Privacy and Cookie Policy

Effective date: October 20, 2026.

This Policy explains what personal data we collect when you visit the website ads-concept.com, the purposes for which we use it, with whom we share it, how long we retain it, and how you can manage your data and cookies.

We process personal data in accordance with the Law of Ukraine “On Personal Data Protection” and adhere to the principles of the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679): lawfulness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality.

1. Who is responsible for processing your data

The owner of the personal data (the “controller” in GDPR terminology) is the individual entrepreneur (FOP) / company AdsConcept (hereinafter “AdsConcept”, “we”, “us”). We provide the controller’s full registration details upon request.

For any questions regarding the processing of personal data, please write to hello@adsconcept.top.

2. What data we collect

2.1. Data you provide to us

When you complete a form on the website (for example, a request for an audit or a consultation), we receive:

your name;
your phone number or messenger contact;
your email address;
your website address;
the text of your message and any other information you choose to provide.

Please do not submit passwords, payment details, or information about your health, religious or political beliefs, or other special categories of data through the form. We do not need them.

If you write to us by email or via a messenger, we process the data contained in your message.

2.2. Data collected automatically

When you visit the website, we and our service providers may automatically receive technical data:

your IP address and the approximate location derived from it (country, city);
device type, operating system, browser, language and screen resolution;
the addresses of the pages viewed, the time and duration of your visit, and the referral source (including UTM parameters and the Google Ads click identifier);
on-page actions: scrolling, clicks, navigation and form submissions;
identifiers stored in cookies and similar technologies (see Section 5).

Analytics and marketing data are collected only with your consent. Without your consent, only the technologies necessary for the operation and security of the website are active.

2.3. What we do not do

We do not sell or rent out your personal data, and we do not use it for decisions that produce legal effects for you and are made solely by automated means.

3. Purposes and legal bases for processing

Purpose	Data	Legal basis
Responding to your request, preparing a proposal or audit, conducting a consultation	Form data, correspondence	Your consent; steps taken at your request prior to entering into a contract
Concluding and performing a service agreement	Contact details, correspondence, registration and payment details	Conclusion and performance of a legal transaction
Ensuring the operation, speed and security of the website and protecting it against bots and attacks	Technical data, IP address, necessary cookies	Legitimate interest of the controller
Analyzing traffic and on-site behavior and improving the website’s usability	Technical and behavioral data, analytics cookies	Your consent
Measuring advertising performance and showing ads to people who have previously visited the website (remarketing)	Technical data, marketing cookies, click identifier	Your consent
Complying with legal requirements (accounting, taxation, requests from public authorities)	Contract and payment data	Performance of an obligation imposed by law

You may withdraw your consent at any time. This does not affect the lawfulness of processing carried out prior to its withdrawal.

We use vetted services to operate the website. Some of them process data on our behalf (processors), while others act as independent controllers under their own privacy policies (for example, Google with respect to ad personalization).

Google Analytics 4

Google’s web analytics service. It helps us understand how visitors find and use the website: which pages they view, where they come from, and whether they submit forms. It operates only after you consent to analytics cookies. Google Privacy Policy · How Google uses data from partner sites.

Google Tag Manager

A tag management tool: it loads other scripts on the website (Google Analytics 4, Google Ads, Microsoft Clarity) in accordance with your cookie choices. Google Tag Manager itself does not create visitor profiles, but it processes technical request data, including your IP address, in order to deliver those scripts.

Google Ads

Google’s advertising platform. We use it for:

conversion tracking — to understand which ads lead to inquiries;
remarketing — to show our ads to people who have previously visited the website;
enhanced conversions — if you have consented to marketing cookies, your email address or phone number may be transmitted to Google in hashed form (using the SHA-256 algorithm) when you submit a form. This transformation is one-way: Google does not receive this data in plain text and uses it solely for more accurate conversion measurement.

You can manage Google ad personalization in Google My Ad Center.

Microsoft Clarity

Microsoft’s visitor behavior analytics service. It creates click and scroll heatmaps and session recordings — replays of how a visitor moves through a page. Recordings do not contain audio or images from your device, and the contents of form fields are masked. It operates only after you consent to analytics cookies. Microsoft Privacy Statement.

EmailJS

The service through which data from forms on the website is delivered to our email inbox. It receives only the data you enter in the form, together with technical request data. EmailJS Privacy Policy.

Cloudflare

Hosting and content delivery network (CDN). All requests to the website pass through Cloudflare’s infrastructure; accordingly, the service processes technical data (IP address, browser data) in order to deliver pages and to protect against attacks and bots. Cloudflare Privacy Policy.

Other recipients

We may also share data with:

the email service provider through which we correspond with you;
accounting and legal advisers, to the extent necessary to perform the contract and comply with legal requirements;
public authorities, solely on the basis of a lawful request and to the extent prescribed by law.

5. Cookies and similar technologies

5.1. What cookies are

Cookies are small text files that a website stores in your browser. Browser local storage (localStorage) and scripts that send data to analytics services work in a similar way. They help the website remember your settings, understand how it is used, and measure advertising performance. Hereinafter, for convenience, we refer to all of these technologies as “cookies”.

Category	Purpose	Examples	Consent required?
Necessary	Ensure the operation and security of the website and remember your cookie choices and interface settings	Record of your consent; `ac-mode`, `ac-mark`, `ac-fx`, `ac-pattern`, `ac-hero`, `ac-media` (interface settings); `__cf_bm` (bot protection, Cloudflare)	No — without them, the website will not function properly
Analytics	Help us understand how visitors use the website, which pages are useful, and where difficulties arise	`_ga`, `_ga_<ID>` (Google Analytics 4); `_clck`, `_clsk` (Microsoft Clarity)	Yes
Marketing	Make it possible to measure conversions from advertising and to show ads to people who have previously visited the website	`_gcl_au`, `_gcl_aw` (Google Ads); Google cookies on the doubleclick.net domain	Yes

5.3. List of main cookies

Name	Provider	Category	Purpose	Duration
Consent record	AdsConcept	Necessary	Stores your choice regarding cookie categories	Up to 12 months
`ac-mode`, `ac-mark`, `ac-fx`, `ac-pattern`, `ac-hero`, `ac-media`	AdsConcept	Necessary	Remember your interface settings: light or dark mode, the highlighted-word look, the hero background and pattern, the home page animation and the illustration style (localStorage)	Until browser data is cleared
`__cf_bm`	Cloudflare	Necessary	Distinguishes humans from bots and protects the website	30 minutes
`_ga`	Google	Analytics	Distinguishes unique visitors	Up to 2 years
`_ga_<ID>`	Google	Analytics	Stores session state in Google Analytics 4	Up to 2 years
`_clck`	Microsoft	Analytics	Stores the Clarity visitor identifier	1 year
`_clsk`	Microsoft	Analytics	Combines page views into a single Clarity session	1 day
`_gcl_au`	Google	Marketing	Measures conversions from Google Ads advertising	90 days
`_gcl_aw`	Google	Marketing	Stores data about a click on a Google Ads ad	90 days
`IDE`	Google (doubleclick.net)	Marketing	Remarketing and measurement of advertising performance	In accordance with Google’s policy

Providers may change the names and durations of their cookies. You can view the current list of cookies set on your device in your browser settings.

The website uses Google Consent Mode v2. Until you make a choice, all optional consent types — analytics_storage, ad_storage, ad_user_data and ad_personalization — are set to “denied”. In this state, Google tags neither set nor read analytics and advertising cookies.

Depending on the configuration, Google tags may send depersonalized cookieless signals (for example, about a page view or a form submission). These signals contain no identifiers by which you could be recognized, and Google uses them for aggregated conversion modeling.

As soon as you consent to a particular category, the corresponding tags begin to operate in full. If you withdraw your consent, they revert to the “denied” state.

Cookie banner. On your first visit, the website offers you the option to accept all cookies, reject optional cookies, or select individual categories.
Cookie settings. You can change your decision at any time via the “Cookie settings” link at the bottom (in the footer) of every page of the website.
Browser settings. You can delete existing cookies or block them. Please note that blocking necessary cookies may impair certain features of the website.
Google tools. You can also install the Google Analytics opt-out browser add-on and manage ad personalization in Google My Ad Center.

6. International data transfers

Some of our service providers (Google, Microsoft, Cloudflare, EmailJS) process data on servers outside Ukraine, including in European Union countries and the United States.

We select providers that ensure adequate protection of personal data, in particular by means of standard contractual clauses approved by the European Commission, participation in the EU-U.S. Data Privacy Framework, or other recognized mechanisms. Data is transferred to countries that do not ensure an adequate level of protection only on the grounds provided for by law, including with your consent.

7. Retention periods

We retain data for no longer than is necessary for the purpose for which it was collected, or than is required by law.

Data	Retention period
Form submissions and correspondence where no contract has been concluded	Up to 3 years from the last contact, after which the data is deleted
Client data related to a contract	For the term of the contract and the periods prescribed by accounting and tax legislation
Google Analytics 4 user-level and event-level data	Up to 14 months
Microsoft Clarity session recordings and heatmaps	In accordance with Microsoft Clarity’s standard retention periods (session recordings — typically up to 30 days)
Google Ads remarketing lists	No more than 540 days from the last visit to the website
Cloudflare technical logs	For a short period determined by Cloudflare’s policy
Cookies	In accordance with the durations set out in Section 5.3, or until you delete them

If you withdraw your consent or ask us to delete your data, we will do so unless the law requires us to retain it for longer.

8. Your rights

Pursuant to Article 8 of the Law of Ukraine “On Personal Data Protection” and in line with the principles of the GDPR, you have the right to:

know the sources from which your data is collected, where it is located, the purpose of its processing, and the identity of the controller and processors;
access your personal data and obtain information about the third parties to which it is transferred;
request rectification of inaccurate or incomplete data;
request erasure of your data if it is processed unlawfully, the purpose of processing has been achieved, or you have withdrawn your consent;
restrict processing in cases provided for by law;
object to processing based on our legitimate interest;
withdraw your consent to processing at any time;
receive your data in a structured, machine-readable format and transmit it to another controller (the right to data portability);
know the mechanism of automated processing and be protected against an automated decision that produces legal effects for you;
lodge a complaint with the competent authority or with a court.

How to exercise your rights

Send a request to hello@adsconcept.top, specifying which right you wish to exercise. To protect your data against access by unauthorized persons, we may ask you to confirm that the request is being sent by you.

We respond no later than 30 calendar days from the date on which we receive the request. Requests are handled free of charge.

Where to lodge a complaint

If you believe that we are violating your rights, we ask that you contact us first — we will try to resolve the matter promptly. You also have the right to apply to the Ukrainian Parliament Commissioner for Human Rights, who oversees compliance with personal data protection legislation (ombudsman.gov.ua), or to a court. If you are located in the European Union, you may contact the data protection supervisory authority in your country.

9. How we protect data

We take organizational and technical measures to protect data against loss, unauthorized access, alteration or disclosure:

the website operates over a secure HTTPS connection;
access to data is granted only to those who need it for their work;
service accounts are protected by strong passwords and two-factor authentication;
we collect the minimum amount of data necessary for the purpose of processing;
the contents of form fields are masked in Microsoft Clarity recordings.

No method of transmitting data over the internet is completely secure. In the event of an incident that poses a risk to your rights, we will notify you and the competent authority in the manner prescribed by law.

10. Children

The website is intended for business representatives and is not directed at children. We do not knowingly collect personal data from persons under the age of 16. If you believe that a child has provided us with their data, please write to hello@adsconcept.top and we will delete it.

11. Links to other websites

The website may contain links to third-party resources. We are not responsible for their privacy practices, and we therefore recommend that you review the policies of those websites before providing them with your data.

12. Changes to this Policy

We may update this Policy when our services, applicable legislation or data processing methods change. The current version is always available on this page, and its effective date is indicated at the beginning of the document. If the changes are material — for example, where new processing purposes or new cookie categories are introduced — we will notify you of this on the website and, where necessary, request your consent again.

13. Contact

For any questions regarding this Policy and the processing of your personal data, please contact us at hello@adsconcept.top.