Privacy Policy

Last updated: 11 August 2026

Who we are

Pelling Marketing by Design UK Ltd (“Pelling”, “we”, “us” or “our”) is the controller of the personal information described in this privacy notice. This notice explains how we collect, use, store and share information through our public website at designbypelling.co.uk and through our private Pelling Marketing Tools service.

Information we collect through our website

We may collect your name, email address, telephone number, postal address, website URL and any other information you choose to provide through our contact or lead forms or in correspondence with us.

When you visit our website, we may also collect technical and usage information through cookies and similar technologies, including information about your device, browser, interactions with the website and cookie preferences. The information collected depends on the cookies you accept and the technologies in use. For details, including how to change your choices, please read our Cookie Policy.

How we collect information

directly from you when you submit a form, contact us or engage us to provide services;
automatically through cookies and similar technologies when you use our website;
from service providers that help us operate our website and business; and
for Pelling Marketing Tools, from authorised Google users and the Google Ads API.

Why we use personal information and our lawful bases

We use personal information only where we have a lawful basis. Depending on the circumstances, we use it:

to respond to enquiries and take steps requested before entering into a contract;
to provide and administer our services and perform our contracts;
for our legitimate interests in operating, securing and improving our website and business, responding to users, maintaining records and planning and evaluating Pelling’s own advertising, provided those interests are not overridden by your rights;
with your consent, where consent is required, including for non-essential cookies or particular marketing communications; and
to comply with legal obligations and establish, exercise or defend legal claims.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that took place before consent was withdrawn. If you do not provide information required to respond to an enquiry or perform a contract, we may be unable to respond or provide the relevant service. Refusing non-essential cookies will not prevent basic use of the website, although some optional features may work differently.

Pelling Marketing Tools

Pelling Marketing Tools is a private internal service used only by authorised Pelling personnel for Pelling’s own advertising. It is not sold, licensed or made externally accessible, and it does not access or manage Google Ads accounts belonging to Pelling’s clients or other third parties.

Google Ads data we access

Depending on the task being performed, the service may access:

Google Ads customer identity and account properties;
campaign identity, status, channel and budget information;
daily impressions, clicks, cost, conversions and conversion values;
approved conversion-action performance;
search terms and associated performance;
Keyword Planning ideas and Audience Insights; and
API error and request-status information needed for safety and troubleshooting.

Google Ads operations

The service performs reporting, search-term, Keyword Planning and Audience Insights reads. After explicit approval from a current administrator, its write capability is restricted to creating or staging paused campaign budgets, Search campaigns, ad groups, targeting criteria, keywords, responsive search adverts and CampaignDrafts.

The application rejects enabling, promotion, removal and non-paused statuses. Publishing, enabling and CampaignDraft promotion remain manual actions performed by an authorised person in Google Ads. At the date of this notice, the installation’s database contains no Google Ads mutation-log records and therefore no evidence that it has executed a Google Ads write.

How we use Google Ads data

to confirm the intended Google Ads account and operating environment;
to research and plan Pelling’s advertising campaigns;
to prepare paused campaign structures, adverts, keywords and targeting for human review;
to import performance evidence, monitor results and make internal recommendations;
to enforce approval, safety, audit and quality-control requirements; and
to diagnose failed, unsupported, unauthorised or retryable Google Ads API requests.

Artificial intelligence

OpenAI is the currently configured artificial-intelligence provider. Selected Google Ads-derived performance evidence may be sent to OpenAI to assist with campaign strategy and advert or landing-page draft generation. This may include reporting dates, evidence freshness and provenance, impressions, clicks, cost, conversions, conversion value, cost per click, cost per acquisition and return on advertising spend, together with the approved campaign brief.

This AI processing path does not send Google credentials, raw Google Ads API responses or search-term text. Codex is used as the internal operating and control interface, so any Google Ads evidence deliberately presented to a Codex task should also be treated as reaching OpenAI. AI-generated material supports internal work and human review; it is not used to make decisions producing legal or similarly significant effects about website users.

Storage and retention

We retain website enquiry and service information only for as long as reasonably necessary for the purposes described in this notice, including providing services, maintaining appropriate business records and meeting legal, accounting, security and dispute-resolution requirements. When information is no longer required, we delete or anonymise it where reasonably practicable. Information in backups may remain isolated until the relevant backup is overwritten or deleted in the ordinary course.

Pelling Marketing Tools stores Google Ads account and campaign references, aggregated daily metrics, search-term review rows, research requests and responses, approvals, recommendations, change sets and mutation audit payloads in its private application database.

Keyword Planning research is eligible for reuse for 30 days and Audience Insights research for 7 days. Expiry prevents the evidence from being reused but does not delete the stored record.

There is currently no general automatic PPC data-retention or pruning schedule. Records may remain in the private database until they are deliberately removed through an authorised administrative or database process, or until Pelling determines they are no longer required for the purposes described in this notice.

Deletion and revoking Google access

The Pelling Marketing Tools interface does not provide a self-service deletion workflow for campaigns, metric snapshots, recommendations or mutation logs. OAuth revocation does not automatically delete associated stored records. Where deletion is appropriate, authorised administrators can arrange removal through a controlled administrative or database process; related records may also be removed through configured database relationships.

An authorised Google user can review or revoke the service’s access through the Google Account connections page. A revoked or expired refresh token causes Google Ads operations to fail closed. The application records only a sanitised revocation or invalid-grant diagnostic and does not store the token in that diagnostic.

Reauthorisation and refresh-token replacement are manual. The service does not currently provide an automated disconnect control, credential-clearing workflow or automatic deletion of stored records following revocation.

Sharing and service providers

We do not sell personal information or Google Ads data, and we do not use Google Ads data to provide advertising-management services to clients or other third parties. We may disclose information:

to suppliers and service providers that operate our website, systems and services on our behalf;
where necessary to provide a service or where you have asked or consented to the disclosure;
to comply with law, a court order or a lawful request, or to establish, exercise or defend legal rights;
to protect the rights, property, security or safety of Pelling, our users or others; and
in connection with a merger, reorganisation, financing, sale or transfer of all or part of our business, subject to appropriate confidentiality and data-protection measures.

Google OAuth and the Google Ads API process authentication and advertising data as necessary to connect to and use Google Ads. OpenAI processes the selected information described in the “Artificial intelligence” section. The application contains optional Slack notification functionality, but no Slack webhook is currently configured. OpenDesign transfer is a manual human process rather than an application integration.

If a service provider processes personal information outside the United Kingdom, we take steps designed to ensure that an appropriate transfer mechanism and safeguards are used where required by data-protection law.

Google API Services User Data Policy

Pelling’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Security and authorised access

We use reasonable technical and organisational measures intended to protect personal information. However, no method of internet transmission or electronic storage is completely secure, so we cannot guarantee absolute security.

Pelling Marketing Tools has no public registration route. Access requires a provisioned authenticated account and completed two-factor authentication. Provisioned users may view the internal panel; administrator status is required for approvals, research waivers, settings and Google Ads staging or apply operations.

Operational records are stored within Pelling-controlled private systems and protected by authentication, access controls and administrative safeguards. OAuth credentials, developer tokens and other secrets are handled separately and are not intended to appear in public content, screenshots, campaign records or routine logs.

Your data-protection rights

Depending on the circumstances and applicable law, you may have rights to:

request access to your personal information;
ask us to correct inaccurate or incomplete information;
ask us to erase your information;
ask us to restrict how we use your information;
object to certain processing, including processing based on legitimate interests and direct marketing;
receive certain information in a portable format;
withdraw consent at any time where we rely on consent; and
complain to the Information Commissioner’s Office.

You have the right to object at any time to our use of your personal information for direct marketing. You may also object to processing based on our legitimate interests; we will then stop unless we have compelling legitimate grounds to continue or the processing is needed for legal claims.

These rights are not absolute and may not apply in every case. We may need to verify your identity before responding. To exercise a right, contact us using the details below. You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint/. We would appreciate the opportunity to address your concern first.

Cookies and Do Not Track

You can manage cookies through our cookie-consent controls and your browser settings. Some browsers transmit “Do Not Track” signals, but there is no generally accepted standard for responding to them and our website does not currently respond to those signals. Please use our cookie controls to communicate your preferences. See our Cookie Policy for more information.

Children’s privacy

Our website and services are not directed at children, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe a child has provided personal information to us, please contact us so that we can investigate and, where appropriate, delete it.

Links to other websites

Our website may link to websites, apps or services operated by other organisations. We are not responsible for their privacy practices. We recommend reviewing their privacy information before providing personal information.

Contact us

Questions about this notice, Pelling Marketing Tools or a data request can be sent to:

Pelling Marketing by Design UK Ltd
Unit 11, Riverside Park Industrial Estate
Dogflud Way
Farnham, Surrey
GU9 7UG
United Kingdom

Email: hello@designbypelling.co.uk
Contact page: designbypelling.co.uk/contact

Changes to this notice

We may update this notice when our services, data practices or legal obligations change. The published page will show the date of the latest material update.