Privacy policy
Lopu Advertising (“we”, “us”) respects your privacy. This policy explains what data we process, why, and what rights you have under the EU General Data Protection Regulation (GDPR).
1. Who we are
Lopu Advertising, registered with the Netherlands Chamber of Commerce under number 88056139, located at Raadhuisplein 28, 4147 AN Asperen, the Netherlands. Contact: email address (visible with JavaScript enabled).
2. Visitors of this website
This website uses no cookies and no tracking pixels, and stores nothing on your device.
To see how the site is used, we use Cloudflare Web Analytics. It counts page views, the website you came from, your country and your type of device and browser. It works without cookies or any other storage on your device and does not track you across other websites. We only see totals, not individual visitors.
This website and our email address run through Cloudflare. Cloudflare protects and speeds up the site, provides the encrypted connection (HTTPS) and forwards email to us. In doing so, Cloudflare processes technical data such as your IP address on our behalf. Cloudflare may also process data outside the European Union; this is covered by the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.
Our web server also keeps technical log files (such as IP address, timestamp and requested page) for security and operation. These logs are kept for at most 14 days and are not shared.
If you email us, we use your name, email address and message only to respond to your inquiry.
3. Client data and Google Ads data
We manage Google Ads accounts on behalf of our clients. To do so we use our internal software (the SEA Command Center), which retrieves data through the Google Ads API from accounts linked to our manager account (MCC). This only happens with the client's consent.
- What data: account and campaign structure, keywords, search terms, ads and performance data (such as impressions, clicks, cost and conversions).
- Purpose: solely to manage, optimise and report on the respective client account.
- No end-user personal data: Google Ads reporting data is aggregated; we do not process data that identifies individual searchers.
- Storage: in our own restricted environment (our business Google Workspace and our own systems). Only Lopu Advertising staff have access.
- AI processing: analyses and action plans are drafted by a language model running locally on our own hardware. Client data is not sent to external AI services for this.
- Sharing: we do not sell Google Ads data and do not share it with third parties, except with the client themselves.
- Retention: for the duration of the engagement. After it ends, or earlier on request, we delete the data within 30 days.
Our use of the Google Ads API is subject to the Google Ads API Terms and Conditions and Google's policies.
4. Security
We take appropriate technical and organisational measures: access via OAuth 2.0 with two-factor authentication, least-privilege access, and encrypted connections (HTTPS).
5. Your rights
You have the right to access, correct, delete and port your data, and to object to processing. Contact us at email address (visible with JavaScript enabled). You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
6. Changes
We may update this policy. The latest version is always available on this page.