Privacy Policy
Last updated: 31 October 2026
The short version. This site collects the website address you check, and your email address (plus a few optional details) when you ask for results or a teardown. That information is used to deliver what you asked for and to follow up about it, nothing else. It is not sold. It is stored on a server in Montreal, Canada, handled by Sonali Bose in Toronto, and sent to her by email through Google. Her technology partner, based in India, builds and maintains the site and has access to the server to operate it. If your device is set to a European time zone (how we recognise EU, UK and Swiss visitors), analytics only runs after you accept it. You can ask to see, correct or delete your information at any time by emailing sonali@leadelevate.ca.
1. Who is responsible for your information
This website, sonalibose.com, is operated by Sonali Bose, a sole proprietorship based in Toronto, Ontario, Canada ("we", "us"). Sonali Bose is the person responsible for the protection of personal information under Canadian law and the data controller under the EU and UK General Data Protection Regulation (GDPR).
Privacy contact: sonali@leadelevate.ca.
2. What we collect, and why
The live ads check
When you type a website address into the check box, we look that address up in Google's Ads Transparency Center through a data provider (DataForSEO) and load the site's public homepage once to read what is in its source. The address you check is a business domain, not personal information about you, but we treat it with the same care. Results are cached for 7 days so repeat checks of the same address do not re-run.
Unlocking a result, or requesting a teardown
To see the full result of a check, or to request a free one-page teardown, we ask for your email address. The teardown form also asks for your name, business name, website, a monthly ad-spend band and the platforms you advertise on. We use this to deliver the result, prepare and send the teardown, and follow up with you about it. We check that an email address is real before accepting it (format, a mailbox-capable domain, and not a disposable-address service), so that results can actually reach you.
Technical and security information
- IP address. Used to limit the number of checks per connection per day (reset each day) and recorded in web-server access logs, which are kept for 14 days.
- reCAPTCHA. The check box and the forms are protected by Google reCAPTCHA v3, which analyses your interaction with the page to tell people from automated abuse. Google sets cookies for this and receives information about your device and browsing on this page. Google's Privacy Policy and Terms of Service apply.
Analytics
We use Google Analytics 4 to understand how the site is used: pages viewed, whether a check was run and for which website address, whether a result was unlocked and whether the form was sent. The analytics account is administered by our technology partner (section 4). For visitors in the EU, UK and Switzerland, Google states that Analytics does not log or store IP addresses; for other visitors Google uses the IP address to derive an approximate location, under Google's own privacy policy. Event-level data is kept by Google for 2 months and user-level data for up to 14 months. If your device's clock is set to a European time zone, analytics does not run until you accept it in the notice shown until you make a choice. Everyone can switch analytics off for this browser at any time using the button in section 7.
3. Legal bases (EU, UK and Switzerland)
| Purpose | Legal basis |
|---|---|
| Running a check, delivering a result or teardown, and following up about it | Steps taken at your request before entering into a contract (GDPR art. 6(1)(b)) |
| Bot protection, rate limiting and server logs | Our legitimate interest in keeping the service available and secure (art. 6(1)(f)) |
| Analytics cookies | Your consent (art. 6(1)(a)), which you can withdraw at any time |
| Making the details you submit available to our partner (support access, notification mailbox) and to providers outside the EEA | Your explicit consent, given when you submit the form (art. 49(1)(a)), and the providers' own data-processing terms |
| Operating and supporting the site, including administrative access by our technology partner from outside Canada | Our legitimate interest in keeping the site running (art. 6(1)(f)) |
4. Who receives your information
We do not sell personal information, and we do not share it with advertising networks.
- Imroz Solutions and Services (Kolkata, India), our technology partner, which builds and maintains this website and its lead system on our behalf. It has administrative access to the server in order to operate and support it, and lead notification emails are sent from a Google Workspace mailbox it administers, so a sent copy of each notification remains in that mailbox. It is not otherwise sent your details.
- Google (Google Analytics, reCAPTCHA, Google Fonts, which loads the site's typeface and so receives your IP address on every page, and Google Workspace, through which result and lead emails are sent and received).
- Amazon Web Services, which hosts the website and its lead records in its Montreal, Canada region.
- DataForSEO, which receives only the website address you check, in order to return Ads Transparency Center data about it.
- Public authorities, where the law requires it.
5. International transfers
Your information is stored in Canada. It can be accessed from India by our technology partner when operating or supporting the site, and the mailbox that sends lead notifications is administered there. Google processes data in the United States and other countries where it operates. The European Commission recognises Canada as providing adequate protection for information handled under Canada's federal private-sector privacy law. India has no such recognition. For visitors in the EU, UK or Switzerland, access to the details you submit from India rests on the explicit consent you give when you submit the form, after reading this notice. Transfers to Google and Amazon Web Services are additionally covered by those companies' standard data-processing terms.
6. How long we keep it
| Information | Kept for |
|---|---|
| Lead and request records (email, name, business, website, spend band, platforms) and the related emails | Up to 24 months after our last contact with you, then deleted. Earlier on request. |
| Cached check results (website address and public findings) | Used for 7 days, then ignored and overwritten by the next check of that address |
| Per-IP check counters | Reset at the first check on a later day |
| Web-server access logs | 14 days |
| Google Analytics data | 2 months (events), up to 14 months (user-level) |
7. Cookies and similar technologies
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| _ga, _ga_* | Google Analytics | Distinguishes visitors and sessions for analytics | Up to 2 years |
| _GRECAPTCHA and related | Google reCAPTCHA | Bot detection | Set by Google |
| sb_consent | This site (browser storage, not a cookie) | Remembers your analytics choice | Until you clear your browser data |
Analytics for this browser:
reCAPTCHA loads when the home page opens, to protect the check and the forms, and cannot be switched off.
8. Your rights
Wherever you live, you can email sonali@leadelevate.ca to ask what information we hold about you, to have it corrected or deleted, to withdraw consent, or to object to how it is used. We answer within 30 days, and we may ask you to confirm your identity first. Using your rights costs nothing and will not change how we treat you.
Canada
Under the Personal Information Protection and Electronic Documents Act (PIPEDA) you may access and correct your personal information and withdraw consent, subject to legal or contractual restrictions. If you are in Quebec, the person in charge of the protection of personal information is Sonali Bose, reachable at the address above, and you also have the rights to deletion (de-indexing) and portability provided by Quebec's private-sector privacy law. You may complain to the Office of the Privacy Commissioner of Canada or, in Quebec, to the Commission d'accès à l'information.
EU, UK and Switzerland
You have the rights of access, rectification, erasure, restriction, data portability and objection, and the right to withdraw consent at any time without affecting earlier processing. You may lodge a complaint with your national data protection authority, or in the UK with the Information Commissioner's Office.
United States
We do not sell personal information or share it for cross-context behavioural advertising, and we do not use it for profiling that produces legal or similarly significant effects. State privacy laws such as the California Consumer Privacy Act apply to businesses above certain size thresholds that we do not meet, but we honour the rights of access, correction, deletion and opt-out for every US resident who asks, and we never discriminate against anyone for doing so.
9. Email and anti-spam (CASL)
When you submit the check or the form, you are asking us to contact you about that request, and we will. We do not add you to a newsletter or an automated sequence. Any further commercial email from us is sent only with your consent, identifies the sender, and includes a working unsubscribe link, as required by Canada's Anti-Spam Legislation.
10. Children
This site is for businesses and is not directed at anyone under 16. We do not knowingly collect information from children. If you believe a child has given us information, email us and we will delete it.
11. Security
The site is served over HTTPS. Lead records are stored on an access-controlled server, the check is rate-limited, and the forms are protected by reCAPTCHA and email verification. No method of storage or transmission is completely secure, so we cannot promise absolute security.
12. Changes
We may update this policy. The date at the top shows the current version. Material changes will be flagged on this page.
13. Contact
Sonali Bose, Toronto, Ontario, Canada. sonali@leadelevate.ca.