Last updated: 10 October 2026

1. Who I am

The Advert Elixir is a digital marketing consultancy run by Katrina McBride. I’m the data controller for personal data collected through theadvertelixir.com and through working with me.

I don’t have a Data Protection Officer, because a business my size isn’t required to. Send any privacy question to the email above and I’ll reply within 30 days.

2. What I collect

Information you give me

Information collected automatically

When you visit the site, some data is collected by cookies and similar tools. This includes your IP address, browser and device type, pages visited, and how you arrived at the site. Marketing and analytics tools only run if you click “Accept” on the cookie banner. See section 5.

The website’s security software also logs IP addresses to block attacks. This happens for every visitor, because it’s needed to keep the site safe.

I don’t knowingly collect data from anyone under 16, and I don’t collect special category data such as health information.

3. Why I use it and the legal basis

PurposeWhat it involvesLegal basis
Replying to enquiriesAnswering your form, email or callLegitimate interests (responding to you)
Booking and holding callsScheduling and running a discovery callSteps before a contract, at your request
Delivering client workManaging campaigns, reporting, invoicingContract
Keeping recordsInvoices and tax recordsLegal obligation
Newsletter and free guidesSending emails you signed up forConsent (unsubscribe any time)
Website analyticsUnderstanding how the site is usedConsent (cookie banner)
Advertising and remarketingMeasuring ads and showing ads to past visitors on Meta, LinkedIn and GoogleConsent (cookie banner)
Website securityBlocking spam and attacksLegitimate interests (protecting the site)

I don’t sell your data. I don’t use it for automated decisions that have a legal or similar effect on you.

4. Tools and service providers

These companies process data on my behalf, or set cookies when you accept them. Tools marked “Consent” only load after you click “Accept” on the cookie banner.

ToolCompanyWhat it’s used forRuns
Meta PixelMeta Platforms Ireland LtdMeasuring and targeting Facebook and Instagram adsConsent
LinkedIn Insight TagLinkedIn Ireland Unlimited CompanyMeasuring and targeting LinkedIn adsConsent
Google Tag ManagerGoogle Ireland LtdLoading the analytics and ad tagsConsent
Google Analytics 4Google Ireland LtdWebsite statisticsConsent
Google AdsGoogle Ireland LtdMeasuring Google ad conversions and remarketingConsent
LeadfeederDealfrontIdentifying which companies visit the siteConsent
BrevoSendinblue SAS (France)Email newsletters, sign-up forms and website trackingConsent for tracking; sign-up for emails
WonderPushWonderPush SAS (France)Browser push notificationsConsent
CalendlyCalendly LLC (USA)Booking callsWhen you book
Contact Form 7 and FlamingoRuns on my own websiteReceiving and storing form enquiriesWhen you submit a form
WordfenceDefiant Inc (USA)Website security and blocking attacksAlways
ComplianzComplianz BV (Netherlands)Recording your cookie choicesAlways
Website hostingHostinger International LtdHosting the website and its databaseAlways

I may also share data with my accountant, or with authorities when the law requires it.

5. Cookies, retention and transfers

Cookies and consent

When you first visit, a banner lets you accept, deny or choose which cookies to allow. Analytics and marketing tools stay switched off until you click “Accept”. You can change your choice at any time using the “Manage consent” tab on every page. The full list of cookies is in the Cookie Policy.

How long I keep data

DataHow long
Enquiries that don’t lead to work2 years from last contact
Client records and correspondence6 years after the work ends
Invoices and tax records6 years (Irish Revenue requirement)
Newsletter subscribersUntil you unsubscribe
Analytics and ad dataSet by each tool, usually up to 14 months for Google Analytics
Cookie consent record12 months, then the banner asks again

Transfers outside the EU

Some providers, including Google, Meta, LinkedIn, Calendly and Wordfence, may process data in the United States. These transfers are covered by the EU-US Data Privacy Framework or by the European Commission’s Standard Contractual Clauses.

Security

The site runs on HTTPS, is protected by security software, and is backed up. Only I have access to enquiries and client data.

6. Your rights

Under GDPR you can ask me to:

Email katrina@theadvertelixir.com to use any of these rights. I’ll reply within one month. There’s no charge.

Complaints

If you’re unhappy with how I handle your data, please tell me first so I can fix it. You also have the right to complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28.

Changes to this policy

I’ll update this page when the tools I use or the law changes. The date at the top shows the last update.