Privacy policy

Effective September 21, 2026

This policy explains what information the LMR Client Dashboard (the “Dashboard”) at dashboard.marketinglmr.com handles, where it comes from, what it is used for, and who can see it. The Dashboard is run by LMR Digital Marketing (“LMR”, “we”).

Who this policy covers

• Team members who sign in to the Dashboard.
• Clients of LMR, and people acting for them, who connect a Google account so that we can report on their Google Analytics, Search Console or Google Ads data.

Information the Dashboard handles

Account information

When you sign in, we receive your email address and, if you sign in with Google, your name and profile picture. If you sign in with a password, the password is stored in hashed form by our authentication provider and we cannot read it. We keep a record of your role in the Dashboard.

Google user data

When a Google account is connected to the Dashboard, Google asks the account holder to approve read access to the following. The Dashboard requests nothing beyond this list.

• Google Analytics (analytics.readonly): website traffic reports such as sessions, users, traffic sources and conversions for the properties the account can see.
• Google Search Console (webmasters.readonly): search performance reports such as queries, pages, clicks, impressions and average position for the sites the account can see.
• Google Ads (adwords): advertising reports such as spend, clicks, conversions and cost per conversion for the accounts the Google account can see. Google offers a single permission for Google Ads. The Dashboard uses it to read reports and does not create, change or pause campaigns, budgets or ads.
• The email address of the connected Google account, so that we can tell connected accounts apart.

The Dashboard does not read Gmail, Google Drive, Calendar, Contacts or any other Google product.

Data from other connected services

For each client, the Dashboard may also read reports from other tools that client uses with us:

• Lead and enquiry records from the client’s CRM (HubSpot). These can include the names and contact details of people who enquired with the client, along with the source and status of each enquiry.
• Search ranking data for the client’s website from a rank tracking provider.
• Social media publishing and performance data from a social scheduling tool.
• Tasks and content records from LMR’s own project management system.

Content added by the team

Meeting notes, talking points, action items, benchmark figures and any screenshots a team member uploads while preparing a client meeting.

Technical information

Our hosting provider keeps standard server logs, which include IP address, browser type and the time of each request. The Dashboard uses the cookies and browser storage needed to keep you signed in. It does not use advertising cookies or third-party analytics trackers.

How the information is used

The Dashboard uses this information for one purpose: reporting on a client’s marketing to that client and to the LMR team working on their account. In practice that means:

• showing reports, charts and comparisons inside the Dashboard;
• preparing and presenting client meetings, and exporting a summary of a meeting to our project management system;
• spotting changes that need attention, such as a drop in rankings, and creating tasks for the team;
• keeping the Dashboard secure and fixing problems.

How Google user data is used, stored and shared

Use. Google user data is used only to produce the reports described above for the client the data belongs to. It is not used for advertising, is not sold, is not used to build profiles of individuals, and is not used to train artificial intelligence or machine learning models.

Storage. When a Google account is connected, we store the access credentials Google issues (an OAuth refresh token) and the email address of the connected account. The credentials are stored in our database and are used only by the Dashboard’s server. They are never sent to a browser. Most Google data is read from Google at the moment a report is opened. To keep reports fast and to show trends over time, we also store summary figures taken from those reports, such as weekly totals.

Sharing. Google user data is visible to authorised LMR team members and, during reporting meetings, to the client it belongs to. We do not share it with anyone else, except with the service providers listed below who host the Dashboard for us, or where the law requires it. One client’s data is never shown to another client.

Human access. LMR team members view Google user data in the form of reports, because reporting is the purpose of the Dashboard and the reason access was granted.

Limited use. The Dashboard’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Service providers

We use a small number of providers to run the Dashboard. They process data on our behalf and only to provide their service to us.

• Supabase: database, file storage and sign-in.
• Vercel: website hosting.
• Google: sign-in, and the Analytics, Search Console and Ads reporting services.

How long information is kept

• Google access credentials are kept until the account is disconnected, the client stops working with LMR, or deletion is requested, whichever comes first.
• Stored report summaries and meeting records are kept while the client works with LMR and for a reasonable period afterwards for our business records, unless deletion is requested.
• Team member accounts are removed when a person no longer needs access.

Your choices

• Withdraw Google access. You can remove the Dashboard’s access to your Google account at any time at myaccount.google.com/permissions. The Dashboard can no longer read your data once you do.
• Ask for deletion. Email lauren@marketingbylmr.com and we will delete the stored credentials and any stored report data for your account within 30 days, unless the law requires us to keep it.
• Ask what we hold or ask for a correction. Email lauren@marketingbylmr.com.

Depending on where you live, you may have further rights under local privacy law. We will honour any request the law entitles you to make.

Security

The Dashboard is served over an encrypted connection. Access requires a sign-in issued by LMR. Google credentials are held on the server and are not exposed to browsers. No system is perfectly secure, and if we learn of a breach affecting your information we will tell you as the law requires.

Children

The Dashboard is a business tool. It is not directed to children and we do not knowingly collect information from anyone under 16.

Changes to this policy

If we change how the Dashboard handles information, we will update this page and the effective date above before the change takes effect. If a change affects how we use Google user data, we will ask connected account holders to agree before we use their data in the new way.

Contact

LMR Digital Marketing
lauren@marketingbylmr.com