Dr Christopher Dillon — Full Stack Data Science Consultant Last updated: 25 October 2026
I build reporting and analytics systems for business clients. To do that, a client may ask me to connect to advertising, analytics or e-commerce accounts they own (for example Amazon Ads, Google Ads, Google Analytics, Meta, Microsoft Advertising or their online store). This policy explains how I handle the data those connections give me access to.
Access is always granted by the account owner, using the platform’s own sign-in and consent screen (OAuth) or by inviting me as a user. I request read-only access wherever the platform offers it. I never ask for, see or store your account passwords. The client can withdraw access at any time from the platform’s own settings, and it stops working immediately.
I do not request the personal data of the client’s own customers (names, addresses, emails or payment details), and I do not use these connections to change campaigns, budgets or settings.
Only to produce the reporting the client has asked for, such as dashboards, scheduled reports and analysis for that client’s business. Data from one client is never combined with, or shown to, another client.
Data is stored on infrastructure belonging to or commissioned for the client (for example their own server or cloud project), not on shared or third-party marketing platforms. Access tokens are kept encrypted or in restricted configuration on that infrastructure and are used only by the automated reporting jobs.
I do not sell, rent or share this data with anyone outside the client’s organisation, and I do not use it for advertising, profiling or training. Data is disclosed only where the law requires it.
Data is kept for as long as the client needs the reporting. When an engagement ends, or on the client’s request, I revoke my access and delete any tokens and copies I hold. The reporting data remains the client’s property, on the client’s own systems.
I act on behalf of my clients, who decide how their data is used (under UK GDPR I act as their processor). If you have a question about data held for a business, or want access withdrawn or data deleted, contact that business or me directly.
Dr Christopher Dillon — mail@christopherdillon.me