Privacy Policy

Last updated: 2 June 2026

theADmarket Pty Ltd ("theADmarket", "we", "us" or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose and safeguard information you provide to us, or that we collect on behalf of the businesses we work with, when you interact with theADmarket, our websites (including www.theadmarket.com), our applications, our advertising activity on platforms such as Meta (Facebook and Instagram), Google, LinkedIn and TikTok, and any forms, landing pages or campaigns we operate.

This Policy applies to:

Visitors to our website and any websites or landing pages we host on behalf of clients.
People who submit an enquiry, lead form, quote request or contact form connected to a theADmarket campaign.
People whose information is uploaded to advertising platforms by theADmarket as part of a client's lawful direct marketing activity (for example, customer-match or custom audience lists).
Clients and prospective clients of theADmarket.

If you do not agree with this Policy, please do not use our website, submit information through our forms, or engage our services.

1. Who we are

theADmarket is a growth strategy and advertising business based in Australia. We help startups, small-to-medium businesses, and established companies grow through paid advertising, AI-powered automation, sales enablement and revenue diversification. We operate ad campaigns, lead generation funnels, CRM systems and reporting tools on behalf of our clients, and we act either as a data controller (for our own clients and prospects) or as a data processor / service provider (for personal information we handle on behalf of a client). Where we are acting on behalf of a client, that client's own privacy policy also applies and prevails on questions about why the data is collected and how long it is kept.

Our contact details are at the end of this Policy.

2. The information we collect

We only collect information that is reasonably necessary for our business activities. Depending on how you interact with us, we may collect:

2.1 Information you provide directly

Identity and contact details such as your name, email address, phone number, postcode or business address.
Information about your enquiry, such as the service or product you are interested in, your stated budget, timing and any free-text notes you include on a form.
Account and login information if you create an account on a service we operate.
Records of correspondence if you contact us by email, phone, SMS, WhatsApp or social media direct message.
Payment information for clients, processed via third-party payment processors. We do not store full card numbers on our own systems.

2.2 Information collected automatically when you visit our sites or click our ads

Device and browser information (device type, operating system, browser type and version, screen size, language).
Network information (IP address, approximate geographic location derived from IP, internet service provider).
Behavioural information (pages viewed, time on page, scroll depth, clicks, referring URL, exit pages, search terms used on our site).
Cookie and similar identifier data (see Section 6 below).

2.3 Information collected via advertising and analytics platforms

We use advertising and analytics tools provided by third parties, including the Meta Pixel and Conversions API (for Facebook and Instagram), Google Analytics 4, Google Ads conversion tracking, LinkedIn Insight Tag, TikTok Pixel, HubSpot and similar tools. These tools may collect information about your interaction with our or our clients' websites and advertising, including events such as page views, button clicks, form submissions, scroll behaviour and purchase completion. Some of this information is hashed (one-way encrypted) before being sent to the advertising platform.

2.4 Information uploaded to advertising platforms (customer match / custom audiences)

Where a client has lawfully collected customer details and has obtained the consents required for direct marketing, theADmarket may, on that client's behalf, upload hashed customer information (typically email addresses, phone numbers and names, hashed with SHA-256) to platforms such as Meta and Google so the client can show advertising to existing customers or build lookalike audiences. We do this in accordance with each platform's customer data terms (including Meta's Custom Audiences Terms) and the Australian Privacy Act, the GDPR and the UK GDPR where applicable.

3. How we use your information

We use the information we collect for the following purposes:

To respond to enquiries. If you submit a form or contact us, we use your information to reply and follow up.
To deliver our services. To run ad campaigns, build audiences, generate reports, manage CRM records and pass leads to our clients.
For analytics and improvement. To understand how our website and campaigns perform and to improve them.
For direct marketing. To send you relevant information about our services or, where you have requested it, a client's services. You can opt out at any time.
For retargeting and lookalike advertising. To show you relevant ads on other platforms (Meta, Google, LinkedIn, TikTok) based on your interaction with our or our clients' websites.
To comply with the law. To meet our obligations under the Australian Privacy Act 1988, the Spam Act 2003, the GDPR, the UK GDPR and other applicable laws, and to respond to lawful requests by public authorities.
To protect our business. To prevent fraud, abuse, unauthorised access and security incidents.

4. Legal basis for processing (GDPR / UK GDPR)

If you are located in the European Economic Area or the United Kingdom, our legal basis for processing your personal information will be one or more of the following:

Consent. Where you have given us clear consent, for example when you tick a marketing opt-in box or submit a lead form that includes a consent statement.
Contract. Where processing is necessary for a contract you have entered into with us or a client.
Legitimate interests. Where it is in our or our client's legitimate interests to process the information, balanced against your rights. For example, analysing how our website is used so we can improve it.
Legal obligation. Where we need to comply with a legal duty.

5. Who we share your information with

We share personal information only where it is necessary to provide our services or where we are required by law. The categories of recipient are:

The relevant client. If you submit an enquiry through a campaign or form we operate for a client, your information is passed to that client so they can contact you.
Advertising and marketing platforms. Meta Platforms Ireland Ltd / Meta Platforms Inc, Google LLC, LinkedIn Corporation, TikTok Ltd, Microsoft (Bing Ads), Snap Inc and similar advertising providers.
Analytics, automation and CRM providers. HubSpot, Google Analytics, Mixpanel, Hotjar, Zapier, Make, Slack, Notion, ClickUp, Monday, ActiveCampaign, Mailchimp, SendGrid, Twilio, ElevenLabs and similar providers we use to deliver services to clients.
Hosting and infrastructure providers. Amazon Web Services, Cloudflare, Shopify, WordPress, Vercel, GitHub and similar providers.
Payment processors. Stripe, GoCardless, PayPal and similar (only for paying clients).
Professional advisors. Our lawyers, accountants, auditors and insurers where reasonably required.
Authorities. Where required by law, regulation, court order, or to protect our rights or the rights of others.
Acquirers. If theADmarket is involved in a merger, acquisition or sale of assets, personal information may be transferred as part of that transaction.

We do not sell your personal information.

6. Cookies and similar technologies

Our website and the websites we operate for clients use cookies, pixels, local storage and similar tracking technologies. Cookies are small text files placed on your device to help the site work and to gather information about your visit.

We use:

Strictly necessary cookies required for the site to function (for example, to keep you signed in or to remember items in a cart).
Analytics cookies such as Google Analytics and Meta Pixel, to understand how the site is used.
Advertising cookies placed by Meta, Google, LinkedIn, TikTok and other ad networks to deliver and measure ads.
Preference cookies to remember settings such as language or region.

You can control cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies or be notified when cookies are set. Note that disabling cookies may affect site functionality. Where applicable, our website also presents a cookie consent banner that allows you to accept or reject non-essential cookies.

7. Meta Pixel, Conversions API and Custom Audiences

Because we are an advertising business, our use of Meta's tools deserves a specific call-out.

We use the Meta Pixel and Meta Conversions API on our own website and on websites we operate for clients. These tools send event information (such as page views, button clicks, lead form submissions and purchases) to Meta. The event information is associated with a Meta user identifier so Meta can match it to a Facebook or Instagram account where one exists.
We use Meta Custom Audiences to show ads to existing customers, prospects or website visitors. Where we upload customer information to build a Custom Audience, that information is hashed (one-way encrypted) on our side before transmission.
We use Meta Lookalike Audiences to find new prospective customers who share characteristics with an existing customer list.
Meta is a joint controller for the data collected via the Pixel and Custom Audiences. Meta's own privacy policy is available at facebook.com/policy.php.
You can manage how Meta uses your information for advertising at accountscenter.facebook.com/ad_preferences.

8. International transfers

theADmarket is based in Australia. Many of the third-party providers we work with are located in the United States, the European Union, the United Kingdom or other jurisdictions. When we transfer personal information outside the country in which it was collected, we take reasonable steps to ensure it is protected to a standard substantially similar to the standard required in that country. This may include the use of Standard Contractual Clauses, equivalent safeguards under the UK International Data Transfer Agreement, and contractual protections with our providers.

9. How long we keep your information

We keep personal information for as long as is reasonably necessary for the purposes for which it was collected, including to meet any legal, accounting, tax or reporting requirements, and to defend against legal claims. As general guidance:

Lead enquiry data passed to a client is retained by theADmarket for up to 24 months unless the client requires a different retention period, after which it is deleted or de-identified.
Customer-match audience lists uploaded to ad platforms are refreshed periodically by the client; the platforms expire unused identifiers in line with their own policies (for example, Meta typically expires unused identifiers within 180 days).
Analytics data is typically retained for 14 to 26 months depending on the platform's default.
Client records, contracts and invoices are kept for at least 7 years to meet Australian tax record-keeping requirements.

10. Your rights

You have rights in respect of the personal information we hold about you. Depending on where you are located, these may include:

The right to access the personal information we hold about you and to receive a copy.
The right to correct information that is inaccurate or incomplete.
The right to ask us to delete your information (the "right to be forgotten" under GDPR).
The right to restrict or object to processing, including for direct marketing.
The right to data portability, so you can take your information to another provider.
The right to withdraw consent at any time, where processing is based on consent.
The right to lodge a complaint with a supervisory authority (see Section 13).

To exercise any of these rights, contact us using the details in Section 14. We may need to verify your identity before responding. We will respond within the timeframe required by law (30 days under the Australian Privacy Act; one month under the GDPR, extendable by a further two months for complex requests).

11. Direct marketing and opt-out

You can opt out of direct marketing from theADmarket at any time by:

Clicking the "unsubscribe" link in the footer of any marketing email we send.
Replying STOP to any marketing SMS.
Emailing us at privacy@theadmarket.com with the words "unsubscribe" or "opt out".

If you opt out, we may still send you operational messages such as service updates, contract correspondence or responses to your enquiries.

11A. AI assistants (Tends2 and Holly)

Our website includes Tends2, an AI assistant that answers questions about theADmarket by text and by spoken conversation, and our phone line is answered by Holly, an AI assistant. When you interact with these assistants:

Your questions and the assistant's responses are recorded and retained so we can review answer quality, improve the knowledge base and follow up on enquiries you ask us to action.
If you start a spoken conversation with our website concierge, your microphone audio is streamed to our voice AI provider, ElevenLabs, which transcribes it and generates the spoken reply. The conversation, including its audio and transcript, is recorded and retained by that provider on our behalf. You are asked to agree to this before the first conversation begins, and you can use the typed assistant instead at any time.
Where a question is dictated into a text field rather than spoken to the concierge, it is transcribed by your browser and we receive only the text. Phone calls to our number may be recorded and transcribed to capture your enquiry.
Conversations are processed by the AI providers that power these assistants under our agreements with them.
Please do not share confidential, sensitive or financial information with an AI assistant. If your enquiry is sensitive, email us directly instead.

You can ask us to delete your conversation history using the contact details in Section 14 or the process on our data deletion page.

12. Security

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include encrypted connections (HTTPS / TLS), access controls, role-based permissions, regular software updates, secure cloud infrastructure and staff training. No method of transmission over the internet is fully secure, and we cannot guarantee absolute security. If we become aware of an eligible data breach, we will notify affected individuals and the Office of the Australian Information Commissioner where required under the Notifiable Data Breaches scheme.

13. Complaints

If you have a concern about how we have handled your personal information, please contact us first using the details in Section 14. We will investigate and respond to you in writing within 30 days.

If you are not satisfied with our response, you can lodge a complaint with the relevant supervisory authority:

Australia: Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
United Kingdom: Information Commissioner's Office (ICO) at ico.org.uk.
European Union: the data protection authority in your country of residence.

14. Contact us

If you have any questions, requests or complaints about this Privacy Policy or our handling of personal information, please contact:

theADmarket
Attn: Privacy Officer
Email: privacy@theadmarket.com
Website: www.theadmarket.com

15. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or a prominent notice on our website. We encourage you to review this Policy periodically.