Privacy Policy

Ads4Bizz by Khrystyna Dziubakevych

Effective Date: July 2026

This Privacy Policy explains how Khrystyna Dziubakevych, operating as Ads4Bizz ("Service Provider," "I," "me," "my"), collects, uses, protects, stores, and processes personal data and business information from clients and website visitors. This policy applies to all data processing activities and complies with GDPR, CCPA, Polish data protection laws, and other applicable regulations.

1. Information We Collect

1.1 Business Information (from Clients)

Business/company name, legal entity type, industry classification, physical and mailing address, phone number, email address, website URL, business registration details, tax ID, contact person name

1.2 Account Access Credentials (from Clients)

Google Ads account login credentials, Meta Business Manager access, API authentication tokens, encryption keys (stored securely with end-to-end encryption, NEVER in plain text)

1.3 Financial Information (from Clients)

Billing address, payment method details, invoice history, payment status, contract amounts and terms, banking information

1.4 Campaign & Performance Data (from Platforms)

Campaign performance metrics, audience insights, conversion data, click data, impressions, cost-per-action, user behavior analytics, keyword performance (accessed via Google Ads API and Meta Business Manager API)

1.5 Communications (from Clients)

Email messages, meeting notes, Slack/chat communications, support requests, feedback, testimonials, case study participation

1.6 Website Visitor Information (from Website)

IP address, device type, browser type, operating system, pages visited, time spent on site, referring URL, cookies, contact form submissions (name, email, message)

1.7 End-User Data (Collected via Platforms)

Data about end-users who interact with Client's ads (clicks, conversions, demographics, interests) is collected by Google and Meta, not directly by Service Provider. I access this data only through platform APIs to optimize campaigns.

2. Legal Basis for Data Processing

Under GDPR, I process your data based on the following legal bases:

Contractual Necessity (Article 6(1)(b)): Data required to provide PPC services as agreed

Legitimate Interest (Article 6(1)(f)): Campaign optimization, service improvement, and portfolio development

Legal Compliance (Article 6(1)(c)): Tax records, financial documentation, regulatory requirements

3. How We Use Your Information

I use collected information for these purposes:

Manage, optimize, and run PPC advertising campaigns on your behalf

Generate detailed performance reports, analytics, and campaign insights

Process and track payments for invoices and service fees

Communicate service updates, recommendations, and campaign optimization suggestions

Respond to inquiries and provide customer support

Comply with legal, tax, and regulatory obligations

Improve service quality, methodology, and internal processes

4. Data Security & Encryption

I implement industry-standard security measures to protect your data:

End-to-end encryption for account credentials and sensitive data in transit and at rest

Secure password storage using industry-standard hashing algorithms (never plain text)

Restricted access controls: Only Service Provider accesses your data

Regular security assessments, software updates, and vulnerability scanning

Secure deletion of data after retention periods expire

Important: No system is 100% secure. I am NOT responsible for unauthorized access resulting from your negligence, weak passwords, credential sharing, or third-party platform breaches (Google, Meta). You are responsible for maintaining secure passwords and must report suspicious activity within 24 hours.

5. Data Processors & Sub-Processors

I access your data through the following platforms and services (Sub-Processors):

Google LLC: Google Ads API, Google Analytics

Meta Platforms Inc.: Meta Business Manager, Facebook/Instagram Ads API

I do NOT share your personal or business data with third parties outside these platforms without your explicit written consent, except as required by law or court order. You will receive 30 days' notice if I add new sub-processors.

6. Third-Party Data Sharing

Google & Meta Platforms

I access your campaign data through Google Ads API and Meta Business Manager API. These platforms have their own privacy policies and data handling practices. I do not control how Google and Meta process or retain data. Review their privacy policies at:

Google: https://policies.google.com/privacy

Meta: https://www.meta.com/privacy

Anonymized Data

I may use truly anonymized and irreversibly de-identified data (where individual cannot be identified) for internal analytics, service improvement, and anonymized case studies/portfolio purposes. This data is not personal data under GDPR.

7. Cookies & Tracking Technologies

My website (ads4bizz.com) may use cookies and tracking technologies to:

Remember your preferences and login information

Gather analytics about visitor behavior (Google Analytics)

Improve website functionality and user experience

You can disable cookies through browser settings. Disabling cookies may limit your ability to access certain website features. Campaign data collected through Google and Meta platforms includes pixel tracking, conversion tracking, and audience targeting per their privacy policies.

8. Data Retention & Deletion Schedule

I retain client data only as long as necessary. Specific retention periods by data type:

Campaign Performance Data: 24 months (Historical comparison)

Financial & Invoice Data: 7 years (Polish tax law requirement)

Account Credentials: Until termination + 30 days (Service access)

Email Communications: 12 months (Record keeping)

Website Analytics & Cookies: 90 days (Analytics purposes)

Upon termination of services, all data is securely deleted or archived in compliance with applicable laws. Clients may request data deletion subject to legal and contractual retention requirements.

9. GDPR & EU Data Protection Rights

For clients and data subjects in the European Union, I comply with the General Data Protection Regulation (GDPR). You have the following rights:

Right to Access: Obtain a copy of your personal data

Right to Rectification: Correct inaccurate or incomplete data

Right to Erasure ("Right to be Forgotten"): Delete your data (subject to legal obligations)

Right to Restrict Processing: Limit how your data is used

Right to Data Portability: Receive your data in portable format

Right to Object: Oppose processing based on legitimate interest

I act as a data processor for your campaign data and maintain standard contractual clauses as required by GDPR Article 28. I only process data as instructed by you. You remain responsible for GDPR compliance of your advertising content and audience targeting. To exercise any right, see Section 18 (Contact & Data Requests).

10. Data Processing Agreement (DPA)

For GDPR compliance, EU clients should request and sign a formal Data Processing Agreement (DPA) addendum to this Privacy Policy. The DPA specifies:

Data categories and processing activities

Duration of processing and contractual terms

Security measures and standard contractual clauses (SCCs)

Sub-processor authorization and notification

Your rights to audit and data subject assistance

Contact info@ads4bizz.com to request DPA.

11. CCPA & California Privacy Rights

California residents have rights under the California Consumer Privacy Act (CCPA):

Right to Know: Request what personal information I collect and how it is used

Right to Delete: Request deletion of personal information

Right to Opt-Out: Opt-out of sale or sharing of personal information

Disclosures

In the past 12 months, I have NOT:

Sold personal information

Shared personal information for commercial purposes

Retained personal information beyond necessary business purposes

You may exercise CCPA rights by contacting info@ads4bizz.com with subject "CCPA Request."

12. Children's Privacy Protection

I do not knowingly collect personal information from children under 13 years of age. COPPA (US) and GDPR Article 8 (EU) require parental consent for minors. If I discover data from anyone under 13:

I will immediately stop processing that data

Notify you within 24 hours via email

Securely and permanently delete it

You warrant that your advertising content and landing pages do not target or collect data from children under 13 in violation of COPPA, GDPR, or other laws.

13. Data Breach Notification

If I discover unauthorized access to, or breach of, your data or account credentials, I will:

Notify you within 24 hours via email to the contact address on file

Provide details about the breach and affected data

Cooperate fully with investigation and remediation

For GDPR-regulated data, you are responsible for notifying regulators within 72 hours if required. I will provide all necessary information to facilitate your notification.

14. International Data Transfers

If you are located outside the United States, your data may be transferred to, stored in, and processed in the United States or other countries where Service Provider or sub-processors operate. By engaging my services, you consent to such transfers. I implement appropriate safeguards including Standard Contractual Clauses (SCCs) under GDPR Article 46 to protect your data during international transfers.

15. Your Rights & Exercise Procedures

You have the right to:

Access your personal data and receive a copy (subject to reasonable limitations)

Correct or update inaccurate data

Request deletion of your data (subject to legal/contractual obligations)

Object to or restrict certain types of processing

Withdraw consent to data processing at any time

To Exercise These Rights:

Email info@ads4bizz.com with "Data Request" in subject and specify which right (access, delete, correct, etc.)

Provide sufficient information for me to identify your data

I will respond within 15 calendar days for most requests, or 30 days for complex requests

16. Updates to This Privacy Policy

I may update this Privacy Policy periodically to reflect changes in data handling practices, technology, legal requirements, platform policies, or other factors. Material changes will be communicated via email or website notification. Your continued use of my services after updates become effective constitutes acceptance of the updated Privacy Policy.

17. Consumer Rights (European Union)

If you are a consumer (natural person acting for personal purposes) in the EU, you have additional rights under Polish consumer protection law and EU regulations, including the right to withdraw from distance contracts within 14 days.

18. Contact Information & Data Requests

For questions, concerns, data requests, or to exercise your privacy rights:

Khrystyna Dziubakevych (Ads4Bizz)

Email: info@ads4bizz.com

Website: https://ads4bizz.com

Country: Ukraine

GDPR Complaints: If you believe your rights have been violated, you may file a complaint with your local data protection authority.

Last Updated: July 2026 | Ads4Bizz by Khrystyna Dziubakevych

© 2026 Ads4Bizz. All rights reserved.

READY TO SCALE?

Get a free expert audit or quick strategy call—no fluff, just real growth tips. Drop your info and let’s fix what’s not working.