Privacy Policy

AdScope Online Services Ltd

Last updated: 30 July 2026

1. Who we are

AdScope Online Services Ltd ("AdScope", "we", "us", "our") is a marketing agency registered in England and Wales. We provide paid advertising, CRM automation and content production services to dental and aesthetics clinics.

We are the data controller for the personal data described in this policy.

Registered company name: AdScope Online Services Ltd

Registered address: 21 Saxony House, 60 Cambridge Road, London, United Kingdom, NW6 5GS

Company number: 14052272

Contact for privacy matters: [email protected]

This policy covers:

our website at adscope.co

our client reporting dashboard at dashboard.adscope.co

personal data we handle in the course of providing our services and running our business

If you are an individual who enquired with one of our clinic clients through an advertising campaign we manage, please see section 6, which explains our role in that situation.

2. What we collect and why

2.1 Website visitors

Data Why we process it Lawful basis Name, email address, phone number, company name, message content submitted through contact or enquiry formsTo respond to your enquiry and, if relevant, to provide a proposal for our servicesLegitimate interests (responding to a business enquiry you initiated)Marketing preferences and email engagement (opens, clicks)To send you information about our services and measure whether it is usefulConsent, which you can withdraw at any timeIP address, browser type, device type, pages visited, referring siteTo keep the website secure and understand how it is usedLegitimate interests (security and service improvement); consent where analytics cookies are used2.2 Clients and prospective clients

DataWhy we process itLawful basisBusiness contact details of staff at clinics we work with or approachTo deliver our services, manage the relationship, and carry out business developmentContract, and legitimate interests for business developmentContract, billing and payment recordsTo invoice, take payment, keep accounts and meet statutory record-keeping dutiesContract, and legal obligationCall recordings and meeting transcripts, where we tell you a call is being recordedTo keep an accurate record of what was agreed, and for internal training and qualityLegitimate interests, with notice given at the time2.3 Reporting dashboard users

DataWhy we process itLawful basisName, email address, account credentials and access logs for users of dashboard.adscope.coTo provide secure access to campaign reporting and to keep the platform secureContract, and legitimate interests in platform security2.4 Job applicants

Where you apply to work with us we process your CV, contact details and interview notes in order to assess your application, on the basis of our legitimate interests in recruitment. We keep unsuccessful applications for 12 months unless you ask us to delete them sooner.

3. Advertising platform data

We manage advertising campaigns on behalf of our clients, and we operate an internal reporting dashboard that retrieves advertising performance data from advertising platforms including the Meta Marketing API and Google Ads.

What we retrieve. Campaign, ad set and ad identifiers and names, together with delivery and cost metrics such as spend, impressions, clicks, reach and results. Where relevant we also retrieve the creative elements of an advert, such as its headline, primary text and image or video thumbnail.

Whose accounts. We access this data only for advertising accounts that we own, or that the account owner has granted our business account access to for the purpose of managing their advertising.

This data does not identify individuals. We do not receive names, email addresses, telephone numbers, platform user identifiers or any other personal data through these advertising platform integrations. The data is aggregated performance information about adverts, not about people.

How we use it. Solely to manage, optimise and report on our clients' advertising campaigns. Each client can see reporting relating to their own campaigns only.

Who processes it. The data is processed on our behalf by Make.com (automation), Google (Google Sheets) and Supabase (database and hosting), each acting only on our instructions and under written data processing terms.

How long we keep it. For the duration of our engagement with the client and for up to 24 months afterwards, after which it is deleted.

What we do not do. We do not sell, licence, exchange or transfer advertising platform data to any third party, and we do not use it for any purpose other than managing and reporting on our clients' advertising.

Our use of data obtained from Meta complies with the Meta Platform Terms and the Meta Developer Policies. Our use of data obtained from Google Ads complies with the Google Ads API Terms of Service.

4. Cookies and similar technologies

Our website uses cookies and similar technologies. Strictly necessary cookies are required for the site to function and are set without consent. Analytics and advertising cookies, including cookies set by Meta and Google, are set only where you consent through our cookie banner.

You can withdraw or change your cookie consent at any time through the cookie settings on our website, and you can block or delete cookies through your browser settings. Blocking strictly necessary cookies may stop parts of the site working.

5. Who we share personal data with

We share personal data with service providers who process it on our behalf, under written contracts that require them to act only on our instructions and to keep it secure. These currently include:

ProviderPurposeGoogle LLC (Workspace, Sheets, Drive)Email, documents and internal reporting storageGoHighLevel (HighLevel Inc.)CRM, enquiry management and client communicationsMake.com (Celonis SE)Workflow automationSupabase Inc.Database and hosting for the reporting dashboardMeta Platforms and GoogleAdvertising delivery and measurementOur accountants and payment providersInvoicing, payment processing and statutory accountsWe also disclose personal data where we are legally required to, for example in response to a valid court order or a lawful request from a public authority. Where we receive such a request we review its legal validity, challenge it where we consider it unlawful, disclose only the minimum information necessary, and document the request and our response.

We do not sell personal data. If our business is sold, merged or reorganised, personal data may transfer to the acquiring entity, and we will tell you if that materially affects how your data is used.

6. Enquiries generated for our clinic clients

When we run advertising for a clinic and a member of the public submits an enquiry, that enquiry data is collected for the clinic. The clinic is the data controller for that data and its own privacy policy governs how it is used. AdScope acts as a processor on the clinic's behalf, handling the data only as instructed in order to pass the enquiry to the clinic and to support booking and follow-up.

If you enquired with a clinic and want your data accessed, corrected or deleted, please contact the clinic directly. You can also contact us at [email protected] and we will pass the request on.

7. International transfers

Some of our service providers are based outside the United Kingdom, including in the United States. Where personal data is transferred outside the UK we rely on UK adequacy regulations where they apply, or on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any additional safeguards needed to protect the data.

8. How long we keep personal data

DataRetentionWebsite enquiries that do not become clients24 months from last contactClient records and correspondenceDuration of the engagement plus 6 yearsInvoices, payment and accounting records6 years after the end of the relevant financial year, as required by UK tax lawAdvertising performance dataDuration of the engagement plus up to 24 monthsDashboard accounts and access logsDuration of the engagement, logs for 12 monthsMarketing contactsUntil you unsubscribe, or after 24 months of no engagementJob applications12 months for unsuccessful applicants9. Security

We protect personal data using access controls and role-based permissions, encryption in transit, multi-factor authentication on our core business systems, restriction of access to staff who need it, and written confidentiality obligations for staff and contractors. We review provider security when we take on a new service provider. No system can be guaranteed completely secure, and we will notify you and the Information Commissioner's Office where we are required to do so following a personal data breach.

10. Your rights

Under UK data protection law you have the right to:

be informed about how we use your personal data

request a copy of the personal data we hold about you

have inaccurate personal data corrected

ask us to delete your personal data

ask us to restrict how we use your personal data

object to processing based on our legitimate interests, and to direct marketing at any time

receive your personal data in a portable format

withdraw consent at any time where we rely on consent

not be subject to a decision based solely on automated processing that has a significant effect on you, which is not something we carry out

To exercise any of these rights, email [email protected]. We will respond within one month. There is no charge, and we may ask you to verify your identity before we act.

If you are unhappy with how we have handled your personal data you can complain to the Information Commissioner's Office at ico.org.uk, by calling 0303 123 1113, or by writing to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We would ask that you raise it with us first so we have the chance to put it right.

11. Children

Our services are directed at businesses and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact [email protected] and we will delete it.

12. Links to other websites

Our website contains links to other websites. We are not responsible for the privacy practices or content of those sites, and we encourage you to read their privacy policies.

13. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. Where changes materially affect how we use your personal data we will take reasonable steps to bring them to your attention.

14. Contact us

AdScope Online Services Ltd

21 Saxony House, 60 Cambridge Road, London, United Kingdom, NW6 5GS

Email: [email protected]