Privacy Policy

1. Who we are

PerformanceOS is a fixed-fee advertising management service for UK businesses running Google and Meta advertising.

Controller: PerformanceOS, an independent sole trader business established in England.
Contact: support@performanceos.co.uk
ICO registration: ZC274509
Full legal details: our registered legal name and business address are provided on request by email, and are set out in full in the client agreement issued before any engagement begins.

We have not appointed a Data Protection Officer, and are not required to. Data protection queries go to the email address above.

2. If you visit this site

Our host records your IP address, browser and device type, the pages you view and how you arrived. We use this to keep the site working and secure, and to see how many visitors go on to book an audit. Our lawful basis is legitimate interests: running and measuring our own website.

Our booking calendar is provided by Calendly and does not load until you click to open it. If you open it, Calendly sets cookies on your device and receives whatever you enter. If you never click, no third-party cookies are set.

The typefaces on this site are served by Google Fonts. Loading a page sends your IP address and browser details to Google so the fonts can be delivered. No cookies are set by this, and Google states it does not use the data for advertising or profiling.

3. If we contacted you about our service

Most of our new business comes from direct outreach. If you had never heard of us before we got in touch, this section is the one that matters.

What we hold. Your business name, the name and job title of the owner or decision-maker, business email address, business phone number, business address, LinkedIn profile, and notes about advertising your business is publicly running.

Where it came from. Publicly available sources: the Meta Ad Library, Google search results, your own website, Companies House, trade association member lists and business directories. We did not buy a list.

Why. To offer a service we think is relevant to businesses of your type. Our lawful basis is legitimate interests. We have assessed that a business owner visibly spending money on advertising would reasonably expect to be contacted about advertising services, that our contact is low-volume and specific to your business rather than bulk, and that it stops instantly on request.

How to stop it. Reply and say so, or email the address above. We stop immediately and permanently. We keep a record of businesses that have asked not to be contacted, indefinitely, because that record is the only way to honour the request.

How long we keep it. If you do not respond, we delete your details within 12 months of our last message.

4. If you book an audit

To run an audit we need either read-only access to your advertising accounts, or screenshots of them.

What that lets us see. Your advertising account holds data about your campaigns, spend and results. It may also hold personal data belonging to other people, such as the contact details of anyone who has submitted a lead form, or any customer lists you have uploaded.

What we do with it. We use it to build your scorecard and walk you through it on the call. We do not export lead-level data, we do not copy customer lists, and we do not use anything we see in your account for any other business or for our own advertising. Where we handle personal data belonging to your enquirers or customers, we do so on your instructions and for the audit only.

Removing access. Read-only access is for the audit. You can remove it yourself at any time, and we will tell you how after the call.

How long we keep it. We keep your scorecard and the notes behind it for six months, so we can answer follow-up questions and so we have a baseline if you come back to us later. Screenshots are deleted at the same point.

5. Who else sees your data

We do not sell personal data. It is shared only with the providers that help us run the service, who act on our instructions:

Provider	What for
Calendly	Audit booking
Tally	Intake form before the audit
Google Fonts	Delivering the typefaces used on this site
Google Workspace	Email correspondence and outreach records
Cloudflare	Hosting this website and its analytics

We also share data with our professional advisers where necessary, and with anyone we are legally required to share it with.

6. Sending data outside the UK

Some of our providers are based in, or store data in, the United States. Where that happens we rely on the UK's adequacy regulations, including the UK Extension to the EU–US Data Privacy Framework, or on the International Data Transfer Addendum to the EU Standard Contractual Clauses.

7. Security

We use access controls, two-factor authentication on every platform account, unique credentials and limited retention. We access advertising accounts through the platforms' own partner and manager-account systems, which means access is granted and revoked by you, and every action is logged.

No system is perfectly secure. If a breach affects personal data we hold, we will report it to the ICO where required and tell affected people where the law requires it.

8. Your rights

You can ask us for a copy of your data, or to correct it, delete it, restrict our use of it, or provide it in a portable format. Where we rely on legitimate interests you can object — including to direct marketing, which we always honour without question.

Email support@performanceos.co.uk. We respond within one month, and there is no charge.

If you are unhappy with how we have handled it you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first.

9. Changes

We update this policy when the service or our tools change. The date at the top shows the last revision.