Privacy Policy

Last updated: 18 October 2026

This Privacy Policy explains how NW Digital (“we”, “us”) collects, uses and protects information when you visit nw-digital.es and when our application connects to Meta platforms (Facebook, Instagram and the Meta Marketing API).

1. Who is responsible for your data

The data controller is Dmitry Lapkin, operating as NW Digital, based in Portugal.

Contact: contact@nw-digital.es

2. Our Meta application

NW Digital operates an application registered on Meta for Developers. The application is an internal tool used to:

• retrieve advertising performance statistics (reporting and analytics);
• create, edit and manage advertising campaigns, ad sets, ads and creatives;

only for advertising accounts, Pages and business assets to which we have been granted access by their owners through Meta Business Manager or Meta’s own permission flows. The application is not offered to the general public and does not collect data from people who merely see or interact with ads.

3. What data we process

Data received through Meta APIs

• Advertising account data: account IDs and names, campaign, ad set and ad structure, budgets, bids, targeting settings, creative assets and copy.
• Aggregated performance metrics: impressions, reach, clicks, spend, conversions and similar statistics. These are aggregated and do not identify individual people.
• Business asset data: Page and Business Manager IDs and names needed to manage the assets we were given access to.
• User account data (if Facebook Login is used): the Meta user ID, name and the access token of the authorised user, used only to authenticate API requests.

Data we do not collect

We do not collect friends lists, private messages, personal posts, or any data about individual members of an ad audience. We do not use Meta data to build user profiles.

4. Why we process it and on what legal basis

• Reporting and analysis of advertising performance for the authorised accounts. Legal basis: performance of a contract or our legitimate interest in managing advertising we are responsible for (GDPR Art. 6(1)(b) and 6(1)(f)).
• Managing advertising (creating and editing campaigns and creatives) on behalf of account owners who granted access. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
• Security and compliance, including keeping access tokens secure and meeting Meta Platform Terms. Legal basis: legal obligation and legitimate interest (GDPR Art. 6(1)(c) and 6(1)(f)).

We use data obtained from Meta only for the purposes above and in line with the Meta Platform Terms and Developer Policies. We do not sell data, use it for advertising to third parties, or transfer it to data brokers.

5. Sharing and transfers

We share data only:

• with the owner of the advertising account the data relates to;
• with technical service providers that host or process data on our behalf (for example, cloud hosting and spreadsheet or database tools), bound by data processing terms;
• where required by law or a valid request from a public authority.

Some providers may process data outside the European Economic Area. In those cases transfers rely on an adequacy decision or the European Commission’s Standard Contractual Clauses.

6. How long we keep data

• Access tokens are kept only while access is active and are deleted when access is revoked or expires.
• Advertising statistics are kept for as long as needed for reporting to the account owner, and for no longer than 24 months after access to the account ends, unless the account owner asks for earlier deletion.

7. Security

We store access tokens and API data securely, restrict access to authorised persons, and use encrypted connections (HTTPS) for all API communication.

8. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. To exercise any of these rights, email contact@nw-digital.es. We will reply within one month.

You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), or with the supervisory authority of your country of residence.

9. Data deletion instructions

You can ask us to delete any data our application received about you or your business assets at any time:

1. Remove the app’s access in Meta. On Facebook, go to Settings & privacy → Settings → Apps and websites, find the app and click Remove. For business assets, remove the app or partner access in Meta Business Settings.
2. Request deletion by email. Send a message to contact@nw-digital.es with the subject “Data deletion request”, stating your name and, if relevant, the Meta user ID or advertising account ID.

We will delete the data within 30 days of the request and confirm by email once it is done.

10. This website and cookies

nw-digital.es does not use analytics, advertising or tracking cookies. Our hosting provider may keep standard technical server logs (such as IP address and time of request) for security and operation of the site, for a limited period.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last changed. Material changes will be reflected on this page.

12. Contact

Dmitry Lapkin, NW Digital, Portugal
Email: contact@nw-digital.es