Privacy policy

Key points

Who we are

FulFill It is a digital marketing agency based in Super Town Cantt, Lahore, Pakistan. In this policy, “we”, “us” and “our” mean FulFill It. You can reach us at [email protected].

Information we collect

• Details you give us, such as your name, email address, phone or WhatsApp number, company, website and message when you use our contact, quote, audit or meeting forms.
• Job and internship applications, including your CV, links and the answers you provide.
• Basic technical data such as pages visited, device type and approximate location, collected through analytics tools and cookies.
• Information about your business that you share so we can scope and deliver work, such as goals, platforms and tools.
• Results from an ad account you choose to connect to the Ad Verdict Desk, and the website address you enter into it, as described in “Ad accounts and the Ad Verdict Desk” below.

How we use your information

• To reply to your enquiry, prepare quotes and proposals, schedule and run meetings, and deliver and support our services.
• To review applications and contact applicants about roles and the internship program.
• To understand how the website is used and to improve it.
• To send service updates. We only send marketing emails if you have asked for them, and you can opt out at any time.

Ad accounts and the Ad Verdict Desk

The Ad Verdict Desk is a free tool on fulfillit.pk. It checks your website and, if you want, tells you which of your ads to keep, fix or stop. You can type your ad numbers in, upload a report, or connect your Meta (Facebook and Instagram), Google Ads or TikTok ads account. Connecting is always optional.

What we can see when you connect. We ask for read-only permission. We can see the names, ID and currency of the ad accounts you pick from, and the campaign names and results for the last 7 to 30 days (14 by default): money spent, how many people saw the ads, clicks, video views, page visits, add-to-carts, checkouts, orders or leads, and the value of orders.

What we cannot do. We cannot create, edit, pause or delete ads, change budgets, spend your money, or see your payment details, your audiences, your customers’ personal details, or your personal Facebook, Google or TikTok profile.

How we use it. Only to work out your verdict and show it to you on screen and, if you ask for it, send it to you by email or WhatsApp. We do not sell this information, use it for advertising, or give it to other companies.

What we keep, and for how long.

• Your access key from the platform is encrypted, kept for at most one hour, and deleted as soon as your numbers are loaded or you press Disconnect, whichever comes first.
• The campaign numbers are used in your browser. We keep only the short verdict summary (the campaign names, the keep, fix or stop result and the main figures in it) together with your contact details, for up to 120 days, so we can send you your report and follow up if you asked us to. Your private report link works for up to 90 days.
• You can ask us to delete all of it sooner.

How to remove our access yourself, at any time.

• Meta: in your Facebook settings, open Business Integrations (or Apps and Websites) and remove “Ad Verdict Desk”.
• Google: go to myaccount.google.com/permissions, choose our app and select Remove access.
• TikTok: in your TikTok for Business account, open the authorized apps settings and remove our app.

How to ask us to delete your data. Email [email protected] from the address you used, with the subject “Delete my data” and your website address. We delete your request record, report links and any remaining access keys within 7 days and confirm by email.

Google users. FulFill It’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Meta and TikTok. Data we receive from Meta and TikTok is handled under their platform terms and is used only for the purpose described above.

Our tracking and dashboard service

Our tracker, WordPress plugin and Shopify app send visit and order counts from a customer’s website to their FulFill It dashboard. We do not store visitor names, emails, phone numbers, addresses or IP addresses. For forms we keep field names, never values. Orders keep the order number, total, currency, status and source. The tracker can run with no cookies, or wait for consent.

Who can see it. The customer, the team they invite, and FulFill It staff. By default, staff may view a customer’s own tracking data (visits, events, orders, funnels, scores, audits and site settings) to give support, run the service and improve it. Staff access is read-only, limited by role and logged, and the customer can always see who looked and when in a “who looked at my data” log. Staff never see passwords, access tokens, site secrets or API keys.

Ad accounts need permission. Data from Google, Meta (Facebook and Instagram) and TikTok connections, and from other connectors, is visible to FulFill It administrators only because the customer expressly agrees in the pop-up shown before each connection (“I agree and connect”). Other staff roles need a grant the customer approves. The customer can take that back any time. We never sell data, never use ad-platform data to train ad targeting or for other customers, and never share one customer’s data with another.

Keeping and deleting. Raw visits are kept 10 days, daily summaries 25 months. A customer can delete everything from the dashboard or by writing to [email protected], and we finish within 7 days.

Read the full details in the dashboard and Ad Verdict privacy policy. Our systems run on reputable cloud infrastructure; the sub-processor list we send on request to {EMAIL} says where each kind of data is stored.

FulFill It's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Sharing your information

We share information only with trusted service providers who help us run the business, such as hosting, email, scheduling, video meeting, analytics and customer relationship tools. They may only use it to provide their service to us.

We may disclose information if the law requires it or to protect our rights. We do not sell your personal information.

International transfers

We work with clients around the world, so your information may be processed in other countries by the providers we use. We take reasonable steps to keep it protected wherever it is handled.

How long we keep it

We keep information for as long as we need it for the purposes above, or as the law requires. Unsuccessful applications and enquiries are deleted after a reasonable period. Ad Verdict Desk requests are kept for up to 120 days, private report links work for up to 90 days, and ad platform access keys are kept for at most one hour.

Your choices and rights

You can ask to see the information we hold about you, correct it, or ask us to delete it, and you can withdraw consent to marketing at any time. You can also disconnect an ad account at any time and ask us to delete everything we hold from your use of the Ad Verdict Desk.

To make a request, email [email protected]. We may need to confirm your identity first.

Security

We use reasonable technical and organisational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

Our services are intended for businesses and adults. We do not knowingly collect information from children.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.

Contact us

Questions about this policy? Email [email protected].