Privacy notice

Version of 14 September 2026.

This site has one purpose: you ask for a written read of your Google Ads account, and we answer. Everything stored serves exactly that, or the service if you become a client.

Who is responsible

Pinha Limited, Ioanni Chakket 44, MERIKA 3, 2nd floor, 6045 Larnaca, Cyprus. Email: hello@headcount-zero.co. In data-protection language, Pinha Limited is the controller. No data protection officer is appointed because the legal thresholds for one are not met.

What is collected

• What you type into the form: your name, work email, and monthly Google Ads spend band, plus company, website, country and your message if you fill them in. You provide these yourself.
• What your browser sends with the form: browser identifier, the referring page, the query parameters of the address you arrived on, the page the form was on, and how many seconds you spent filling it in. The seconds exist to catch bots, which submit instantly; it is the reason the form has no captcha. The form also has one hidden field a person never sees. If it comes back filled, the request is dropped.
• Google Partner badge: the badge image is loaded from Google (gstatic.com). Google receives your IP address and browser request data for that image; the legal basis is our legitimate interest in showing a verifiable partner status (Art. 6(1)(f) GDPR). See Google's privacy policy.
• Server logs of the hosting provider (IP address, time, requested page), which are technically necessary to run the site.
• If you become a client: the details you enter in the client area (company, billing address, VAT ID, the Google Ads account you link), the monthly reports for your account, and the invoices.

What it is used for

To answer your request, to write the read of your account, and, if you buy, to run the service and to invoice it. Legal basis: steps taken at your request before a contract and the performance of the contract (Article 6(1)(b) GDPR), and our legitimate interest in answering people who write to us. There is no newsletter, no sequence, no sale or rental of data, and no sharing with anyone doing marketing of their own.

Who processes it on our behalf

• Vercel Inc. (Covina, California, USA) hosts this site and runs the form function. Request logs hold the standard metadata above.
• Google Workspace (Google Ireland Limited, Dublin) delivers the request as an email to us and the confirmation to you.
• Supabase Inc. (San Francisco, USA) hosts the database in which your request, and later your client record, is stored.
• Stripe Payments Europe Ltd. (Dublin, Ireland) processes payment if you buy. Stripe receives your name, address, email, VAT ID and card details and issues the invoice. Card details never reach our systems.
• Google Ads (Google Ireland Limited): if you become a client, you grant our manager account access to your Google Ads account. We read and change campaign data inside your account; the data stays in your account.
• No booking tool. There is no calendar service embedded on this site. If you want a call, you say so in the form or reply to the confirmation mail.
• Fonts are served from this site. There is no connection to Google Fonts and no IP address is sent to a font provider.

Several of these providers are based in the United States. Transfers rely on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework where the provider is certified.

Cookies and tracking, in one honest paragraph

This site sets no cookies while you read it, stores nothing in your browser, and loads no advertising pixel, no Google Analytics, no tag manager and no visit counter, which is why there is no consent banner. One image is served by a third party: the Google Partner badge in the footer and in the about section loads from Google's servers (gstatic.com), so Google receives your IP address and the usual browser request data when the page is displayed, as with any image loaded from another server. No cookie is set by it. Beyond that, the only data that leaves your browser is what you type into the form, plus the technical items listed above, when you press send. The hosting provider keeps ordinary server logs (IP address, time, requested page) for security, as every host does.

How long we keep it

A request is deleted twelve months after the last contact if no contract came of it. If you become a client, the records stay for the duration of the contract and afterwards for as long as Cyprus tax and company law require, which is longer and not our choice.

Your rights

You have the right to access, correct, delete, restrict or port your data, and to object to processing. An email to hello@headcount-zero.co is enough; no form, no reason required. You can also complain to a data protection authority, in Cyprus the Office of the Commissioner for Personal Data Protection.

Changes

If this page changes in a way that matters, the date at the top changes with it. If you are a client and the change is significant, you get an email rather than a silent edit.