Privacy policy

Last updated 3 October 2026. This policy covers the ad audit at audit.hundredclubdigital.com, run by Hundred Club Digital, a registered business name of 0-100 Group Pty Ltd (ABN 54 661 098 540). We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth), and, for people in the UK and EU, the UK GDPR and EU GDPR.

What we collect

• What you type in: first name, email, business name, and if you give them, mobile number and website.
• Your audit answers: how your ads are set up and run, your spend band and business type.
• If you give them, your last 30 days of ad numbers (spend, impressions, clicks, results, revenue, margin, frequency).
• If you give us your website address, what our scanner finds on that public page: tracking code, platform, speed and similar.
• Your country (from your connection) to show prices in your currency, and your timezone so your weekly email arrives on Monday morning your time.
• How you found us: the ad or link you clicked, including campaign tags and Meta's click identifier.
• If you subscribe: your subscription status. Card details go straight to Stripe and never touch our servers.
• What you tick off in your dashboard, and the weekly numbers you enter.
• If you connect your Meta ad account: a read-only access token and the ad account’s performance totals (spend, impressions, link clicks, purchases or leads, purchase value, frequency). We can’t create, change or pause ads, and we don’t read audiences, creative or anyone’s personal data. The token is stored encrypted and deleted when you disconnect.

Why we collect it

• To score your audit, show and email you your results, and run your account if you subscribe (lawful basis: performing our contract with you).
• To send your Monday check-in email if you subscribe, and to work out your weekly results from the numbers you enter. You can stop it by cancelling.
• To send you the rest of your report over the following week, only if you ticked the box (lawful basis: consent). Every email has an unsubscribe link.
• To measure which of our ads work (lawful basis: legitimate interests). We share a scrambled (hashed) version of your email and phone with Meta when you complete the audit or start a subscription, so Meta can tell us which ads led to it. Meta's pixel also sets cookies for this. You can opt out of ad personalisation in your Meta ad preferences.
• If your audit suggests our agency could help, we may contact you about it. Tell us not to and we won't.

We do not sell, rent or trade your information.

Who else handles it

Cloudflare (hosting and database), Stripe (payments), Resend (email delivery), Meta (ad measurement) and Microsoft (our email). They process data on our behalf and may store it outside Australia, including in the United States.

Deleting your Meta data

Disconnect any time from your dashboard, or remove “Hundred Club Digital Audit” in your Facebook settings under Apps and websites. Either way we delete the access token and stop pulling numbers. To have your whole account deleted, see our data deletion page.

How long we keep it

Audit results and contact details for people who don't subscribe are deleted after 24 months. Subscriber records are kept for seven years after you leave, to meet Australian tax and record-keeping obligations.

Your rights

You can ask what we hold about you, correct it, get a copy, object to how we use it, or have it deleted. Email grow@hundredclubdigital.com and we will respond within 30 days.

Complaints

Contact us first. If we can't resolve it, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au), or in the UK the ICO (ico.org.uk), or your local EU data protection authority.

Changes

If this policy changes we will update the date at the top of this page.