Privacy Policy

1. Who we are

This privacy policy explains how Promtech Systems Ltd ("Promtech", "we", "us") collects and processes personal data in connection with our LinkedIn Ads attribution service (the "Service").

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Promtech is the data controller for the personal data described in this policy. Where we process the personal data of individuals in the European Economic Area, the EU GDPR also applies.

• Legal entity: Promtech Systems Ltd
• Company registration number: 13090657
• Registered address: Nt Accountancy, 43 Lynton Mead, London, United Kingdom, N20 8DG
• Contact: Niklas@promtech.systems

2. What the Service does

The Service connects to a customer's LinkedIn Ads account, with that customer's explicit authorisation, and retrieves advertising performance and engagement data. That data is used to help the customer understand which organisations have seen or engaged with their advertising, and to relate that activity to their own sales pipeline.

We access LinkedIn data only on behalf of a customer who has authorised us to do so, and only for the purposes described in this policy.

3. Data we collect

3.1 Data you provide when you authorise the Service

When you connect your LinkedIn Ads account, LinkedIn asks you to grant us permission. If you agree, we receive:

• Your LinkedIn member identifier
• Your name and, where provided, the email address associated with your LinkedIn account
• An OAuth access token that allows us to make requests to the LinkedIn Marketing API on your behalf
• The identifiers and names of the LinkedIn advertising accounts you have permission to access

We do not receive or store your LinkedIn password. Authentication is performed entirely on LinkedIn's own systems.

3.2 Advertising data we retrieve

Once authorised, we retrieve from the LinkedIn Marketing API:

• Campaign, ad set, and ad metadata (names, identifiers, status, objectives, dates)
• Aggregate performance metrics (impressions, clicks, spend, conversions, engagement counts)
• Organisation-level engagement data — that is, the names and LinkedIn identifiers of companies whose employees have viewed or engaged with advertising

Organisation-level engagement data identifies companies, not individuals. LinkedIn does not disclose to us which individual members viewed or engaged with an advertisement, and we make no attempt to determine this.

3.3 Data collected through use of our website

If we operate a website or customer interface, we may process basic technical data such as IP address and browser type for security and operational purposes. We do not use advertising or tracking cookies without your consent.

4. Why we process this data, and our legal basis

We do not use your data, or data retrieved from your LinkedIn account, to build advertising profiles, to train machine learning models for use outside your account, or for any purpose you have not been told about in this policy.

We do not sell personal data.

5. Sharing and disclosure

We share personal data only in these circumstances:

• Service providers. We use third-party infrastructure providers (for example, hosting and database services) that process data on our behalf under written data processing agreements. They may not use the data for their own purposes.
• At your direction. If you ask us to synchronise data to another system you control — for example your CRM — we transmit it to that system on your instruction.
• Legal requirements. Where we are required to disclose data by law, court order, or a competent authority.

We do not share data with other customers of the Service. Data retrieved from your LinkedIn account is kept logically separated from that of other customers.

6. International transfers

Where personal data is transferred outside the United Kingdom, we rely on UK adequacy regulations or, where none apply, on the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the European Commission's Standard Contractual Clauses, together with any additional safeguards required.

Where personal data originating in the European Economic Area is transferred outside it, we rely on an adequacy decision by the European Commission or on Standard Contractual Clauses. The United Kingdom is the subject of an EU adequacy decision.

Details of the providers we use and the relevant safeguards are available on request.

7. How long we keep data

OAuth tokens are retained for as long as your connection is active, and deleted when you disconnect or when the token expires and is not renewed.

Advertising and engagement data is retained for the duration of your use of the Service and for up to 12 months afterwards, unless you ask us to delete it sooner.

Billing and accounting records are retained for as long as required by applicable law.

You can ask us to delete your data at any time, and we will do so unless we are legally required to keep it.

8. Disconnecting and revoking access

You can revoke our access to your LinkedIn account at any time, without contacting us, from your LinkedIn account settings under Settings & Privacy → Data privacy → Permitted services. Revoking access stops any further retrieval of data immediately.

Revoking access does not by itself delete data we have already retrieved. To have that deleted, contact us at Niklas@promtech.systems.

9. Your rights

Under the UK GDPR you have the right to:

• Request access to the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted
• Restrict or object to our processing of your data
• Receive your data in a portable format
• Withdraw consent, where processing is based on consent

To exercise any of these rights, contact us at Niklas@promtech.systems. We will respond within one month.

If you are not satisfied with our response, you have the right to lodge a complaint with a data protection authority. Our lead supervisory authority is the UK Information Commissioner's Office (ICO) — www.ico.org.uk. If you are in the European Economic Area, you may also lodge a complaint with the supervisory authority in your country of residence.

10. Security

We protect access credentials and retrieved data using encryption in transit and at rest, access controls limiting who within our organisation can access customer data, and regular review of our security practices. No system is completely secure, but we take these obligations seriously and will notify you and the relevant supervisory authority of any personal data breach as required by law.

11. Compliance with LinkedIn's terms

Our use of LinkedIn data is governed by the LinkedIn API Terms of Use and the LinkedIn Marketing API programme terms, in addition to this policy. We use LinkedIn data only to provide the Service to the customer who authorised access, we do not combine it with data from other customers, and we delete it on request or when a customer's authorisation ends.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify affected customers directly. The date at the top of this page shows when it was last revised.