Privacy policy

What we collect

When you submit our contact form, we collect the information you choose to share: your name, email address, firm name, the case management system you use, your monthly marketing spend range, and any details you include in your message. We collect this only so we can respond to your enquiry and scope the work.

What Google user data our application accesses

When you authorise Link & Impulse to connect to your Google Ads account via Google OAuth, our application requests the following OAuth scope:

• https://www.googleapis.com/auth/adwords — read and manage your Google Ads campaigns and reports you explicitly authorise.

Using that scope, our application accesses the following Google user data:

• Google account identifiers used for authentication and authorisation (such as your name, email address, and OAuth tokens);
• Google Ads account data you authorise, including customer IDs, account hierarchy, billing setup metadata, and user access settings;
• Campaign structure and configuration, including campaigns, ad groups, ads, keywords, audiences, budgets, bidding strategies, and settings;
• Performance and reporting data, including impressions, clicks, cost, conversions, conversion actions, and related metrics and segments.

We access only the Google Ads accounts, scopes, and date ranges you explicitly authorise. We do not access your Gmail, Google Drive, or any other Google services beyond the Google Ads API scopes you approve during OAuth consent.

How we use it

We use the information you submit to reply to you, arrange a call if needed, and prepare a scope and price for the tracking fix or the monthly report. We do not sell, rent, or trade your information with any third party.

How our application uses Google user data

We use Google user data solely to provide and improve the user-facing features you requested from Link & Impulse, specifically:

• Connecting to your Google Ads accounts to review how your conversions and sources are recorded;
• Extracting campaign structure and performance data to build the pipelines and reporting tables behind your monthly report, in your dedicated data warehouse;
• Maintaining, troubleshooting, and improving those pipelines and reports for the duration of your engagement;
• Communicating with you about the connection status, errors, and authorisation renewals.

We will not sell your data to third parties, and we use Google user data only to provide you with the services you requested, such as the tracking fix and the monthly report. We do not use Google user data to serve, personalise, retarget, or measure advertising to you or any other end user.

Form processing and booking

Our contact form is powered by Formspree, a third-party form handler. When you submit the form, your data is transmitted to Formspree's servers and forwarded to our email. Formspree's privacy policy applies to the transmission and short-term storage of that submission.

After you submit the form, you can book a call through Cal.com, a third-party scheduling service embedded on the confirmation page. The details you enter there, such as your name, email address and chosen time, are processed by Cal.com under its own privacy policy and shared with us so we can hold the call. Booking is optional; you can arrange the call by email instead.

Client data during an engagement

If you become a client, we will need read access to your marketing platforms and data sources to produce your monthly report. The tracking fix is different: it needs write access to the systems listed in its written scope (such as your tag manager, ad accounts, call tracking, website forms and case management system), and we remove that access at handover. The tracking fix sets your systems up to record where each intake came from. It does not send claimant names, case details or free-text form contents to advertising platforms; where enhanced conversions are switched on, your systems send Google a hashed email address and phone number. We access these systems only with your written authorisation and only for the purpose of the engagement. Your warehouse lives in its own dedicated database, which we host and manage for the duration of the engagement. If the engagement ends, we transfer the database to you with its full history, and delete our copies of your source data unless you ask us to keep them.

With whom we share, transfer, or disclose Google user data

We do not transfer or disclose your information to third parties for purposes other than the ones described in this policy. Specifically for Google user data:

• We do not sell, rent, or trade Google user data. We do not share it with data brokers, information resellers, advertisers, or credit agencies.
• We share Google user data only with service providers strictly necessary to provide our services (for example, our managed database / hosting provider that stores your dedicated warehouse), bound by confidentiality and data-processing obligations, and only to the extent needed to operate the service you requested.
• We may disclose data if required by law, court order, or to protect the rights, safety, and security of Link & Impulse, our clients, or others.
• We will not share Google user data with any other third party without your explicit consent, except as described above.

Limited use and prohibited purposes

Link & Impulse complies with the Google API Services User Data Policy, including the Limited Use requirements. We limit our use of Google user data to providing and improving the user-facing features of our application. We prohibit any other use, including:

• Targeted advertising, user advertisements, personalised advertisements, retargeted advertisements, or interest-based advertisements;
• Selling to data brokers, providing to information resellers, or creating independent databases from Google user data;
• Determining credit-worthiness or lending purposes;
• Transferring Google user data to third parties for any of the above purposes.

Google user data, including Google Ads API data and any data derived from Google Workspace APIs where applicable, is not used to develop, improve, or train generalized or non-personalized artificial intelligence (AI) and/or machine learning (ML) models.

How we protect Google user data

Security procedures are in place to protect the confidentiality of your data. Google user data is stored in your dedicated warehouse database and in our access-controlled systems used to operate your pipelines. Specifically:

• We use encryption to protect your information in transit (TLS/HTTPS) and at rest in our managed database and warehouse storage;
• OAuth tokens and credentials are stored as secrets with restricted access, never in source code, and rotated or revoked when an engagement ends or upon request;
• Access follows least-privilege principles: only team members who need access to deliver your engagement can access your connected accounts and warehouse;
• We use secure, access-controlled hosting with logging and monitoring, and we revoke third-party and contractor access when it is no longer needed.

Analytics and tracking

We measure this site with PostHog, served first-party from our own domain (linkandimpulse.com/ingest) so requests never go to a third-party tracker domain. We start it only for visitors we locate, from their IP address, in the United States (outside California) or Canada; for everyone else it never starts and nothing is recorded. It records page views, clicks and session recordings, with anything typed into a form masked, and it does not follow you across other sites. We do not use advertising trackers. To recognise a returning browser, PostHog stores a cookie and a small entry in your browser’s local storage. You can clear or block both in your browser settings, and the site works the same without them.

Visitors stay anonymous unless they submit our contact form. When you do, we link your earlier visits to this site to the email address you gave, along with your name, firm and the details you chose to share, so we can prepare for the call. Contact us at hello@linkandimpulse.com to opt out or request deletion.

Data retention and deletion

We store your personal information for a period of time that is consistent with our business purposes. We will retain your personal information for the length of time needed to fulfill the purposes outlined in this privacy policy unless a longer retention period is required or permitted by law.

• Contact-form submissions and email correspondence: retained as business records for up to 24 months, then deleted or archived on request.
• Google Ads API data and OAuth tokens: retained only for the duration of your active engagement and to operate your pipelines and warehouse. When the data retention period expires for a given type of data, we will delete or destroy it.
• End of engagement: we transfer your warehouse to you with its full history, then delete our copies of your source data and revoke OAuth grants within 90 days, unless you ask us in writing to keep them.
• Revoking access: you can revoke Link & Impulse's access at any time from your Google Account permissions page. Revocation stops future collection; previously stored copies are deleted per the schedule above.

You may request deletion of your data at any time by emailing hello@linkandimpulse.com. We will confirm receipt and remove it from our active systems within 30 days, and from backups within 90 days, unless retention is required by law.

Your rights

Depending on where you live, you may have the right to request access to the data we hold about you, ask for corrections, request deletion, or withdraw consent for further contact. To exercise any of these rights, email us at hello@linkandimpulse.com.

Because we operate from the United Kingdom, UK data protection law (UK GDPR) applies to the personal information we hold, whether you are in the UK or the United States. Our lawful basis for handling a contact-form submission is our legitimate interest in replying to an enquiry you sent us; for an engagement, it is the contract with you. Your information may be processed outside the UK by the service providers named above (Formspree and Cal.com, and our analytics and hosting providers), which are US or EU based. If you are in the UK and are unhappy with how we handled a request, you can complain to the Information Commissioner’s Office at ico.org.uk.

Changes to this policy

This policy is current as of the “Last updated” date above. If we change how Link & Impulse uses Google user data or other personal information, we will update this page and revise the date. For material changes, we will notify active clients by email before the changes take effect. Continued use of our services after an update constitutes acceptance of the revised policy.

Contact

Link & Impulse — Data controller for this site and application.
Website: linkandimpulse.com
Privacy contact: hello@linkandimpulse.com. Questions about this policy or your data? Email us and we will respond within a reasonable timeframe.