Privacy policy
Effective September 29, 2026
ResponsivePPC is a Google Ads service run by me, Tom, through my company Wildlight Media. This policy covers responsiveppc.com: what I collect, why, who else handles it, and what you can ask me to do with it. The short version is that I collect what I need to answer you and do the work, and I don't sell it.
What I collect
What you give me
- Contact and review requests: your name, email, phone number, how you'd like to be contacted, your website, your business type, your approximate monthly Google Ads spend, who manages your account, and anything you choose to write.
- Audit orders: your email, website and spend range, and after you pay, your answers about your business (what counts as a conversion, what a customer is worth, where you sell or serve, and anything you don't want to advertise).
- Payments: payments are handled by my payment processor. I see that you paid, the amount, and the name and email on the payment. I never see or store your full card number.
- Your Google Ads account: if you give me read-only access for an audit, or manager access for ongoing work, I can see your campaigns, settings and performance data. I use it only to do the work you hired me for.
The free check-up
The free Google Ads check-up runs entirely in your browser. The reports you add are read on your own device and never uploaded to me or anyone else, and neither are the results.
What's collected automatically
- Google Analytics: pages viewed, buttons and links clicked, how far you scroll, how long you stay, page speed, and general details like device type, browser and approximate location (city level). It uses first-party cookies to tell visits apart. It never receives what you type into a form or upload to the check-up.
- Meta Pixel and Conversions API: the site uses Meta's tools to measure the Facebook and Instagram ads that send people here, and to show my ads to people likely to be interested. They report page views and key steps (running the free check-up, opening checkout, sending a request) along with your browser's details, your IP address and Meta's own cookies. Each event is sent from your browser and also from this site's server, so it still counts if the browser copy is blocked. When you submit a form, your email and phone number are converted in your browser into a one-way code (a SHA-256 hash) before being sent to Meta, which uses it to match the visit to a Facebook or Instagram account. The plain values aren't sent to Meta, and nothing from the free check-up's files or results is ever sent. If your browser sends a Global Privacy Control signal, none of this runs.
- Site preferences: your browser stores a few small values on this site so it works properly, like which step of checkout you're on.
How I use it
- To reply to you, schedule calls, and deliver the audit or management you've asked for
- To process payments and keep business records
- To understand which pages and ads bring the right people, so I can improve the site and spend my own ad budget well
- To keep the site and forms secure and free of spam
I don't sell your information. I don't add you to a newsletter without asking, and I only contact you about what you asked for.
Who else handles it
A few service providers handle information for me as part of running the site. Each one gets only what it needs:
- Netlify hosts the site and receives form submissions.
- Google provides Google Analytics.
- Meta receives the Pixel and Conversions API data described above. Meta may also use it under its own terms, for example to decide who sees my ads. Under some state privacy laws, that counts as "sharing" for advertising, and you can opt out as described below.
- My payment processor processes payments.
- My email and calendar providers carry my messages and bookings.
I'd also disclose information if the law required it, or to protect my rights or someone's safety.
Your choices
- Ask me: you can ask to see, correct or delete the information I have about you, or tell me not to use it for advertising. Email tom@wildlightmedia.com, and I'll reply within 30 days.
- Advertising: turn on Global Privacy Control in your browser, or change your ad settings in your Facebook or Instagram account.
- Analytics: block cookies in your browser, or install Google's Analytics opt-out add-on.
- Account access: you can remove my access to your Google Ads account at any time from Admin → Access and security.
How long I keep it
Contact requests I don't act on are deleted within 12 months. Records for clients and audits are kept while we work together and as long as I need them for taxes and business records afterward. Google Analytics data expires after 14 months. When an audit is done, I stop using your account data for anything but that audit's report, and you can remove my access.
Security
The site runs over HTTPS with a strict content security policy. Forms only post to this site. Account access I receive is read-only unless you've hired me to manage the account. No system is perfectly secure, but I keep what I collect to a minimum.
Children
This site is for businesses. It isn't meant for anyone under 16, and I don't knowingly collect information from them.
Changes
If this policy changes, I'll update it here and change the date at the top.
Contact
Tom, ResponsivePPC (Wildlight Media) · tom@wildlightmedia.com