Privacy Policy

This Privacy Policy explains how IllumineAds ("we", "us") collects, uses, stores, and protects your personal data when you visit our website, book a Diagnostic Session, or otherwise interact with our services.

This policy applies to all clients and visitors regardless of location and is designed to comply with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the Digital Personal Data Protection Act, 2023 (India).

By using our website or booking a session, you confirm that you have read and understood this policy.

IllumineAds is operated by M. P. S. Singh, a paid growth specialist based in India. For the purposes of UK GDPR and EU GDPR, IllumineAds acts as the data controller for personal data collected through our website and services. Under the DPDP Act 2023, IllumineAds acts as the data fiduciary.

You can contact us at any time at contact@illumineads.com regarding this policy or your personal data.

We collect the following categories of personal data:

Identity & Contact Information

• Name, business name, email address, country of operation
• Any contact information you provide voluntarily through the application form

Commercial & Operational Information

• Information you provide in the pre-session questionnaire — including ad spend, channels used, current campaign performance, creative library, funnel structure, and known bottlenecks
• Any business documents, screenshots, or analytics data you share with us in preparation for or during the session

Payment Information

• Payment is processed by third-party payment providers (such as Stripe or Wise). We do not store full card numbers on our systems. We receive only transaction confirmation, the last four digits of the card (where applicable), and billing details required for invoicing

Technical & Usage Information

• IP address, browser type and version, device information, operating system
• Pages visited, time spent, referring URL, interactions with the website
• Cookie identifiers (see Clause XI)

Marketing Information

• Records of your communication preferences and any opt-in consents you have given

We collect personal data:

• Directly from you — when you submit the application form, complete the pre-session questionnaire, communicate with us by email, or attend a diagnostic session
• Automatically via cookies and tracking technologies — when you visit our website (see Clause XI)
• From third-party services — including our payment processors and analytics providers, who pass us limited information necessary to deliver the Service

We use the personal data we collect to:

• Deliver the Diagnostic Session, including preparing the Pre-Session Intelligence Brief, Competitor Intelligence Dossier, and Execution Dossier
• Process payment and issue invoices or receipts
• Respond to your enquiries and provide customer support
• Send transactional communications relating to your booking (confirmations, reminders, deliverables)
• Send marketing communications about IllumineAds services, where you have opted in
• Improve our website, services, and content through aggregate, anonymised analysis
• Meet our legal, regulatory, and tax obligations

We do not sell your personal data to any third party and will never do so.

IllumineAds operates from India. If you are based in the United Kingdom, the European Union, or any other jurisdiction outside India, your personal data will be transferred to and processed in India.

Where we transfer personal data from the UK or EU to India or to other third countries, we rely on appropriate safeguards as required by UK GDPR and EU GDPR, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission and the UK Information Commissioner's Office, where applicable
• Service provider commitments to equivalent data protection standards
• Additional technical and organisational measures to ensure your data remains protected

You may request a copy of the safeguards in place by contacting us at contact@illumineads.com.

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements:

• Booking and session data (questionnaire responses, dossiers, execution materials) — retained for 2 years following the session, to support follow-up queries and continuity
• Financial and transactional records — retained for 7 years, as required for tax and statutory compliance under Indian law
• Marketing data — retained until you withdraw consent or request erasure, whichever comes first
• Website analytics — retained according to the data retention settings of our analytics providers, typically 14 months for Google Analytics by default
• Communications — emails and other correspondence are retained for up to 3 years from the date of last contact

At the end of the applicable retention period, we will securely delete or anonymise your data unless we are required by law to retain it for longer.

We take the security of your personal data seriously. We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, or disclosure, including:

• Encrypted transmission of data via HTTPS
• Access controls limiting who can view personal data
• Use of reputable service providers with their own security commitments
• Regular review of our security practices

No method of transmission or storage is entirely secure. While we work to protect your personal data, we cannot guarantee absolute security.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, you, in accordance with applicable law.

Our services are intended exclusively for business owners and are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without verified parental consent, we will take steps to delete that data promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this policy and, where appropriate, notify you by email or through a prominent notice on our website.

The policy in effect at the time you book a session governs how we handle the data we collect in connection with that session.

If you have any concerns about how we handle your personal data, please contact us first at contact@illumineads.com. We will do our best to resolve your concern promptly and to your satisfaction.

You also have the right to lodge a complaint with the relevant supervisory authority for your jurisdiction:

United Kingdom

Information Commissioner's Office (ICO) — ico.org.uk

European Union

The data protection authority of your country of residence. A list is maintained by the European Data Protection Board at edpb.europa.eu.

India

The Data Protection Board of India, established under the DPDP Act 2023.