← Home

Privacy Policy

Last updated: November 2026

This policy describes how McCarthy King (operated by Idris McCarthy — "we", "us") handles personal data in connection with our direct-response advertising operations and this website.

Data we collect through this website

This website is a static informational site. It does not set tracking cookies, does not run third-party analytics, and does not collect personal data from visitors beyond standard server access logs (IP address, user agent, request path, timestamp) maintained by our hosting provider for security and abuse-prevention purposes. Server logs are retained for up to 90 days and are not shared with third parties except where required by law.

If you email us, we receive and retain your email address and the content of your message to respond to your inquiry. We do not add contacts from inbound email to any marketing list.

Data we handle in advertising operations

In the course of operating paid-media campaigns on platforms including TikTok, we process the following categories of data, each under the legal basis of legitimate interest or performance of a contract with the advertiser whose ads we operate:

• Aggregate campaign metrics — spend, impressions, clicks, conversions, cost-per-result, return on ad spend, pulled from platform reporting APIs. This data does not identify individuals.
• Click-level identifiers — platform-issued click IDs (e.g. ttclid) and standard UTM parameters, used to attribute downstream conversions back to the originating ad. These identifiers are stored in a first-party database and are not shared with third parties.
• Hashed customer identifiers — email addresses and phone numbers from our own merchant databases are one-way hashed with SHA-256 before being uploaded to advertising platforms as the basis for custom audiences. Only the hashed values leave our infrastructure. Raw identifiers remain in the source merchant systems under the merchant's own privacy policy.
• Server-side webhook events — order and conversion events received from merchant storefronts (e.g. Shopify, Stripe). These are processed to compute per-ad attribution and then aggregated. Raw payloads are retained for 90 days for debugging and then purged.

Data we do not do

• We do not sell personal data.
• We do not share personal data with third-party data brokers.
• We do not re-identify hashed identifiers once they have been uploaded to platforms.
• We do not operate consumer-facing ad experiences that collect data outside of the platform-native tooling.

Advertising platforms

Our ad operations rely on data processors including TikTok for Business, their Marketing API, and the analogous APIs of other advertising platforms. Data submitted to these processors is governed by each platform's own data processing addendum. End-user data collected on an advertised site is governed by that advertiser's own privacy policy.

Your rights

If you believe your personal data has been processed by us, you may contact us at the address below to request access, correction, or deletion. We will respond within 30 days. If your data is held by a merchant whose advertising we operate rather than by us directly, we will route your request to that merchant.

Retention

Server logs: up to 90 days. Raw webhook event payloads: up to 90 days. Aggregate campaign metrics: indefinitely, in anonymized form. Hashed identifiers: retained in uploaded audiences for the lifetime of the audience on the destination platform; local copies are deleted once the audience is uploaded.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date at the top of the page.

Contact

For any privacy inquiry or data subject request: hello@mccarthymking.online