Privacy Policy

1. Data Controller

eCom Ads BV is the data controller for personal data processed through our websites and services.

• KVK: 77000013
• Address: A Hoffmanweg 60, 2031BJ Haarlem, Netherlands
• Email: hello [at] ecom-ads.com

2. What Data We Collect

We collect the following categories of personal data:

• Contact information — name, email address, phone number, company name.
• Billing information — business address, VAT number, payment details (processed by Wise; we do not store card numbers).
• Account data — Google Ads and Meta Ads account access credentials shared for service delivery.
• Communication data — emails, call notes, and messages exchanged during our engagement.
• Website usage data — pages visited, browser type, and IP address (via cookies and analytics).
• Newsletter subscribers — email address and engagement data.

3. How We Use Your Data

• Service delivery — managing ad accounts, providing strategic advice, and delivering reports.
• Communication — responding to enquiries, scheduling meetings, and project updates.
• Billing — invoicing, payment processing, and financial administration.
• Marketing — sending newsletters and updates (only with your consent; you can unsubscribe at any time).
• Website improvement — understanding how visitors use our sites to improve the experience.

4. Legal Basis (GDPR)

We process personal data under the following legal bases:

• Contract performance — processing necessary to deliver our services.
• Legitimate interest — business communications, website analytics, and service improvement.
• Consent — newsletter subscriptions and marketing communications.
• Legal obligation — tax and accounting records as required by Dutch law.

5. Third Parties

We share data with the following third parties, only as necessary for service delivery:

• Google (Google Ads, Google Analytics) — ad management and website analytics.
• Meta (Meta Ads) — ad management.
• Wise (TransferWise Ltd) — payment processing.
• Kit (formerly ConvertKit) — email newsletter delivery.
• Google Calendar — meeting scheduling.
• Moneybird — invoicing and accounting.

We do not sell personal data to third parties.

6. Data Retention

• Client data is retained for the duration of the engagement plus 2 years.
• Financial records are retained for 7 years as required by Dutch tax law.
• Newsletter subscriber data is retained until you unsubscribe.
• Website analytics data is retained for 26 months.

7. Cookies

Our websites use essential cookies for site functionality and analytics cookies (Google Analytics) to understand visitor behaviour. Analytics cookies are only placed with your consent. You can manage or withdraw your cookie consent at any time using the button below.

Manage cookie preferences

A full cookie declaration — listing every cookie active on our websites by category — is shown at the bottom of this page.

8. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data (“right to be forgotten”).
• Restriction — limit how we process your data.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — withdraw consent at any time for consent-based processing.

To exercise any of these rights, contact us at hello [at] ecom-ads.com. We will respond within 30 days.

9. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights regarding your personal information:

• Right to Know — request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, our business purpose for collecting it, and the categories of third parties we share it with.
• Right to Delete — request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Opt-Out of Sale — we do not sell personal information to third parties. No opt-out is required.
• Right to Non-Discrimination — we will not discriminate against you for exercising any of your CCPA rights.
• Right to Correct — request correction of inaccurate personal information we hold about you.

Categories of personal information collected: identifiers (name, email, IP address), commercial information (service history), internet activity (pages visited, browser data), and professional information (company name, job role).

To exercise your California privacy rights, contact us at hello [at] ecom-ads.com. We will respond within 45 days. You may also designate an authorised agent to submit a request on your behalf.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data, including encrypted communications (TLS/SSL), secure access controls, and regular security reviews. Payment data is handled exclusively by Wise under PCI DSS compliance.

11. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via email to affected individuals. The “last updated” date at the top reflects the most recent revision.

12. Complaints

If you believe we have not handled your data properly, you may file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.