23ADS is a digital marketing agency based in Thailand. This policy explains how we collect, use and protect information from visitors of 23ads.co and information we receive from Meta platforms (Facebook / Instagram) while managing advertising for our clients.
01Information we collect
From this website: name, email, phone number and messages you submit through contact or registration forms, plus general usage data (cookies, Meta Pixel and analytics tools) used to measure and improve the site.
From Meta (Platform Data): when a client assigns its ad account or Page to the 23ADS Business Manager, our systems access ad account, campaign, ad creative, performance metrics (such as spend, messaging conversations and purchases) and Page data needed to manage advertising, exclusively through the Meta Marketing API.
From online course purchases: first name, last name, phone, email, items purchased, amount and payment status, plus learning activity (lessons viewed). Card data never passes through our systems; the payment provider processes it.
02How we use it
To respond to your enquiries and deliver the services you request.
To manage and optimise our clients' advertising automatically, e.g. pausing or resuming ads based on client-approved thresholds, creating ads from client-approved content, and reporting results to the client.
To analyse the overall performance of our services.
For online course buyers: to create your course account and send confirmations, to contact you about orders and refunds, for accounting and tax, and to measure 23ADS's own advertising by sending hashed purchase data to Meta via the Conversions API.
03Sharing
We do not sell or rent personal data. Platform Data is used only to manage the ad accounts of the client it belongs to and is shared only with (a) that client, (b) 23ADS staff responsible for the account, and (c) necessary service providers such as Meta and servers operated by 23ADS in Thailand.
For online course buyers, the service providers involved are Stripe (payments), Bunny (video hosting and playback), the website's email delivery provider, and Meta (ad measurement, hashed data).
Data is stored on servers controlled by 23ADS with access limited to authorised personnel. API access tokens are stored separately and never disclosed to third parties. We keep data for as long as we provide services to the relevant client and delete or anonymise it when the engagement ends or upon request.
Online course buyer data is kept for the 1-year access period, and transaction records for as long as accounting and tax law requires.
05Your rights
You may request access to, correction of, or deletion of your personal data and withdraw consent at any time. See our Data Deletion Instructions.