Privacy Policy

Last updated: 24 August 2026

PacingDesk is a tool our own staff use to run our own advertising. Nobody outside the company has an account on it, and it is not sold, licensed or offered as a service. This page sets out what the tool holds, why, who can reach it, and when it goes away.

What we hold

Two kinds of thing: records about the colleagues who use the tool, and figures read out of the advertising accounts we operate.

For a colleague, that is a name, a work address to sign in with, the role they have been given, and a log of when they signed in.

From a connected advertising account, the tool reads:

• Which account it is, and the handful of settings needed to read it correctly — its name, the currency it bills in, its time zone, whether it is active.
• The campaigns, ad groups and ads inside it: their identifiers, their names, how they nest, and whether each is currently delivering.
• Day-by-day totals of what was spent and what came of it — cost, impressions, clicks, conversions and the ratios worked out from them.
• Whichever colleague authorised the connection, so we know who it was.
• The credential the platform issues to let us keep reading. It is encrypted where it sits and never reaches the browser or the logs.

Nothing else is asked for. The tool does not touch audience or customer lists, uploaded contact details, form submissions, comments, private messages, creative libraries, product feeds, tracking-pixel events or payment details. It holds no information at all about the individual people who were shown an advertisement, and makes no attempt to work out who they were.

Why we hold it

To show our team what their campaigns cost and returned, to show the structure those figures came from, to carry out a start or stop when somebody asks for one, to keep past periods available for comparison, and to keep the tool itself secure and working. Nothing here feeds advertising targeting, builds profiles of anyone, or trains a model.

Who can see it

Colleagues who have been given an account, each signing in under their own name, with what they can reach set by their role. None of it is sold, traded, licensed or handed to anyone else. The one outside party involved is the company hosting our infrastructure, which stores the data on our behalf and does nothing else with it.

How long it stays

Disconnect an advertising account and its stored credential is destroyed immediately; the structure and statistics imported from it follow within thirty days. Records of a colleague's account last as long as their access does.

Turning access off

An administrator can disconnect any advertising account from inside the tool, which ends our access to it. The same authorisation can be revoked from the advertising platform's own settings, without involving us at all, and that takes effect regardless of anything on our side. To have data we hold deleted, write to us.

Questions

Anything about this page, or a deletion request, goes to team@pacingdesk.site.