GDPR Privacy Notice
This notice explains how AdTrench collects, uses, and protects the personal data of individuals in the European Economic Area (EEA) and the United Kingdom (UK), in accordance with GDPR and UK GDPR.
This notice supplements our Privacy Policy with GDPR-specific information.
1. Who We Are (Data Controller)
AdTrench is the data controller responsible for your personal data. As data controller, we determine the purposes and means of processing your personal information.
- Organisation: AdTrench
- Website: adtrench.com
- Contact: adtrenchofficial@gmail.com
- Services: Shopify store development, Google Ads, Meta Ads, SEO, and Shop Campaigns management
2. Personal Data We Collect
Data you provide directly
- Name (first name required; last name optional)
- Email address
- Shopify store URL (optional)
- Monthly revenue range (optional)
- Services you are interested in
- Any information voluntarily included in your message
Data collected automatically
- IP address and approximate location
- Browser type and version
- Pages visited and time spent
- Referring URL and device type
Special category data
We do not collect or process any special category data as defined under Article 9 of the GDPR.
3. Lawful Basis for Processing
The table below sets out the purposes for which we process personal data and the corresponding lawful basis:
| Purpose | Data Used | Lawful Basis |
|---|---|---|
| Responding to contact form enquiries | Name, email, message | Legitimate interests |
| Scheduling and conducting strategy calls | Name, email, store details | Legitimate interests |
| Delivering contracted services | All relevant client data | Contract performance |
| Sending service-related communications | Name, email | Contract performance |
| Sending marketing communications | Name, email | |
| Website analytics and improvement | Anonymised usage data | Legitimate interests |
| Complying with legal obligations | As required by law | Legal obligation |
4. How We Use Your Data
- To respond to enquiries submitted through our contact form
- To schedule and conduct free strategy calls
- To deliver the services agreed in our Service Agreement
- To communicate about your engagement, invoices, and deliverables
- To send marketing communications where consented
- To improve our website using anonymised analytics
- To comply with legal obligations
We will never use your data for automated decision-making or profiling that produces legal or significant effects on you.
5. Data Sharing & Third Parties
We do not sell your personal data. We share it only where necessary:
- FormSubmit — processes contact form submissions
- Google Analytics — processes anonymised website usage data
- Google Workspace / Gmail — used for client communications
- Shopify, Google Ads, Meta Ads — platforms accessed on behalf of clients during service delivery
6. International Data Transfers
Where personal data is transferred outside the EEA or UK, we ensure appropriate safeguards are in place including Standard Contractual Clauses (SCCs), UK International Data Transfer Agreements (IDTAs), and adequacy decisions.
7. Data Retention
- Contact form enquiries (no engagement): up to 24 months
- Client records: duration of engagement plus 3 years
- Financial records: 7 years as required by law
- Marketing consent records: until withdrawal plus 1 year
- Website analytics: retained in anonymised form
When data is no longer required, it is securely deleted or permanently anonymised.
8. Your Rights Under GDPR
As a data subject under the GDPR, you have the following rights:
Request a copy of the personal data we hold about you (Subject Access Request). We will respond within 30 days.
Request correction of any inaccurate or incomplete personal data we hold.
Request deletion of your personal data where there is no compelling reason to continue processing it.
Request that we restrict processing of your data in certain circumstances.
Receive your personal data in a structured, machine-readable format.
Object to processing based on legitimate interests or for direct marketing purposes.
Where processing is based on consent, withdraw it at any time without affecting prior processing.
Not to be subject to solely automated decision-making. AdTrench does not engage in such processing.
To exercise any right, email adtrenchofficial@gmail.com. We respond within 30 days.
9. Cookies & Consent
Non-essential cookies require your consent under GDPR. Essential cookies are placed automatically. See our full Cookie Policy.
10. Children’s Data
Our services are intended for business owners aged 18 and over. We do not knowingly collect data from children under 16. If you believe we have, please contact us immediately.
11. Right to Lodge a Complaint
If you believe we have not handled your personal data in accordance with the GDPR, you have the right to lodge a complaint with your supervisory authority:
- UK: Information Commissioner’s Office — ico.org.uk
- Ireland: Data Protection Commission — dataprotection.ie
- Netherlands: Autoriteit Persoonsgegevens — autoriteitpersoonsgegevens.nl
- Other EEA countries: contact your national data protection authority
We would appreciate the opportunity to address any concern before you contact a supervisory authority. Please reach out to us first.
12. Contact Us
- Email: adtrenchofficial@gmail.com
- Website: adtrench.com/contact
- Role: Data Controller
Questions About Your Data?
Reach out directly and we’ll respond within 5 business days. No legal jargon.
Get in Touch →