriate technical and organisational measures to protect client data, including:

• Restricted access to client advertising accounts — limited to authorised Adpev personnel only
• Secure data transmission using TLS encryption
• Regular review of access controls and data handling procedures
• Use of trusted, enterprise-grade third-party platforms with their own security standards

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the ICO as required by law.

We retain personal data only for as long as necessary for the purposes set out in this policy:

• Active client data — held for the duration of the engagement
• Campaign and performance data — retained for up to 2 years after the end of an engagement
• Financial and contractual records — retained for 6 years as required by UK law

You may request earlier deletion of your data at any time. See Section 10 for how to exercise your rights.

Our services involve third-party platforms including Google Ads and Meta. These platforms operate as independent data controllers and their processing of data is governed by their own privacy policies. We are not responsible for the data practices of these third-party platforms.

We only engage third-party processors who provide sufficient guarantees that they will process data in a manner consistent with UK GDPR requirements.

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your data where there is no legal basis for us to retain it
• Right to restriction — request that we limit how we use your data
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Right to lodge a complaint — you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113

To exercise any of the above rights, contact us at admin@adpev.com. We will respond within 30 days.