Shiba & Associates
Privacy Policy
Shiba & Associates ("we," "us," or "our") is a digital marketing and sales optimization agency that manages Google Ads campaigns and related advertising services on behalf of clients. This Privacy Policy explains how we collect, use, share, and protect information in connection with our services, including our use of the Google Ads API.
1. Information We Collect
We collect and process information necessary to provide advertising management services to our clients. This includes:
- Google Ads Account Data: Campaign performance metrics, keyword data, bid and budget information, impression and click data, conversion data, and account structure data accessed via the Google Ads API.
- Client Account Information: Business name, contact information, billing details, and advertising account identifiers provided directly by clients.
- Website and Analytics Data: Aggregated traffic and conversion data shared by clients for reporting and optimization purposes.
- Communications: Email correspondence, meeting notes, and documentation exchanged in the course of our engagement.
We do not collect personal data from end users of our clients' websites or advertisements. We do not operate consumer-facing platforms.
2. Google Ads API Usage
We access the Google Ads API solely for the purpose of managing and optimizing paid search and shopping campaigns on behalf of our clients. Our use of the Google Ads API is limited to:
- Retrieving campaign, ad group, keyword, and performance data for internal reporting and analysis.
- Creating, updating, and pausing campaigns, ad groups, ads, and keywords as directed by our clients.
- Managing campaign budgets and bidding strategies.
- Accessing search term reports and other performance data for optimization decisions.
- Generating client reports and performance summaries.
All data accessed via the Google Ads API is used exclusively for providing services to the account holder associated with each account. We do not use API data for any purpose unrelated to the management of the specific client account from which it was retrieved.
Our use of Google Ads API data complies with Google's API Terms of Service and all applicable Google policies.
3. How We Use Information
We use the information we collect to:
- Manage and optimize Google Ads campaigns on behalf of clients.
- Generate performance reports and recommendations.
- Communicate with clients regarding campaign status and strategy.
- Fulfill contractual obligations under our service agreements.
- Improve our internal processes and tooling.
4. Data Sharing
We do not sell, rent, or trade any client or account data to third parties. Information may be shared only in the following limited circumstances:
- With the Client: All campaign data and reports are shared with the client whose account they belong to.
- Service Providers: We may use third-party tools (e.g., analytics platforms, project management software) that process data on our behalf under confidentiality obligations. These providers are not permitted to use data for their own purposes.
- Legal Requirements: We may disclose information if required to do so by law or in response to valid legal process.
5. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect the information we process. These measures include:
- Secure storage of API credentials and OAuth tokens using industry-standard secrets management practices.
- Restricted access to client account data on a need-to-know basis.
- Use of encrypted connections (HTTPS/TLS) for all data transmission.
- Regular review of access controls and security practices.
While we take security seriously, no method of transmission or storage is 100% secure. We encourage clients to notify us immediately of any suspected unauthorized access.
6. Data Retention
We retain client data for the duration of the service engagement and for a period of up to three (3) years following termination, unless a shorter or longer period is required by law or agreed upon in the service agreement. Google Ads API data cached for reporting purposes is retained no longer than necessary for the relevant reporting cycle.
Upon request, we will delete or return client data within a reasonable timeframe following termination of services.
7. Client Rights
Our clients have the right to:
- Access: Request a summary of the data we hold relating to their account and engagement.
- Correction: Request correction of inaccurate information.
- Deletion: Request deletion of their data, subject to legal or contractual retention obligations.
- Portability: Request a copy of their data in a portable format.
- Withdrawal of Consent: Withdraw consent for data processing where consent is the legal basis, which may affect our ability to provide services.
To exercise these rights, contact us at shiba@2.0heads.com.
8. Third-Party Services
Our services involve integration with Google LLC platforms including Google Ads and the Google Ads API. Use of these platforms is governed by Google's Privacy Policy. We are not responsible for Google's data practices.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify active clients of material changes via email. Continued use of our services following notice of changes constitutes acceptance of the updated policy. The current version is always available at 2.0heads.com/privacy-policy.html.
10. Contact
Questions about this Privacy Policy or our data practices should be directed to:
David Shiba
Shiba & Associates
shiba@2.0heads.com
347-766-2034