Privacy Policy

Effective 2026-08-01 · IHH Agency

This policy covers two things: (1) visitors to this website, and (2) the client account data we access in order to provide our services. We keep both simple, because we collect very little.

1. Website visitors

This site does not use cookies, does not run advertising trackers, and does not collect personal information from visitors. If you email us, we receive what you send and use it only to reply.

2. Client account data

To provide advertising management, analytics, and reporting, we access data from platforms our clients authorize — currently Shopify, Meta Ads, Google Ads, and Klaviyo — through each platform's official API.

• What we access: advertising performance data (campaigns, spend, delivery, and conversion metrics), store commerce data (orders, products, inventory), and email campaign performance data belonging to the authorizing client.
• Why: solely to provide monitoring, analysis, reporting, and — where a client has authorized it — management of that client's own advertising accounts. We do not use one client's data for any other client or any other purpose.
• Access model: our monitoring systems hold read-only API access, enforced in our code and verified by automated tests. Any operation that changes an account is performed only with explicit human approval and is logged.
• What we never do: sell data, share data with third parties (except the platform APIs the client authorized), use client data for advertising of our own, or use it to train machine-learning models.

3. Google API Services

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google Ads data is accessed only to provide reporting and account management to the client that owns the account.

4. Storage and retention

Client data is stored on access-controlled systems and retained only for the duration of the client engagement plus the period needed for historical reporting the client has requested. On termination of an engagement, a client may request deletion of their data and we will complete it within 30 days.

5. Contact

Questions about this policy or a data request: [email protected].

6. Changes

If this policy changes, the new version will be posted at this address with an updated effective date.