Privacy Policy
Overdrive Digital Agency Limited. Effective date: 13 October 2026.
1. Who we are
Overdrive Digital Agency Limited (“Overdrive”, “we”, “us”) is a performance marketing agency registered in England and Wales under company number 16009674, with its registered office at 86 to 90 Paul Street, 3rd Floor, London, England, EC2A 4NE, United Kingdom. We are the data controller for the personal data described in this policy.
You can contact us about privacy at privacy@overdrive.digital or by post at the address above.
2. What this policy covers
This policy explains how we collect, use, share and protect personal data when you:
- visit our website at https://overdrive.digital;
- contact us, request a proposal or otherwise do business with us;
- apply for a role with us; or
- use the Overdrive Google Ads MCP application (the “App”), an internal tool through which authorised Overdrive staff access Google Ads accounts using an AI assistant. Section 5 covers the App in detail, including how we handle data obtained from Google.
3. The data we collect
| Who | Data | Source |
|---|---|---|
| Website visitors | IP address, browser and device information, pages viewed, referring site, cookie identifiers | Collected automatically by our website and analytics tools |
| Enquiries and business contacts | Name, job title, company, email address, phone number, the content of your message and our correspondence | Provided by you, or by your company, or from public business sources such as LinkedIn and company websites |
| Clients and partners | Contact details, contract and billing information, account identifiers for advertising platforms you ask us to manage | Provided by you under our service agreement |
| Job applicants | CV, contact details, employment history, interview notes | Provided by you or a recruiter |
| App users | Google account name, email address and profile picture; Google Ads account identifiers; Google Ads account and campaign data (see section 5) | Provided by Google when you sign in and authorise the App |
4. Why we use your data and our legal basis
Under the UK GDPR and the EU GDPR we rely on the following legal bases:
- Performance of a contract: to provide our services to clients, respond to requests before entering into a contract, and manage our relationship with you.
- Legitimate interests: to run and secure our website and systems, to communicate with business contacts about services relevant to their role, to manage recruitment, to keep business records and to improve our services. We balance these interests against your rights.
- Legal obligation: to keep accounting and tax records and to comply with requests from authorities.
- Consent: for non-essential cookies and analytics on our website, and for any marketing email to individuals, where consent is required. You can withdraw consent at any time.
5. The Overdrive Google Ads MCP application and Google user data
The App is an internal tool operated by Overdrive. It lets authorised Overdrive staff, and clients we have explicitly enabled, work with Google Ads accounts they already have permission to access, through an AI assistant. This section describes exactly what the App does with data obtained from Google.
Data accessed. When you sign in to the App with your Google account you are asked to grant two kinds of access: basic profile information (your name, email address and profile picture, used to identify you and to control who may use the App) and the Google Ads API scope, which allows the App to read Google Ads data for the accounts your Google account can access and, where that feature is enabled for you, to create or change campaigns on your instruction.
How the data is used. Google Ads data is retrieved only in response to a request you make in your AI assistant session, for the purposes of reporting, analysis and campaign management for accounts you manage. The App does not access any Google Ads account you cannot already access in Google Ads itself. We do not use Google user data for advertising to you, for building profiles about you, for selling to anyone, or for training artificial intelligence models.
Where the data goes. The App runs on Google Cloud infrastructure in the European Union. Data retrieved from Google Ads is passed to the AI assistant platform that Overdrive has selected for its team, currently Claude by Anthropic under its commercial terms, which do not permit the use of our data to train its models. The data appears in your own assistant conversation and is not shared with other users.
What we store. The App stores the authorisation tokens that Google issues when you sign in, encrypted, so that you do not have to sign in again for each session. It also keeps a log of who used the App, when, and for which account, for security and audit purposes. The App does not keep copies of your Google Ads reports or account data beyond what is needed to answer a request.
Revoking access. You can withdraw the App’s access to your Google account at any time at https://myaccount.google.com/permissions, or by disconnecting the App in your AI assistant settings. You may also ask us at privacy@overdrive.digital to delete your stored tokens, which we will do within 30 days.
Google policy compliance. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6. Who we share data with
We share personal data only as needed to run our business, with:
- service providers who process data for us under written contracts, including cloud hosting (Google Cloud), productivity and email (Google Workspace), CRM (Pipedrive), AI assistant tooling (Anthropic), project management, accounting and payment providers;
- advertising platforms (such as Google Ads, Meta and TikTok) where you have engaged us to manage campaigns on your behalf;
- our professional advisers, including lawyers, accountants and insurers;
- courts, regulators and law enforcement where the law requires it; and
- a buyer or successor if our business is sold or reorganised, under the same protections.
We do not sell personal data.
7. International transfers
We operate from the United Kingdom and Spain. Some of our providers process data in the United States or other countries. Where personal data leaves the UK or the European Economic Area we rely on an adequacy decision, the UK International Data Transfer Agreement or the EU Standard Contractual Clauses, together with additional safeguards where needed.
8. How long we keep data
| Data | Retention |
|---|---|
| Website analytics | Up to 26 months |
| Enquiries that do not lead to a contract | 24 months from last contact |
| Client and partner records | Duration of the relationship plus 6 years, for legal and accounting purposes |
| Job applications | 6 months after the decision, unless you agree to a longer period |
| App authorisation tokens | Until you revoke access or ask us to delete them, or when we remove your access to the App |
| App usage logs | 12 months |
9. Your rights
Depending on where you live, you have the right to ask us for access to your personal data, to correct or delete it, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent where processing is based on consent. We will respond within one month.
To exercise a right, email privacy@overdrive.digital. If you are unhappy with how we handle your data you can complain to the UK Information Commissioner’s Office (ico.org.uk) or, if you are in the European Union, to your local data protection authority, such as the Agencia Española de Protección de Datos (aepd.es) in Spain.
10. Cookies
Our website uses strictly necessary cookies to function and, with your consent, analytics cookies to understand how the site is used. You can change your choices through the cookie settings on the website or in your browser. Blocking some cookies may affect how the site works.
11. Security
We protect personal data with technical and organisational measures appropriate to the risk, including encryption in transit and at rest, access controls based on job role, multi-factor authentication, and the storage of credentials in a managed secrets service. No system is completely secure, and we will notify you and the relevant authority where the law requires it if a breach affects you.
12. Children
Our website and services are intended for businesses and professionals and are not directed at anyone under 18. We do not knowingly collect personal data from children.
13. Changes to this policy
We may update this policy from time to time. The effective date at the top shows when it was last changed. Significant changes will be highlighted on our website.
14. Contact
Overdrive Digital Agency Limited, 86 to 90 Paul Street, 3rd Floor, London, England, EC2A 4NE, United Kingdom. Email: privacy@overdrive.digital.