Privacy Policy
Last updated: 29 July 2026
Social Theory Media (“we”, “us”) provides marketing services and builds custom reporting tools for a small number of business clients. This policy explains what information we handle, why, and what we do not do with it.
1. Who this policy covers
This policy covers visitors to socialtheorymedia.com and the people at our client businesses who use reporting tools we build for them. We do not operate a consumer product and we do not offer public sign-ups.
2. Information we collect
From website visitors. If you contact us through this site, we receive the name, email address, and any message you choose to send. We use standard web analytics to understand how the site is used.
From client engagements. When a business engages us, we handle business records belonging to that client — for example their advertising performance data, their customer relationship management records, and their call tracking data. This information belongs to our client, not to us. We access it under a service agreement, we process it only to produce reporting for that client, and we return or delete it when the engagement ends.
3. How we use information
We use information to respond to enquiries, to deliver contracted services, and to produce reporting and analysis for the client the information belongs to. We do not sell personal information. We do not share it with third parties for their own marketing. We do not use one client’s data to inform work for another client.
4. Google user data
Some tools we build connect to a client’s own Google accounts — for example Google Ads, Google Analytics, or Google Search Console — so that the client can see their own advertising and website performance in one place.
What we access
Only the specific data the account owner authorises, and only from accounts belonging to the client who granted access. This is advertising cost and performance data, website traffic statistics, and where applicable, advertising lead records containing a prospective customer’s name, phone number, or email address.
How we use it
Solely to produce reporting and attribution analysis for the account owner who granted access. Advertising lead details are used to match an advertising enquiry to the corresponding record in that same client’s own systems, so the client can see which marketing produced which result.
Read-only access
Our tools request read access. They do not create, modify, pause, or delete campaigns, budgets, bids, or account settings.
How we store it
Data is stored in a private, access-controlled database. Credentials are held in an encrypted secret store. Access requires authentication and is limited to named individuals working on that engagement.
How we share it
We do not share, transfer, or sell Google user data to any third party. It is not used for advertising, not used to train any machine learning or artificial intelligence model, and not used for any purpose other than delivering the contracted reporting to the account owner.
How to revoke access
An account owner can withdraw our access at any time, without contacting us, at myaccount.google.com/permissions, or by removing our access from within the relevant Google product. Access ends immediately.
Limited Use
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. Retention
We keep client data for as long as the engagement requires and for a reasonable period afterwards for continuity. On written request from the client, we delete it.
6. Security
We use multi-factor authentication, least-privilege access, encrypted credential storage, and private network access to databases. No system is perfectly secure, but we treat client data as material we are borrowing rather than material we own.
7. Your rights
If you are in a jurisdiction granting rights over personal information — including access, correction, and deletion — you may exercise those rights by contacting us. Where information belongs to one of our clients, we will refer your request to that client, who controls it.
8. Children
Our services are not directed at children and we do not knowingly collect information from anyone under 13.
9. Changes
We will update this page and change the date above when this policy changes.