Prebo Digital

Featured Articles

Stay ahead with our latest insights and proven strategies

SEOCROWeb DesignGoogle AdsMarketing for AmazonSocial Media Ads
Get a Quote

Latest Articles

Professional cro best practices imageCRO

Local Direct Mail Strategies: Turning a Suburb Mail Drop Into a Measurable Digital Channel

Context: a ZAR 45,000 mail drop across three Johannesburg suburbs Picture a home-services operator in Johannesburg - say, an installer of home security and gate automation working the northern suburbs. They already run a digital funnel (Google Ads, Meta retargeting, a booking form wired into their CRM) and want to reach households in three adjacent suburbs their search budget never quite touches. Their plan is a physical mail drop: roughly ZAR 40,000-60,000, an illustrative estimate covering print, list, postage and creative across a few thousand households. Most operators run that drop, get a vague trickle of calls, and never know whether it worked. The alternative is to treat the drop as a channel with the same discipline as paid search: clean list, identifiable response events, a defined response window, and a cost per response expressed in rand. The framing principle: a mail drop is not a brand exercise, it's a geo-fenced acquisition channel. If you cannot attribute a response to it, you cannot optimise it. How a physical drop behaves differently to a feed impression A feed impression is fleeting and paid for per thousand. A mailer sits on a kitchen counter and is seen repeatedly by the same household over days. Keep the claim qualitative - we are not asserting response rates - but the implication matters: the mailer can carry a proposition too long for a 6-second ad and survive a distracted scroll. The trade-off is that physical mail gives you no platform dashboard: no trustworthy impression count and no automatic conversion tracking. Everything measurable has to be engineered into the piece before it goes to print. Building the list: geo-selector, address hygiene and suppression before anything else List quality is the binding constraint on a local direct mail strategy. Work in this order: Geo-selector by suburb: define exact suburb boundaries, or build by postcode-plus-street segments so you can report by segment later. Address correction and de-duplication: one household, one mailer - duplicates are pure waste and look careless. Suppression list: existing customers, staff addresses, recent complaints, and anyone who has asked not to be mailed. This list must persist between drops. If your data team already cleans conversion data before it reaches GA4, apply the same hygiene to a postal file. A dirty postal list produces the same problem as dirty analytics: confident decisions made on wrong inputs. POPIA and the direct-marketing boundary: what physical mail does and does not permit South Africa's Protection of Personal Information Act (POPIA) draws a distinction between electronic direct marketing - where consent and opt-out rules bite hard - and physical mail, which sits on different footing. That does not make addressed or unaddressed mail a compliance-free zone. It means you need a defensible, documented process: where the list came from, how you handle opt-outs, and how you record suppression. Do not rely on this article for legal advice. Check your process against the Information Regulator and DMASA guidance, and get your own legal sign-off before a large drop. The bridge: turning a delivered mailer into a measurable digital event (QR, short link, UTM) The whole channel lives or dies on this step. Every mailer needs a unique, attributable route back to your site: A short offer code printed on the piece, unique per suburb or drop wave, so a phone or in-store redemption can be traced. A QR code pointing to a short-link or PURL that redirects to a landing page with campaign parameters attached. UTM parameters on the destination so GA4 records the visit as a distinct source, not stray direct traffic. https://go.yourdomain.co.za/northgate-home ?utm_source=direct_mail &utm_medium=print &utm_campaign=northgate_q3 &utm_content=mailer_a &utm_id=drop_2026_03 Follow Google's UTM conventions so naming stays consistent with your paid channels, and route the landing page through the same CRO testing regime you apply to ad traffic - see our conversion rate optimisation services for how that typically runs.

Nov 9, 20266 min read
Read more
ppc campaign dashboard dashboard interface for professional useGoogle Ads

Local PPC in Roodepoort: Targeting a Town That Isn't One Place

Context: One 'Roodepoort' Campaign, Two Very Different Sets of Customers Imagine a hypothetical Wilropark-based appliance repair business running one Google Search campaign set to 'Roodepoort (city)' plus 'Johannesburg' with presence-or-interest. After a month, most conversions show up in Florida and Florida Park, while a meaningful slice of spend leaks to Johannesburg CBD and Krugersdorp. The map looks right, but the customers aren't. This is the core problem with treating Roodepoort as one place. Roodepoort is a cluster of suburbs-Wilropark, Constantia Kloof, Helderkruin, Honeydew, Ruimsig, Little Falls, Discovery, Florida-each with its own driving patterns, income bands and search behaviour. A single city targeting setting cannot distinguish between them. Why 'Roodepoort' Is Not a Single Targeting Unit on Google Ads Google Ads location targeting uses a geographic taxonomy grouping areas into cities, regions and countries. Roodepoort is officially part of the City of Johannesburg metropolitan area, so setting 'Roodepoort' often pulls in a broader region than you expect-or a narrower one, depending on how Google defines the boundary. 'Roodepoort' might include Constantia Kloof but exclude parts of Ruimsig under a different suburb label. Never assume a city name matches your service area: use the location search tool to see exactly which suburbs each option includes, and cross-check against your delivery or service radius. Presence vs Presence or Interest: The Toggle That Decides Who Sees Your Ad The default is 'Presence or interest', showing ads to people physically in your target area or who have shown interest in it. For a local plumber or electrician, this wastes budget on someone in Sandton who once searched for 'Roodepoort electrician' but won't hire locally. 'Presence' ensures only people actually in the area see the ad-critical for time-sensitive services. For home services, set 'Presence' first. Only test 'Presence or interest' if you have evidence people outside the area travel in for your service (e.g., a specialist clinic). City, Radius or Location Group: Choosing the Right Method for a West Rand Business Each method solves a different problem. Use the table below as a starting point. Method Best for Example in Roodepoort Watch out for City targeting National brands with local presence A retail chain with a store in Wilropark Mall May include neighbouring suburbs you don't serve Radius targeting Service businesses with a driving limit A pool service covering 15 km from Ruimsig Overlaps other suburbs; can include areas across a highway Location group (suburb list) Businesses targeting specific suburbs A legal firm wanting only Florida and Constantia Kloof Requires precise suburb selection; may miss adjacent areas When a 5-10 km Radius Beats City Targeting If travel time and cost matter-appliance repair, plumbing, mobile beauty-a tight radius around your base is more efficient. A 10 km radius from Wilropark covers Florida, Constantia Kloof and parts of Helderkruin while excluding Johannesburg CBD, cutting wasted clicks from people too far to serve. When a Suburb Location Group Beats Both To target high-value suburbs without radius spillover into industrial or low-income areas, a location group of individual suburbs is more precise. A financial advisor might target only Constantia Kloof and Little Falls, where property values and income align with their services. Why 'Roodepoort vs Johannesburg' Confusion Wastes Budget Adding 'Johannesburg' as a secondary location can dilute local intent and raise cost per acquisition (CPA). Someone searching from Sandton is less likely to convert for a Roodepoort business. Use separate campaigns per city and allocate budget from historical conversion data, not guesswork. Building the Core Campaign: Search Structure for a Local Service Business Start with one campaign per service category (e.g., 'Appliance Repair' and 'Geyser Installation') and ad groups per suburb or suburb cluster. Use exact and phrase match for high-intent keywords like 'appliance repair Roodepoort' and 'geyser repair Florida'. Keep broad match for discovery but monitor the search terms report weekly and add negatives aggressively. Modelling a ZAR Budget Before You Spend It Before setting a daily budget, calculate your break-even cost per lead from gross margin and close rate. The example below assumes a 40% gross margin and 25% close rate. // Hypothetical break-even CPL calculation const averageJobValue = 2500; // ZAR const grossMargin = 0.40; const closeRate = 0.25; const breakEvenCPL = averageJobValue * grossMargin * closeRate; console.log(breakEvenCPL); // 250 Here you can afford up to R250 per lead. If actual CPL is higher, raise close rate, raise prices, or cut cost per click. Treat this as a guardrail, not a target.

Nov 9, 20266 min read
Read more
ppc-and-digital-marketing — google-ads heroGoogle Ads

Geo-Targeted Display Ads: Controlling Where Your Display Budget Actually Lands

Display budget does not leave an account loudly. It leaves quietly, one impression at a time, through a location setting nobody re-read after launch. Context: A Multi-Region Retailer, One 'South Africa' Campaign, and Spend That Travelled Picture a hypothetical online retailer with fulfilment nodes in Gauteng, Western Cape and KZN, running a single display campaign at roughly R80,000 a month with 'South Africa' as the only location target. The monthly review shows strong impression volume and weak regional revenue correlation. Pulling the locations report reveals impressions from users Google judged as having shown interest in South Africa while browsing elsewhere, plus spend in provinces the retailer delivers to slowly and expensively. Nothing was broken. The campaign simply answered a question nobody had asked: who is interested in this market, rather than who is in it. What Geo-Targeting Actually Controls on the Display Network Location targeting on display sets a geographic filter against Google's estimate of where a user is. It is not an audience, and it is not a delivery guarantee. Critically, location acts as an AND condition with your other targeting: adding audiences, placements or keywords narrows reach, never widens it. Display compounds this because broad placements interact with how Google resolves location, so a loose location setting plus broad placements is where leakage concentrates. Presence vs Presence or Interest: The Setting That Decides Where Money Goes Google Ads offers two location options. Presence targets people in or regularly in your locations. Presence or interest also reaches people who have shown interest in those locations while physically elsewhere. Interest matching is legitimate for a South African brand deliberately selling into the UK, EU or Middle East diaspora. It is corrosive when it is the default left unexamined on a domestic campaign. Warning: leaving 'presence or interest' on a domestic display campaign lets budget reach users who never enter your delivery footprint. Change this deliberately, not by default. Country, Region, City, Radius or Location Group: Choosing the Method Method Best for Trade-off Country Cross-border retail or SaaS with global reach Very broad; mask leakage hides inside it Region / province Provincial delivery zones and fulfilment nodes Coarse within dense metros City Metro-level regional campaigns Metro boundaries do not match service reality Radius / postcode Service areas and store catchments Precision demands maintenance as you grow Location groups Business-location-linked targeting Requires accurate linked business data Building a Region → City → Radius Structure That Survives Scale Structure geographically in layers rather than in one campaign. Start at region, split into city campaigns where delivery economics differ, and reserve radius targeting for service catchments or store trade areas. Keep a shared negative location list at account level so unserviceable areas and cross-border traffic are excluded once, consistently. On a display-first account, this structure is what makes geo reporting legible when you later segment performance.

Nov 8, 20265 min read
Read more
space gray iPhone 6 with Facebook log-in display near Social Media scrabble tilesSocial Media Ads

Local Facebook Ads for Small Business: A ZAR Budget Playbook for South Africa

Context: A R6,000-a-month plumbing outfit in Cape Town and the boosted post that sold nothing Picture a two-van plumbing business in Cape Town with a R6,000 monthly Facebook budget. The owner boosts a photo of a geyser install and watches the likes climb. But the phone rings with people asking whether the business services Khayelitsha, and with one tourist in Sea Point wanting a same-day callout. The reach number was healthy. The diary was empty. A boosted post is engineered to buy engagement; a campaign built in Ads Manager is engineered to buy a named business event - a message, a call, a form fill. For an owner-run South African service business, that gap is usually the gap between a wasted R6,000 and a month of paying work. Boosted post or Ads Manager campaign: what actually changes when you leave the blue button The boost button locks you into one objective (engagement), limited placement control, minimal audience refinement and no optimisation around a chosen conversion event. Ads Manager gives you four levers that matter: Lever Boosted post Ads Manager campaign Objective Engagement Leads, Messages, Calls, Sales Audience Broad, minimal refinement Radii, lives-in toggle, exclusions Placement Largely automatic Testable, Advantage+ or manual Conversion event None Chosen and optimised against Choosing the objective is choosing what the algorithm hunts for on your behalf. Meta's own guidance on ad objectives is worth reading before you commit; the practical translation: Objective → best-fit local business → lead surface Objective Best fit Lead surface Messages Trades, mobile beauty therapists WhatsApp click-to-chat Calls Emergency plumbing, locksmiths Phone number Leads Single-location retail, clinics Form with source question Awareness rarely fits a business whose next rand depends on a booking this week. Optimise for the action a customer can take on their phone in under a minute. Local radius targeting: pin, radius, and the lives-in versus recently-in toggle This is where most small budgets leak. Set your location to a pin drop on your workshop or salon, not just a city name, and choose a radius you can actually service - a beachhead of 5-10 km is often enough. Then open the toggle between people living in this location , people recently in this location , and people travelling in this location . For a service business, default to lives in . A plumber cannot fix a geyser for someone passing through on the N2. Meta's own location targeting documentation explains the toggle; the decision is yours. If you sell to tourists, holiday-let managers or commuters deliberately, keep recently-in on. If your revenue comes from a local address, switch it off and re-check after every edit. Creative built for a suburb, not a feed Local credibility is a creative decision. A stock photo of a smiling model says nothing. The ad that works names the suburb, states 'serving [area]', shows the physical address or the actual van with a phone number, uses staff faces, and leads with an offer - a free quote, a first-service discount, a same-week booking window. Proof beats polish: a before-and-after from a job down the road outperforms a studio shot on a R6,000 budget. Special ad categories: when an estate agency or bond originator must declare If you advertise housing, employment or credit-related services, Meta requires you to declare a special ad category, and the declaration restricts radius and age refinement. South African estate agents and bond originators fall squarely into this net. Check Meta's special ad categories guidance before you build, because discovering it after launch means rebuilding the audience.

Nov 8, 20266 min read
Read more
Professional google ads specialist management for companies south africa imageGoogle Ads

Google Account Sync Across Devices in South Africa: A Team Decision Framework for Data Cost, POPIA and Reporting Accuracy

The Pretoria East Scenario: Six People, Four Screens Each, and a Calendar That Disagrees (Hypothetical Illustration) A six-person marketing team in Pretoria East runs a Google Ads account and a GA4 property for an e-commerce client. The account manager checks spend on the client's Ads account from her personal phone on Friday evening. On Monday her laptop shows the budget-review stand-up at 09:00; her phone shows 10:00. The media buyer sees a stale Drive budget sheet on his tablet. No password changed, no access revoked. The cause is ordinary: the client's Workspace calendar (.co.za tenant) and the team member's personal Gmail are two separate identities, and each device is partially synced to one of them. This is the crux of the Google account sync across devices question in South Africa. It is rarely a single bug. It is a decision about which identity, on which device, syncs which surface - and what that means for reporting accuracy and data cost. Sync is not one setting. There is no master 'Google account sync' toggle. Each Google product syncs its own content under its own control, and signing out on one device does not sign out other sessions elsewhere. What 'Google Account Sync Across Devices' Actually Means - and What It Is Not Google documentation is consistent: sync is per-product. Chrome sync covers bookmarks, history, passwords, settings, extensions, open tabs and payment methods, and is governed separately from Google Activity controls. Chrome sign-in can also be a different session from Chrome sync - a distinction most tutorials blur. On Android, Contacts, Calendar, Gmail, Drive, Photos and Keep sync under Settings > Accounts > Google > Sync, each togglable. On iOS, each Google app syncs individually; the system Accounts integration only surfaces Gmail, Calendar and Contacts. Workspace adds layers: Google Workspace Sync for Microsoft Outlook (GWSMO) , Drive for desktop, and admin-controlled device policies. The Sync Layers, Product by Product: A Reference Table for SA Teams Surface What Syncs Where to Control It SA Team Note Chrome Bookmarks, history, passwords, extensions, tabs, settings Chrome settings → You and Google → Sync Keep personal and client profiles separate Android Contacts, Calendar, Gmail, Drive, Photos, Keep Settings → Accounts → Google → Sync Per-content-type toggles; Wi-Fi-only is defensible iOS apps Individually per app (Gmail, Drive, Calendar) Inside each Google app System Accounts covers Gmail/Calendar/Contacts only Workspace GWSMO, Drive for desktop, managed Chrome profiles Admin console + local sync clients Admin policy can override user choice Chrome Sync vs Google Account Sign-In: The Distinction Most Teams Miss Signing into a Google account in Chrome is not the same as turning on Chrome sync. A media buyer can be signed into a client's Google Ads account without that identity's history, passwords and tabs syncing to every device. Teams that conflate the two end up with personal browsing history on a shared client laptop - a POPIA-relevant convenience risk. Workspace admins can enforce Chrome optimised profiles to keep work and personal profiles separate on the same machine. Android, iOS and the Workspace Surface: Where Cross-Device Consistency Breaks Down Consistency breaks at three seams: personal Gmail on Android plus Workspace on desktop (different calendars and contact sets); iOS apps syncing individually (Drive current on iPad while Calendar is stale); and Microsoft-centric offices where GWSMO syncs work mail into Outlook on desktop, but the phone only sees Workspace mobile apps. Why South African Teams Face a Different Sync Question: Consumer Gmail Meets the .co.za Workspace Tenant The defining problem in South Africa is mixed identity. Many agencies and in-house teams run a .co.za Workspace tenant for company mail and calendars while staff still use a personal Gmail on their phones for the Google Ads app, Maps and YouTube. A shared client Calendar invite then has two different views. Add costly mobile data, load-shedding and intermittent connectivity, and sync becomes a business decision rather than a preferences tweak.

Nov 8, 20266 min read
Read more
Professional conversion optimisation south africa imageCRO

Google Account Password Change Procedure in South Africa: A Credential-Rotation Runbook for Marketing Teams

The Centurion Scenario: A Password Changed in Haste, a Reporting Pipeline Gone Quiet Picture a mid-sized e-commerce brand on the outskirts of Centurion. A marketing manager resigns on a Friday. By Monday the remaining team has changed the shared Google login password - the same login that owns Google Ads billing, GA4 property admin, and the GTM container. Nobody screenshotted anything first. Two days later the paid team notices conversions reported by Google Ads no longer match GA4, and a Tag Manager integration has silently stopped firing. No one can say which change caused it. That sequence - not the password change itself - is the problem this runbook solves. This is a credential-rotation procedure for marketing teams, focused on the moment of rotation and the checks most teams skip afterwards. A password change is a security event with commercial side effects. Treat it as a controlled change, not a panic response. What a Google Password Change Actually Does - and What It Leaves Untouched Three facts matter, and all three surprise teams: Changing your password does not sign you out of every device by default. Google exposes a separate control for reviewing devices and signing out of all sessions. Changing your password does not revoke third-party OAuth access you previously granted at myaccount.google.com/connections . Those tokens keep working until you remove them. Google Ads has no separate password . It rides on the Google Account, so the account password and 2-Step Verification are the real security controls for your ad account. Consumer Gmail vs Google Workspace .co.za: Two Different Password-Change Routes Dimension Consumer Gmail Google Workspace (.co.za domain) Who changes the password The account holder The user, or an admin via the Admin console Password policy Google's default guidance Admin-enforced policy and 2SV requirements Recovery Recovery email/phone Admin reset plus recovery options Step 1: Audit What the Login Owns Before You Rotate Anything Recovery options alone do not protect a login that owns ad accounts, reporting properties and tag containers. Billing ownership for Google ad accounts Admin-level access on GA4 properties and data streams GTM container publish rights Merchant Center account ownership Any CRM or reporting connector using the login The Google Account Password Change Procedure, in the Correct Sequence Run the six steps in order: audit → change → manage sessions → review third-party access → verify tooling → record. [ ] Audit what the login owns (Ads, GA4, GTM, Merchant Center, CRM) [ ] Document it before any change [ ] Change the password [ ] Sign out of all devices / review active sessions [ ] Review third-party access at myaccount.google.com/connections [ ] Verify Ads, GA4 and GTM still work [ ] Record the rotation date and owner Step 2: Change the Password Itself Follow Google's official route: visit the account security page, choose the password option, and re-authenticate to confirm. Use a unique, long password stored in a shared password manager, not a spreadsheet. If this is a Workspace identity, confirm whether your admin's password policy applies before you choose the format.

Nov 7, 20265 min read
Read more
google-ads-agency — google-ads heroGoogle Ads

Google Account Delegated Access Management in South Africa: The Grant, Review and Revoke Playbook for Ad Accounts

The Stellenbosch Scenario: A Retainer Ends, and Three Logins Outlive It A hypothetical B2B software firm in Stellenbosch ends a six-month retainer with a freelance Google Ads buyer. Three months later, the marketing manager finds the contractor still holds Standard access to Google Ads, a stale OAuth token is pushing conversion data into a third-party dashboard, and the freelancer is a delegated owner on Search Console. None were granted maliciously - they were simply never revoked. This is the delegate-to-revoke gap South African marketing teams must close systematically. Delegated access management is not about trusting partners less. It is about building a lifecycle - grant, review, revoke - that survives staff turnover, agency changes and the common SA pattern of an in-house team working alongside one agency and one freelancer on the same account. What 'Delegated Access' Actually Means Across Four Google Surfaces Google uses the word 'access' across four distinct systems, each with its own permission model, revocation path and failure mode. Surface What You Delegate Where It Is Set Common Roles Google Ads Campaigns, billing and users Tools & settings → Access and security Admin, Standard, Read-only, Emails-only Search Console Property data and settings Settings → Users and permissions Owner, Full, Restricted Google Workspace Admin roles, email delegation, API scopes Admin console → Directory / Security Super admin, delegated admin, Gmail delegate Google Business Profile Listing management Business Profile Manager Primary owner, Manager Grant Access Without Handing Over the Keys: The Client-Owned Account Model The most effective control is structural: the client retains ownership of the Google Ads account, and the agency operates from its own manager account (MCC) with access granted. Never reverse this. When the client owns the account, revocation is one action - removing the MCC link - and data, billing profile and change history stay under client control. This is how Prebo Digital's Google Ads practice operates: the client holds the account, the agency holds delegated access, and the relationship can end cleanly without a migration project. Rule of thumb: if the agency created the account, request ownership transfer before the first invoice. A client-owned account also keeps billing on the client's payment profile, simplifying POPIA accountability and VAT documentation. The Minimum Viable Access Matrix: Matching Role to Permission Level Over-granting is the default failure mode. A reporting analyst does not need Standard access; a media buyer should not hold billing rights. Use this matrix as a starting point and document every exception. Role Google Ads Level Search Console Notes Reporting analyst Read-only Restricted No billing, no user management Media buyer Standard (billing off) Full Can edit campaigns, cannot change payment Strategy lead Standard Full Same as buyer; no admin rights Billing / owner Admin Owner Named client staff only, never agency Watch the Emails-only level. It looks harmless, but still exposes the account email address and can receive account notifications - a subtle exposure point when a contractor leaves. Remove it alongside Standard access. Why .co.za Workspace Domains and Consumer Gmail Logins Behave Differently Many South African marketing teams run the Ads account on a consumer Gmail address rather than a verified .co.za Workspace domain. A consumer login has no admin console, so there is no central place to revoke OAuth grants or audit app access. With Workspace, an admin can control app access by organisational unit and see login events. On a personal Gmail, the only revocation path is the owner visiting myaccount.google.com/connections - and if that owner has left, it becomes a recovery problem. Where possible, migrate the Ads account to a Workspace group email (e.g. ads@yourcompany.co.za ) so access follows the role, not the person. The Grant Checklist: What to Confirm Before Day One of a Retainer Second admin exists on the client side, with 2-Step Verification confirmed. Access is granted to a Workspace group email, not an individual's personal Gmail. Billing profile remains under client ownership and is not shared with the agency. MCC link is recorded in the access register with date and requesting party. Search Console ownership stays with the client; agency receives Full or Restricted. Third-party tools connect via a shared service account, not a personal OAuth token.

Nov 7, 20267 min read
Read more
google-ads-services — google-ads heroGoogle Ads

Google Account Data Export Tool for South Africa: Mapping the Five Export Surfaces Before You Buy

The Melrose Arch Meeting Where Three Dashboards Disagreed (Hypothetical Scenario) Picture a marketing director at a Johannesburg consumer brand opening a Monday finance review. The Ads UI shows R412,000 of attributed revenue for the month. GA4 shows R368,000. The CRM shows R341,000. Nobody is hacking the account. All three numbers are technically honest, and none of them can be reconciled quickly because the exports behind each dashboard were pulled on different days, from different surfaces, with different definitions of a conversion. The phrase "google account data export tool" implies a single switch that dumps everything into one tidy file. In practice, a Google account is a federation of surfaces, each with its own export mechanism, its own owner, and its own idea of what a session or a conversion is. The Five Export Surfaces, Side by Side Before comparing vendors, map what you are actually exporting. South African teams typically touch five surfaces: Google Takeout - a personal-account archive covering Gmail, Drive, Calendar and more. Useful for data-subject requests and offboarding, not for marketing reporting. Google Ads - campaign, cost and conversion data pulled via the Ads API or scheduled reports. Versioned and retired on a rolling schedule. GA4 - event-level data, best exported to BigQuery rather than CSV, because sampling and thresholds distort large pulls. Search Console - query and page performance, available through the bulk export to BigQuery or the API for smaller volumes. Workspace - admin-level exports of org data, governed by admin roles and audit logs rather than marketing definitions. Each surface has a different format, refresh cadence and access model. A tool that handles Ads well may not touch Search Console bulk export at all. That is why the buying question is not "which tool exports Google data" but "which surfaces does it cover, and how does it reconcile them". Why the Numbers Diverge: Definitions, Timing and Consent The Melrose Arch gap is rarely a bug. Ads reports at click time with the longest attribution window. GA4 applies consent-mode modelling and session-based deduplication, so a user who converts across two sessions may be counted once or modelled rather than observed. The CRM reflects refunds and returns that were never back-fed to Google. Add time-zone mismatches - a property set to UTC versus a team reporting in SAST - and a month boundary alone can shift a day of revenue. Documenting these causes is the difference between a reconciled number and a monthly argument. Vetting a Third-Party Export Tool Against POPIA Under POPIA, exporting personal data to a third-party tool makes that vendor an operator, and section 21 requires a written contract with security safeguards. Ask four questions before signing: which OAuth scopes does the tool request (read-only versus write access); where does the data land geographically; does it retain raw event data and for how long; and can it answer a data-subject access or deletion request within a reasonable window? A tool that cannot answer these in writing is a compliance risk, not a shortcut. What to Compare on the Shortlist Score candidates on surface coverage (all five or a documented subset), export destination (cloud storage versus local download), scheduling and retry behaviour, credential handling, and total annual cost in ZAR including FX and VAT. A cheaper monthly headline can lose on the annual figure once connector fees and BigQuery storage are added.

Nov 7, 20265 min read
Read more
seo-and-google-ads-integration — google-ads heroGoogle Ads

Google Account Linked Services Audit for South Africa: A Handover Playbook for Ad Accounts

The Umhlanga Scenario: A New Agency, an Old Token, and a Reporting Number Nobody Trusts A KwaZulu-Natal consumer-goods brand moves its paid media to a new agency. This is a hypothetical scenario. The marketing director hands over admin access on a consumer Gmail identity, campaigns look healthy, yet reported conversions in the new agency's dashboard are roughly double what the brand's order data suggests. The cause is often mundane: a previous agency's reporting tool still holds OAuth scopes over that login, a GA4 property link survived the handover, and nobody mapped the payments profile. That gap between platform-reported and true numbers is why a Google account linked services audit matters before anyone touches bids. It is not a security product, and Google publishes no native 'linked services audit report' - you build the inventory yourself from four distinct screens. What a Linked Services Audit Is - and What It Is Not A linked services audit is a written inventory of every external app, service link, tenant-level grant and billing surface attached to a Google login that controls ad spend or measurement. It is not activity forensics, a billing setup guide, or a Workspace build - those are separate disciplines. Do the inventory before you grant or revoke anything. Revoking a link you don't understand can break reporting or billing mid-flight. Layer 1: Third-Party OAuth Connections at myaccount.google.com/connections This screen lists every app and service a person has granted access to their Google Account. It is per-identity, not per-organisation - which is why a marketing director's personal Gmail is often the riskiest login in the estate. Auditing it means reading each grant's scopes, not just its name. How to Read an OAuth Grant: Scopes, Send-As and the 'Analytics Readonly' Problem A grant labelled 'Analytics Readonly' sounds harmless until you notice it also carries Gmail send-as or Google Ads edit scope bundled into the same consent. Scope creep is the norm. Record, per grant: the app name, the scopes listed, the date last used, and whether the business still holds a contract with that vendor. myaccount.google.com/connections # OAuth grants per identityads.google.com > Admin > Access # who can enter the Ads accountgoogle.com/analytics > Admin > Product linksadmin.google.com > Security > API controls > App access controlpay.google.com > Settings # payments profile ownership Layer 2: Google Ads and GA4 Service Links That Outlive the Login Separate from OAuth, Google Ads holds its own linked-account relationships: Analytics, Merchant Center, Search Console, YouTube, Business Profile and Play. GA4 holds product links of its own. These links persist beyond individual user access - removing a person from the Ads account does nothing to sever a GA4 property still feeding conversions into the campaign. Check both directions and note which links are still commercially intended. Reconciling the Four Layers: What Each Can Do in the Wrong Hands Layer What it can do if left in the wrong hands Who normally owns the fix Where the screen lives OAuth app grants Read mail, pull Analytics, or write to Ads via a stale token The individual account holder myaccount.google.com/connections Ads / GA4 links Skew conversion data, retain visibility of spend and audiences Ads admin or GA4 admin Ads Admin; GA4 Admin > Product links Workspace app access Tenant-wide data exposure across the .co.za domain Workspace super admin Admin Console > Security > API controls Payments profile Control of ZAR billing, cards and spend continuity Finance owner or brand pay.google.com > Settings If you'd rather have the paid-media side handled alongside the audit, see our Google Ads management service .

Nov 6, 20265 min read
Read more
Electrical meter and fuse box on a white wall in Cape Town, South Africa, for energy monitoring or billing.Google Ads

Google Account Activity Monitoring in South Africa: A Change-Forensics Playbook for Ad Accounts

The Sandton Scenario: A ROAS Drop, a Former Contractor, and a 2am Budget Rule A Sandton-based e-commerce brand sees ROAS tumble from 4.2 to 2.8 over a weekend. The team blames creative fatigue. Then someone notices a campaign budget was doubled at 02:13 on Saturday - by an account that still carried a former contractor's email. The contractor had been offboarded from payroll three months earlier, but nobody revoked their Google Ads access. This is not a login problem; it is a change-integrity problem. The same pattern repeats across South African marketing teams: a GA4 configuration change, a GTM tag paused, or a budget rule altered without a record of who did it. Monitoring Google account activity is how you rebuild that record. Warning: Monitoring logs can themselves contain personal information. Under POPIA, define a lawful purpose, tell staff what is logged, and set a retention limit. This article is not legal advice; consult counsel before implementing monitoring. What 'Google Account Activity Monitoring' Actually Means Across the Three Accounts in Play The phrase is overloaded. In South African ad teams it usually refers to one of three distinct surfaces, each answering a different question: Personal activity (My Activity): What a signed-in user did across Google services - searches, YouTube views, location history, ad personalisation. It is a consumer privacy dashboard, not an audit trail for business changes. Security and Workspace logs: Login events, admin actions, Drive changes, and the Security Investigation Tool. This answers “who accessed what, from where, and when” at the identity layer. Marketing change forensics: Google Ads Change history, GA4 Change history, and GTM Version history. This answers “what changed in the campaign or measurement setup, by which user, at what time.” The Sandton scenario lives in the third category, but you need the second to prove who the user was, and the first only if you are investigating a personal account’s broader activity. The table below compares the surfaces. Surface What it records Who can see it Retention Best for My Activity Personal searches, YouTube, location, ad personalisation The signed-in user (and admins only via investigation tools on some editions) User-set auto-delete (3, 18, or 36 months) Privacy hygiene, not campaign forensics Workspace Admin log events Admin actions, login events, Drive log events Workspace super admins and delegated admins Edition- and setting-dependent; check your Admin console Identity and access investigations Google Ads Change history Budget, bid, targeting, status changes with user and timestamp Anyone with Ads account access Rolling window; verify in-product for current length Attribution of performance shifts to specific edits GA4 Change history Admin edits to properties, data streams, key events GA4 admins and editors Limited; export or screenshot for long-term records Measurement configuration audits GTM Version history Container versions, tags, triggers, variables, workspaces GTM account users with publish rights Version history retained until deleted; workspaces are temporary Tracking pipeline forensics The Personal Trail: My Activity and Activity Controls Explained Without Fear-Mongering My Activity is where a user reviews and deletes their own Google service history. Activity Controls let them pause Web & App Activity, Location History, YouTube History, and Ad Personalisation, and set auto-delete at 3, 18, or 36 months. For a South African marketing team, this is relevant in two narrow cases: (1) a staff member uses a personal Gmail for work and you need to understand what data exists, and (2) an investigation requires the user to export their own activity. It is not a substitute for business-grade logging. Do not ask employees to hand over personal account credentials; instead, move work to Workspace accounts where admin logs apply. The Workspace Trail: Admin Log Events, Login Events and the Security Investigation Tool If your team uses Google Workspace, the Admin console under Reports > Audit and investigation is the identity backbone. Admin log events show who granted Ads access, changed a group, or altered an organisational unit. Login events show authentication attempts and suspicious sign-ins. The Security Investigation Tool (available on premium editions) lets you query these logs across users and time ranges. Use it to answer: did the former contractor’s account log in after offboarding, and from which IP range? Pair this with the Google Account “Recent security activity” page for individual users. This is the evidence layer that makes the marketing trail credible.

Nov 6, 20267 min read
Read more
Professional google ads strategies south africa imageGoogle Ads

Managing Google Account Billing in South Africa: The Payments Profile, VAT and Card Playbook

The Midrand Scenario: A Card Decline the Week of a Seasonal Push A Midrand direct-to-consumer brand, mid-way through a Black Friday build, sees its ads stop serving on Wednesday. Nobody touched the campaigns. The cause is a declined card on a Google Payments profile set up two years ago by a staff member who has since left. The card has expired and finance does not know which Google login owns the money layer. That is a billing-governance failure, and it is the problem this playbook addresses. Which Google Billing Are You Actually Managing? A Disambiguation Table South African finance teams regularly conflate three separate systems. Before changing anything, identify which one is on the credit card statement. Billing type What it charges Where it is managed Typical owner Google Ads Ad spend on Search, Shopping, PMax, YouTube Google Ads > Billing > Settings Performance marketer or agency Google Workspace Per-seat licence fees Admin console subscriptions IT or Workspace super admin Google Cloud Compute, storage, API usage Cloud console billing accounts Engineering This article covers the first row only: the Google Ads payments layer, where most South African budget surprises originate. The Payments Profile Is the Money Layer, Not the Login A payments profile is the standalone Google record holding the legal business name, billing address, currency, tax status and payment methods. It is not your Gmail login and not your Google Ads account. One profile can fund several Google products; one Ads account can move between profiles only within limits. This separation lets you hand ad-spend control to an agency without handing over the card, provided profile ownership is structured correctly. What Lives Inside a Payments Profile: Legal Name, Currency, Tax Status, Cards Four fields drive almost every reconciliation headache in South Africa: Legal name and address - must match the entity claiming the expense. Currency - the billing currency on every invoice. Tax status - whether a VAT number is attached. Payment methods - primary card plus, ideally, a secondary. Currency lock-in warning: the profile currency is fixed at creation. A ZAR profile cannot simply be switched to USD in place - you generally need a new profile. Set this deliberately on day one and confirm current rules in Google's documentation, since billing screens change. Automatic vs Manual Payments: Choosing by Cash-Flow and FX Exposure Automatic payments charge your card after you spend past a billing threshold or at month-end, whichever comes first. Manual payments are prepaid: you load credit, then spend it. For SA advertisers this is a cash-flow and FX decision as much as a convenience one. Factor Automatic payments Manual payments Cash-flow timing Pay after spend; less upfront cash Pay before spend; needs working capital FX exposure Rate set at charge date, varies monthly Rate fixed at top-up; predictable Risk of pause Higher if a card declines Lower; stops only when credit runs out A predictable ZAR budget line usually favours manual; a scaling account chasing demand favours automatic plus a funded backup card. See how this fits a wider reconciliation process in Prebo Digital's reporting approach . Entering a South African VAT Number and Downloading Tax Documents Services invoiced by Google Ireland typically carry VAT at the standard 15% rate, and a valid VAT number on the payments profile lets the tax treatment be reflected correctly on the tax document. Retrieve tax documents from Billing > Documents in Google Ads; statements live in the payments profile under Transactions. Download them monthly - older statements are easier to lose when staff change. Tax caveat: VAT treatment depends on your entity, VAT registration status and current rules. Treat this as a pointer to the right screens, not tax advice. Confirm with a registered tax practitioner and check the SARS VAT guidance .

Nov 6, 20266 min read
Read more
core web vitals seo web design south africa — seo heroSEO

Google Workspace Admin Console Tutorial for South African Teams: A First-14-Days Setup Playbook

The Cape Town Scenario: Twenty Staff, One Super Admin, and an Agency Knocking on the Door Picture a hypothetical Cape Town e-commerce business - around twenty staff, a .co.za domain, Shopify checkout - that has just bought Workspace through a local reseller. A performance agency has been hired to run Google Ads and GA4, and the founder has forwarded the reseller's handover email to the one person who signed up. That person is now the only super admin. This playbook sequences the first fourteen days so that gap closes before something breaks. Create a second super admin before you change a single role or policy. Role edits and 2SV enforcement can lock out the only super admin, and recovery through a reseller may take days. What the Admin Console Actually Controls - and What It Does Not Sign in at admin.google.com with a super admin account. The console governs the identity layer: who exists in the directory, how they authenticate, what apps they may install, what sharing posture their Drive inherits, and who can audit what happened. It does not govern ad performance. Ads bidding, GA4 events and Merchant Center feeds live in their own products; the console only decides who gets in. Admin Console vs Google Ads Console vs GA4 Admin: Clearing Up the Three-Way Confusion Console Governs Who should hold it admin.google.com Identities, OUs, 2SV, app access, audit logs Two super admins plus scoped admins ads.google.com Campaigns, billing, account access levels Marketing lead and named agency users GA4 Admin Properties, data streams, role grants Marketing lead; agency as Editor Day 1: Logging In, Verifying the .co.za Domain, and Creating a Second Super Admin Domain verification adds a TXT or CNAME record in the control panel of whichever registrar holds the .co.za domain - a local registrar in most South African cases. Google supplies the exact record. Verify ownership before creating users, because users created on an unverified domain sit in a fragile state if the reseller's relationship lapses. If a reseller holds super admin from handover, ask them to grant you super admin, sign in, then remove their elevated role - they do not need to remain a super admin to keep billing you. Note that Google quotes subscriptions in USD while local resellers may invoice in ZAR; treat any ZAR figure as an estimate that shifts with the exchange rate. The second super admin should be a role-based Workspace account (for example admin@yourdomain.co.za), never a personal Gmail address belonging to one employee. How Organisational Units Become Your Policy Engine (With a Marketing-Team OU Design) Organisational units are the main lever for per-team policy. Design them before adding users, so nobody needs moving later. OU Workspace access Drive sharing posture Marketplace installs Device management Permanent staff Full core apps External sharing allowed, warned Allow-listed only Managed Agency / freelance Gmail only, no Drive No external sharing Blocked Unmanaged Contractors Gmail, Calendar Internal only Blocked Unmanaged Finance Full core apps Restricted Allow-listed only Managed Days 2-3: Creating Users and Groups Without Creating Chaos Add users individually or in bulk with a CSV, placing each into the correct OU at creation rather than afterwards. Create groups for functional mailboxes - marketing@, finance@ - so access survives staff turnover. Groups are also the cleanest way to grant Docs and Drive permissions: add the agency to a shared group, then remove one membership when the contract ends. Days 4-7: Email Authentication Records - SPF, DKIM and DMARC Explained for Local Admins In the current Admin console under Apps and Gmail settings, generate the DKIM key for your .co.za domain and publish the TXT record at your registrar. Then set a single SPF TXT record that includes Google's sending hosts, and publish a DMARC TXT record at _dmarc starting at p=none while you read reports, then tighten. Without these, invoices from your domain land in spam and phishing spoofing becomes trivial.

Nov 5, 20266 min read
Read more

Browse by Category

SEO

We deliver data-driven SEO strategies that blend technical excellence, high-quality content, and AI-powered optimisation – ensuring your brand performs across search engines and AI-driven discovery platforms.

CRO

Unlock the full potential of your website’s performance with our comprehensive CRO solutions, tailored to drive conversions and maximise ROI.

Web Design

We develop strategically designed websites that maximizes user experience and drives conversions.

Google Ads

Let us curate a data-driven Google Ads strategy based on your business objectives, geared for results.

Marketing for Amazon

Let us curate a data-driven Amazon marketing strategy based on your business objectives, geared for results.

Social Media Ads

Let us curate a data-driven paid social media ads strategy based on your business objectives, geared for results.

Why Choose Us

500+ Expert Articles

A content hub covering SEO, paid media, CRO and web design for South African businesses.

200+ Success Stories

Campaigns and builds delivered across retail, services, B2B and ecommerce.

200+ Happy Clients

Businesses that trust Prebo Digital with their digital growth.

4.9 Average Rating

Rated 4.9 out of 5 across verified Google reviews.

24h Response Time

Questions answered within one business day, every time.

Google Premier Partner

Premier Partner status since 2022, placing us in the top 3% of agencies.

Amazon Verified Partner

One of the first verified Amazon Ads partners in South Africa.

Meta Business Partner

Certified to run paid social across Facebook, Instagram and beyond.

Get a Quote

Fill out the form below and our team will get back to you within 24 hours

What Our Clients Say

Hear from businesses we have helped succeed

“Great service and professional team.”

ES
Emelda Schuster

“Shout out to Leesha @Prebo Digital for great diligence and care handling our Google Ads account. Other agencies take your money and do nothing until you ask. Not Leesha & Prebo Digital. They do what they say and show up with a friendly face. Work to fix issues. Highly recommended.”

BS
Bradley Schmidt

“Excellent service and support.”

DB
Des Brown

“Very skilled and knowledgeable in the digital industry and you understand the importance of budgets. Start-ups do not have hundreds of thousands to spend at first and you guys really make the most of every budget provided.”

CS
Cat street

“Prebo will take your business to the next level. Extremely smart people, great service. Always go above and beyond.”

MG
Mike Gray

“A dedicated, knowledgeable and enthusiastic team of individuals that are determined to see your brand grow!”

AW
Alastair Waldeck

“A great agency to work with that always provides excellent service. Very professional and dedicated team.”

LV
Lynelle van Niekerk

“In the 4 months since we joined hands with Prebo our leads quantity and quality has increased with much more direct impact on our target market. The team is on point and forever in contact with new ideas and solutions to maximize our potential within the set budget cap. Very innovative group of people!”

RB
Rikus Booyens

“Great service from Prebo Digital team.”

MC
Mothusi Calvin Mogorosi

“Great Agency - growth-minded, a diverse team of talented individuals with collaborative success at its heart”

DD
David Delaney

“Outstanding digital marketing services.”

DD
DUNCAN DUNSHAM

“Industry experts!”

RB
Ricardo Banda

“Excellent work and professional service.”

MM
Menzi Mohale

“Expertise, ethos, excellence”

AJ
Andrew Johnson

“Professional and reliable service.”

ED
Ebert Du Plessis
5.0/ 5
·15 reviews