Privacy Policy | Correct Performance

Last updated: July 24, 2026

This Privacy Policy explains how Correct Performance ("we", "us", "our") — an independent performance-marketing practice operated by Dmytro Bilotserkovets — collects, uses, stores, and protects your personal data when you visit this website or contact us. We keep data collection to the minimum needed to answer your request, and we never sell your data.

1. Who is responsible for your data

The data controller is Correct Performance (Dmytro Bilotserkovets). For any question about this policy or your personal data, contact us at belocerkovec.dima.key@ukr.net.

2. What data we collect

We only collect what you choose to give us and a small amount of technical context:

Contact-form data you submit: your name and email address (required), and — only if you choose to provide them — phone number, website URL, monthly advertising-budget range, and your message.
Submission metadata: the date and time of submission, the site language (locale), and the page you submitted from. This helps us route and answer your request.
Technical & usage data: if you consent to analytics, we may receive standard data such as approximate location, device and browser type, pages viewed, and referring source (see Section 5).

We do not intentionally collect special categories of data (such as health, political, or biometric data). Please don't include such information in your message.

3. Why we use your data and the legal basis

We process your data for specific purposes, each with a lawful basis under the GDPR:

To respond to your audit request and communicate with you — basis: steps taken at your request prior to entering a contract, and our legitimate interest in replying to enquiries.
To provide and improve our services — basis: legitimate interest in running and improving our business, balanced against your rights.
Analytics and advertising measurement — basis: your consent, which you can withdraw at any time.
To comply with legal obligations — basis: compliance with applicable law.

4. How your data is stored and who can access it

Contact-form submissions are stored in a Google Sheet accessible only to Correct Performance, and are used to reply to you by email or messaging app. We use a limited set of trusted service providers ("processors") who process data on our behalf:

Google (Workspace / Sheets) — stores form submissions; (Tag Manager, Analytics) — website analytics, subject to consent.
Our hosting and form-delivery infrastructure — delivers the website and transmits your submission to us.
Messaging providers (e.g. Telegram, WhatsApp, email) — used only if you choose to contact us through them.

We do not sell, rent, or trade your personal data, and we do not share it with third parties for their own marketing.

5. Cookies and analytics

On first visit we ask for your cookie preferences. Strictly necessary cookies keep the site working and are always on. With your consent, we use Google Tag Manager, Google Analytics 4, and advertising-measurement tags, which may set cookies to understand how the site is used and how our ads perform. You can accept, decline, or change your choice at any time via the cookie banner, and you can also block cookies in your browser settings.

6. International transfers

Some of our providers (such as Google) may process data on servers outside your country, including in the United States. Where data is transferred internationally, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. How long we keep your data

We retain contact-form data for up to 2 years from your last interaction with us, unless you ask us to delete it sooner or we're required to keep it longer by law. Analytics data is retained according to the retention period configured in Google Analytics.

8. How we protect your data

We use reasonable technical and organisational measures — including access controls, reputable providers, and encrypted connections (HTTPS) — to protect your data against loss, misuse, or unauthorised access. No method of transmission or storage is 100% secure, but we work to keep your data safe.

9. Your rights

Depending on your location, you have the right to:

access the personal data we hold about you;
correct inaccurate or incomplete data;
request deletion of your data ("right to be forgotten");
restrict or object to certain processing;
request a portable copy of your data;
withdraw consent at any time, without affecting processing already carried out;
lodge a complaint with your local data-protection authority.

To exercise any of these rights, email belocerkovec.dima.key@ukr.net. We'll respond within the timeframe required by applicable law (generally within one month).

10. Children's privacy

This website and our services are intended for businesses and adults. We do not knowingly collect data from children under 16. If you believe a child has provided us data, contact us and we will delete it.

11. Third-party links

Our site may link to external websites (for example, client references or tools). We are not responsible for the privacy practices of those sites; please review their policies separately.

12. Our Google Ads API application ("Correct Performance Reporting")

We operate an internal software application called Correct Performance Reporting, which connects to the Google Ads API. This section explains how that application accesses and handles data.

Who uses it. The application is used only by Correct Performance (Dmytro Bilotserkovets). It is not distributed, sold, licensed, or made available to clients, external users, or the public.

What it accesses. With the account owner's authorisation, the application requests the OAuth scope https://www.googleapis.com/auth/adwords. It uses this scope to read advertising performance data (campaigns, ad groups, keywords, and metrics such as impressions, clicks, cost, and conversions) and to generate keyword ideas from Google's keyword planning service. No other Google scopes are requested.

What it does not do. The application is read-only with respect to account structure: it does not create or modify accounts, campaigns, ad groups, or keywords. All changes are made manually by us in the Google Ads interface. We do not use Google user data for advertising, profiling, or training machine-learning models.

How data is stored. Data retrieved through the application is processed locally on our own computer and is used solely for internal analysis and reporting for the accounts we manage. It is not uploaded to third-party servers, not sold, and not shared with anyone other than the account owner concerned. OAuth credentials (client secret and refresh token) are stored locally and are never shared.

Withdrawing access. An account owner may withdraw the application's access at any time by removing our access in their Google Ads account, or at https://myaccount.google.com/permissions

Limited Use. Correct Performance Reporting's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

13. Changes to this policy

We may update this policy from time to time. The "Last updated" date above reflects the latest version, and material changes will be posted on this page.

14. Contact

Correct Performance · Dmytro Bilotserkovets
Email: belocerkovec.dima.key@ukr.net