Doctor Ads LTD — effective 24 April 2025
We provide services exclusively to businesses. By interacting with us you confirm that you do so for business purposes; we do not target or knowingly collect data from consumers.
1. Who We Are
Doctor Ads LTD is the data controller for personal data collected through this website (thedoctorads.com) and our connected platforms such as Kajabi, Stripe, Google, and Zoom.
Registered office: 128 City Road, London EC1V 2NX, United Kingdom.
Contact: moc.sdarotcodeht%40rogi
2. Scope
This Policy explains what data we collect, why we collect it, how we use it, the legal bases under the UK GDPR (and, where applicable, the EU GDPR), and the rights available to you.
3. Legal Bases for Processing
We rely on four lawful grounds:
1. Contract performance – to deliver training, consulting, support, and other services you request.
2. Legitimate interests – to secure our platform, analyse usage, and send B2B marketing messages where lawful.
3. Legal obligation – to keep tax and accounting records, detect fraud, and comply with regulations.
4. Consent – for optional newsletters, non-essential cookies, and any other processing not covered by the grounds above.
4. Data We Collect and Retention Periods
We collect only business-relevant data and store it for the periods below (unless a longer period is required by law or necessary to defend legal claims).
• Business identity data – company name, VAT or registration number, and the name of a contact person. Kept for six years after the last transaction.
• Professional contact details – work email, telephone number, and office address. Kept for six years after the last transaction.
• Payment information – last four digits of your card, billing address, invoices, and transaction IDs. Kept for ten years to satisfy tax and accounting requirements.
• Technical data – IP address, device type, browser version, and session identifiers. Kept for up to 26 months (or less where local law requires).
• Usage data – course progress, click logs, campaign metrics, and support history. Retained for the life of the account and deleted within 90 days of closure, unless an open dispute exists.
5. How We Use Your Data
1. To provide, maintain, and improve our services.
2. To personalise learning paths, recommendations, and advertising advice.
3. To process payments, issue invoices, and handle accounting.
4. To detect and prevent fraud, abuse, or unauthorised advertising practices.
5. To send service messages (transactional emails, security alerts, policy updates).
6. To send B2B marketing communications where permitted or with your consent.
6. Cookies and Similar Technologies
• Essential cookies keep the site functional and secure.
• Analytics cookies (Google Analytics 4 in consent mode) help us understand traffic and improve content.
• Advertising pixels (Google Ads, Meta) are loaded only after you grant consent via our cookie-consent banner.
You can withdraw cookie consent at any time through the banner or your browser settings.
7. Disclosures and International Transfers
We share data only with trusted processors—Kajabi, Google, Stripe, Meta, Zoom—and vetted freelancers who work under non-disclosure agreements.
When data leaves the UK or EEA, we use the UK Addendum to EU Standard Contractual Clauses (SCCs) or the International Data Transfer Agreement (IDTA), plus encryption and multi-factor authentication as supplementary safeguards.
8. Security Measures
We employ controls aligned with ISO 27001, including TLS 1.3 encryption, role-based access, multi-factor authentication, quarterly penetration tests, and a documented incident-response plan. Should a personal-data breach occur, we will notify the ICO and affected individuals within 72 hours where legally required.
9. Your Rights
Under the UK GDPR (and EU GDPR where it applies) you may:
• Request access to your data;
• Rectify inaccurate or incomplete data;
• Request erasure (“right to be forgotten”);
• Restrict processing in specific circumstances;
• Receive your data in a portable format;
• Object to processing based on legitimate interests or for direct marketing;
• Withdraw consent at any time.
To exercise any right, email .moc.sdarotcodeht%40rogi We respond within 30 days.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).
10. Automated Decision-Making
We use limited profiling for ad-audience segmentation and automated email triggers. No decision producing legal or similarly significant effects is made solely by automated means.
11. Children
Our services are not directed to anyone under 16. We do not knowingly process data relating to children.
12. Data Retention Review
We periodically review the necessity of retaining each data category and securely delete or anonymise data that is no longer required.
13. Changes to This Policy
We may update this Policy from time to time. If changes are substantial, we will email registered users and post a notice on the Site at least 14 days before the new version takes effect.
14. Contact
Doctor Ads LTD – Data Protection Lead
128 City Road, London EC1V 2NX, United Kingdom
Email: moc.sdarotcodeht%40rogi