Privacy
Privacy notice
Last updated 17 August 2026
This is a one-person business, so this notice is short and specific rather than boilerplate. It covers what happens to information you send through this site and to anything I see inside your Google Ads account.
Who I am
I'm Andrew Nelson, a sole proprietor based in Toronto, Ontario, Canada, offering Google Ads audits and campaign management. I am the only person who handles your information. Contact: andrew@andrewnelson.dev.
What the audit request form collects
- Your name and your clinic's name
- Your email address, and your phone number if you choose to give one
- Your clinic's website
- The monthly ad spend range you select
- Anything you type into the optional notes field
- Whether you ticked the pattern-set consent box
I use it to reply to you, decide whether an audit is a sensible use of your time, and carry out the audit itself. I don't use it for anything else, I don't add you to a mailing list, and I don't sell, rent, or share it with anyone for marketing.
Your Google Ads account
If we proceed, you grant read-only access through Google's own account access mechanism. That means I can view your campaigns and reporting; I cannot change settings, spend money, or alter your access. You can revoke it at any moment from your Google Ads settings without telling me first.
I remove my own access once the walkthrough call is finished, unless you ask me to keep it. Working notes and the findings document I write for you are stored in my own account with a mainstream cloud provider, protected by two-factor authentication.
The anonymised pattern set
The five free audits come with one condition, and this section is the whole of it. If you ticked the consent box, I record findings from your audit as structured data points for comparison across accounts. A recorded data point looks like "broad match enabled with fewer than twenty negative keywords: yes".
I do not record, and will not publish:
- Your clinic's name, address, neighbourhood, or website
- Your Google Ads account ID, or any screenshot or export
- Spend, revenue, cost per click, conversion counts, or any other figure from your account
- Your keywords, search terms, ad copy, or creative assets
- Any personal information about you, your staff, or your patients
- Anything else that would let a reader work out which clinic a data point came from
What may be published is counts across the whole set — for example, "four of five accounts had no negative keyword list". Nothing is published until all five audits are complete, and nothing is published about a set of fewer than five accounts.
You can withdraw your consent at any point before publication by emailing me, and I will remove your account from the set. After publication the aggregate counts cannot be unpicked, but since they contain nothing identifying, nothing about you is exposed by them.
If you did not tick the consent box, none of this applies to your audit.
Patient information
I do not want and will not knowingly accept any patient health information. It is not needed for a Google Ads audit. Please don't include patient names, records, photographs, or any identifiable health details in the form, in email, or in anything you share with me. If I encounter it inside an account or a document, I will tell you and delete my copy.
How the form is transmitted
The site is served over HTTPS and hosted on Cloudflare Pages, which processes standard server and security logs including IP addresses. Form submissions are delivered to me by a third-party form-handling service, which processes them solely to pass them along. No submission data is stored in your browser beyond a single short-lived entry used to personalise the confirmation page, which is cleared as soon as that page loads.
Analytics and advertising cookies
This site is advertised on Google Ads. When advertising tags are enabled, Google Analytics and Google Ads set cookies to measure which ads lead to audit requests. These record page views and whether a form was submitted — not the contents of your submission. Google's handling of that data is covered by Google's privacy policy, and you can opt out of personalised advertising through Google's ad settings. Blocking cookies in your browser does not stop you using this site or sending the form.
There are no other trackers, no social media pixels, and no third-party fonts or scripts loaded from anywhere else.
How long I keep things
- Enquiries that don't become audits: deleted within twelve months.
- Audit records and findings documents: kept for two years, so I can pick a conversation back up, then deleted.
- Records I need for tax and accounting: kept as long as Canadian law requires.
- Anonymised pattern data: kept indefinitely, because after anonymisation it is no longer about you.
Your rights
Under Canada's Personal Information Protection and Electronic Documents Act you can ask me what personal information I hold about you, ask for a copy, ask me to correct it, ask me to delete it, and withdraw any consent you've given. Email andrew@andrewnelson.dev and I'll deal with it within thirty days at the outside — realistically within a couple of days, because there is only one of me.
If you're unhappy with how I've handled a request, you can complain to the Office of the Privacy Commissioner of Canada.
Changes to this notice
If I change how any of this works, I'll update this page and change the date at the top. If a change materially affects information you've already given me, I'll email you about it rather than relying on you to re-read this page.