The short, honest version.
Last updated 16 August 2026
I collect the details you hand me, use them to do the thing you asked for, and don’t sell them to anyone. Ever. Here’s the detail.
01Who I am
Topham & Co Pty Ltd, trading as Ash Topham. ABN 19 651 331 770. An Australian business, working with brands anywhere.
02What I collect
Only what you type into the forms on this site: your name, email, website, Meta spend band, and anything you tell me about your ads. The 90-second diagnostic also saves your answers and result, so my reply isn’t generic. That’s it. No hidden collection.
If you buy something, add your billing details and what you bought. Your card details never reach me. Stripe handles those, and I only ever see the name, email, address and the receipt.
03Why
To send you the thing you asked for, an audit, a quiz result, the checklist, and at most one follow-up, exactly as it says next to every form. No sequences, no drip campaigns, no “just bumping this to the top of your inbox.”
04Tracking
This site uses the Meta pixel, yes, the same one I audit for a living. It tells Meta which pages you visit so I can measure and run my own ads. You can limit how Meta uses this in your Facebook ad preferences, or block it with any standard ad blocker and the site works exactly the same. Beyond the pixel, no other analytics trackers.
05Who else touches your data
Netlify hosts this site and stores form submissions. My email provider carries our emails. Stripe takes the payments, which means it holds your card, your billing address and the invoice, and it’s the one part of this list that legally has to keep records. Meta receives pixel data (see Tracking, above), and touches anything more only if you choose to grant view-only access to your ad account, access you control and can revoke anytime, inside your own Business Manager. That’s the whole list.
06If you’re a client
Your ad account numbers and your monthly reports sit on a private link. It isn’t indexed and it isn’t linked from anywhere on this site. I don’t share any of it, and if I ever want to use a report as an example, name taken off, I ask you in writing first and a no is a no. The rest of that deal is in the agreement.
07Opting out
Reply “no thanks” to any email and that’s the end of it. Want your details deleted? Ask, and it’s done. You also have rights under the Australian Privacy Principles, which this policy is written to honour, but mostly it’s just good manners.