Version 2026-04-29

Privacy Policy

We take your privacy seriously. This policy explains what we collect, why we collect it, and the rights you have under UK GDPR.

1. Who we are

LocalPPC ("we", "us", "our") is a trading name for the Google Ads management service provided at localppc.uk. We are the data controller for the personal data described in this policy. Contact us at hello@localppc.uk.

2. Data we collect

  • Account data — name, email address, password (hashed), and authentication provider (e.g. Google sign-in).
  • Business data — business name, website, phone, services, target areas, and any logos or images you upload during onboarding.
  • Billing data — processed by Stripe. We never see or store your card details. We retain your subscription status, plan, and invoice history.
  • Campaign data — ads, keywords, leads, click and conversion metrics from connected advertising platforms (e.g. Google Ads).
  • Technical data — IP address, browser, device, and usage logs needed to run the service securely.

3. How we use it

  • To deliver the service you've paid for (lawful basis: contract).
  • To process payments and prevent fraud (lawful basis: contract / legitimate interest).
  • To send service emails — receipts, password resets, campaign updates (lawful basis: contract).
  • To comply with UK tax and accounting law (lawful basis: legal obligation).
  • To improve the service through aggregated analytics (lawful basis: legitimate interest).

4. Who we share it with

We share data only with the providers we need to run the service:

  • Stripe (payments, EU + US)
  • Supabase (database + auth, EU)
  • Google Ads, Microsoft Advertising, Meta etc. — only the platforms you ask us to manage
  • Email delivery providers for service emails

We do not sell your data. We do not use it for marketing other than your own LocalPPC account communications.

5. International transfers

Some processors (e.g. Stripe) operate outside the UK / EEA. Where data leaves the UK, we rely on the UK Addendum to the EU Standard Contractual Clauses or an adequacy decision.

6. How long we keep it

  • Account + business data: while your account is active, then 30 days after closure.
  • Invoices + tax records: 7 years (UK statutory requirement).
  • Marketing emails (if any): until you unsubscribe.
  • Server logs: 90 days.

7. Your rights

Under UK GDPR you can ask us to: access your data, correct it, delete it, restrict processing, port it to another service, or object to processing based on legitimate interest. Email hello@localppc.uk and we'll respond within 30 days. You also have the right to complain to the ICO at ico.org.uk.

8. Cookies

See our Cookies Policy for details on the cookies and similar technologies we use, and how to control them.

9. Changes

We may update this policy from time to time. The version number at the top changes whenever we do, and we'll email you about material changes that affect you.