WEBSITE PRIVACY POLICY

Example Marketing Ltd, trading as Example Marketing, is registered in England and Wales with company number 14399094. Our registered office and business contact address is Pennine Five Campus, 41 Silver Street Head, Sheffield, South Yorkshire, S1 2DD, United Kingdom.

Website: https://example-marketing.co.uk/ General enquiries: info@example-marketing.co.uk Telephone: 0114 489 7053 Data protection contact: Elliot Ghali, Managing Director Privacy requests and complaints: info@example-marketing.co.uk

We act as a data controller when we decide why and how to use information for our own website, enquiries, business administration and marketing. If we process personal information solely on a client’s instructions, the client remains responsible for its own privacy information and the relevant data processing agreement governs our work. Contact us if you are unsure which organisation to approach.

Enquiries and client relationships: your name, work contact details, organisation, role, correspondence, requested services and information you choose to share about your business. Our website enquiry form asks for your name, email and main goal. Business name, service interest, approximate budget, preferred start timing, current marketing support and further details help us prepare a response.

Resource requests and activities: details such as your name, email, phone number, the resource requested and its format, and relevant workshop or event booking and attendance information. A booking provider may collect information directly under its own privacy notice.

Contracts and administration: proposals, agreements, billing contacts, invoices, payment status and related transaction records. Payment providers and banks process payment information under their applicable terms and notices.

Content and marketing work: photographs, video, voices, interview material, testimonials, professional profiles and business contact or campaign information where relevant to an agreed project. A project-specific notice or release may provide more detail about a particular use.

Website and communications data: IP address, browser and device information, pages and interactions, referral information, approximate location derived from technical data, cookie choices and communications preferences. Analytics and advertising providers may receive identifiers and interaction data through the technologies described in section 7.

Please do not put health information, payment card details or other sensitive personal information into a general enquiry form. If a particular activity requires sensitive information, the purpose, lawful condition and handling arrangements need to be explained for that activity.

We receive information directly when you complete a form, email or call us, request a resource, book an activity, provide a brief or participate in content creation. We may also receive relevant information from your organisation, a referrer, an event or booking provider, or a client instructing us.

Professional information may come from public business websites, professional networks and Companies House where relevant to a business relationship or permitted business marketing. Public availability does not by itself mean that someone has consented to marketing.

Technical information is generated through website hosting, security, analytics, advertising and communication services. The data available depends on your activity, device settings and applicable cookie or marketing choices.

To respond to enquiries and prepare proposals: we use contact details, correspondence and business requirements. Where you are personally seeking a contract, the basis is taking steps at your request before entering into it. For representatives of an organisation, we normally rely on legitimate interests in answering business enquiries and developing relevant business relationships.

To deliver services and manage bookings: we use relevant contact, brief, project and attendance information. Contract applies where the contract is with you personally. Legitimate interests in delivering the agreed work and managing the client relationship normally apply to an organisation’s representatives. Processing solely for a client follows its instructions and the applicable processing agreement.

To manage accounts, payments, records and disputes: we use contract, billing and correspondence information for legitimate interests in administering the business, recovering payments and establishing or defending legal claims, and to meet legal accounting, tax and other record-keeping obligations where applicable.

To send relevant marketing: we use contact details and preferences on the basis of consent where required, or legitimate interests where lawful, together with the electronic marketing rules explained in section 6. Our interests are promoting relevant services and maintaining business relationships. You can object to direct marketing at any time.

To operate, secure and improve the website: essential hosting and security processing supports our legitimate interests in maintaining a reliable and secure service. Optional analytics, advertising measurement and similar technologies are subject to the consent requirements and limited statutory exceptions that apply to them. The current technologies and choices are described in section 7.

To create and use content: the basis depends on the activity and may be consent, a contract with the person concerned, or legitimate interests in producing agreed professional content, subject to people’s rights and any applicable releases. We do not treat an enquiry or attendance alone as permission for unrestricted publicity.

Where we rely on legitimate interests, the processing must be necessary and balanced against your interests, rights and freedoms. Where we rely on consent, you may withdraw it without affecting the lawfulness of earlier processing. If information is necessary to answer your enquiry, deliver a service or meet a legal duty and you do not provide it, we may be unable to complete that activity. Optional information can be left out.

Information may be handled by our authorised team and relevant contractors, and by suppliers providing website hosting, enquiry and client management, email and document services, scheduling, email marketing, payments and accounting, content production, analytics and advertising. We share only information relevant to the task and the applicable instructions or legal basis.

The current website uses Base44 to support enquiry and resource request records, together with the analytics and advertising technologies in section 7. Microsoft describes its role for Clarity as a separate controller. External social networks, event organisers and booking platforms may also act as separate controllers. Their own privacy notices explain their processing.

We may use professional software with AI-assisted functions for tasks such as drafting, summarising, analysis and administration. Personal information involved in those tasks remains subject to the relevant purpose, lawful basis, confidentiality requirements and supplier terms. Base44’s published documentation says that data in non-Enterprise workspaces can be used to train AI models, including information submitted through app forms. Our current Pro workspace does not have the automatic Enterprise exclusion. This describes the provider’s published permission and does not confirm that any particular submission has been used for training. Base44’s data processing agreement separately governs its handling of personal information. You can ask us about the arrangements relevant to your information.

We may also disclose relevant information to professional advisers, insurers, banks, public authorities or courts where necessary for advice, legal obligations, claims or a lawful business transfer. We do not give other organisations permission to use our contact lists for their unrelated marketing. This does not remove the separate processing by platform providers described in this policy.

We use the information in an enquiry to respond and discuss your needs. A request for a resource is a request to receive that resource. Neither action, by itself, is consent to ongoing promotional emails.

For unsolicited email or text marketing to individuals, including sole traders and relevant partnerships, we need consent unless all conditions of the existing-customer products and services soft opt-in are satisfied. That exception includes similar services and a clear opportunity to opt out when details are collected and in each message. Different electronic marketing rules apply to corporate subscribers, but any personal information still needs a lawful basis and you retain your right to object.

You can unsubscribe using the link in a marketing email or contact info@example-marketing.co.uk. An objection to direct marketing also covers related profiling. We may retain minimal suppression information so that an unsubscribe or objection continues to be respected. Essential service, booking, payment or legal communications can continue where appropriate.

Cookies and similar technologies include browser storage, tags and pixels. They can remember choices, support the website, measure use and attribute advertising activity. Our site displays Accept and Decline controls and a Cookie preferences option. The choice is stored in browser local storage under cookie_consent; this setting remains until it is changed or browser storage is cleared.

The current site includes Google Analytics, Microsoft Clarity, Meta Pixel and Base44 visitor or referral tracking. Google Analytics measures website use. Microsoft Clarity provides interaction and behaviour analytics, which may include session replay. Meta Pixel supports advertising measurement and audience features. Base44 supports site operation and visitor or referral information; its configured referral cookies have a 30-day lifetime.

Meta Pixel is configured to load following an accepted cookie choice. Google Consent Mode starts with analytics and advertising storage permissions denied and updates supported permissions from the saved choice. Consent Mode can involve provider communications even when storage is denied. Clarity is included in the page code and supports consent signals and cookieless operation. The Decline control updates the consent settings supported by our website. Some provider connections, essential processing or cookieless measurement may continue. Base44 visitor tracking is enabled by default.

Advertising tracking and other non-exempt storage or access require consent. Limited statistical or preference exceptions apply only when their specific legal conditions, transparency and objection requirements are met. Analytics used for advertising, tracking individuals or cross-site profiling do not fall within the limited statistical exception.

You can revisit Cookie preferences, clear browser storage or use browser privacy settings to restrict cookies and third-party requests. Clearing storage or using a different browser may require you to make a new choice. Some essential functions may be affected by blocking storage. Third-party content and external websites can have their own technologies and controls. Contact us for information about a particular technology or your choices.

Our website suppliers operate internationally, including in the United States. Base44 publishes US storage as its default, with regional arrangements dependent on the service and account configuration; its subprocessor list also includes Wix in Israel. A storage region does not necessarily determine every location in which information is processed.

Base44’s published data processing agreement provides for adequacy arrangements, applicable Data Privacy Framework participation and appropriate contractual safeguards with mandatory UK changes. Google and Microsoft publish reliance on the UK Extension to the EU-US Data Privacy Framework for relevant transfers to certified US recipients, alongside contractual mechanisms for other covered transfers. An EU-only certification is not enough for a direct UK transfer.

The mechanism depends on the recipient, service and applicable terms. Where UK rules require contractual safeguards, these can include the UK International Data Transfer Agreement or UK Addendum with the required assessment. Other suppliers, including Meta, have their own transfer terms. Contact info@example-marketing.co.uk for the countries and safeguards relevant to your information, and how to obtain further details or a copy of applicable safeguards.

We keep personal information only for as long as needed for the purpose for which it is held. There is no single retention period for every type of record.

For enquiries and resource requests, the criteria are whether the request is resolved, whether a relevant business relationship continues and whether there is another justified purpose. For client, financial and contractual records, we consider the service relationship, tax and accounting requirements, contractual duties and the time needed for relevant claims. Content assets depend on the agreed use, project arrangements and applicable rights. Technical records depend on their security or measurement purpose and the settings of the service concerned.

Consent and preference evidence may be needed to demonstrate how a choice was obtained and honoured. Minimal suppression records may be retained to prevent renewed unwanted marketing. A legal obligation, dispute or valid preservation requirement can justify keeping particular records longer. When information is no longer needed for any of these purposes, we will delete it or anonymise it, subject to any applicable legal obligation or valid preservation requirement. You can ask about the criteria or period for a particular record.

Our staff and contractors are required to protect confidential information, use approved systems and access only the information needed for their work. The appropriate technical and organisational protection depends on the information and risk. No online transmission or storage system can be guaranteed completely secure. Please contact us promptly if you suspect unauthorised disclosure involving our services.

Our website enquiries are reviewed by a person. Analytics, advertising and AI-assisted software may involve automated processing; this is different from a solely automated decision with a legal or similarly significant effect. If a particular activity involves such significant decision-making, we will explain it in the applicable notice, including the rights to information, make representations, request human intervention and contest the decision that apply.

Depending on the circumstances, you can request access to your information, correction, erasure, restriction of processing or transfer of data. You can object to processing based on legitimate interests and can object to direct marketing at any time. You can withdraw consent where it is the lawful basis. Some rights have conditions and exceptions.

Send requests to info@example-marketing.co.uk. We may ask for proportionate information to verify your identity and clarify the request. We normally respond to rights requests within one month, subject to any lawful extension or pause, and explain any applicable exception or charge. Requests are normally free.

You can complain about our use of personal information by email, telephone or post using the details in section 1. We will acknowledge a data protection complaint within 30 days, investigate and respond without undue delay.

You also have the right to complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/ or on 0303 123 1113. You do not need our permission to contact the ICO.

We may update this policy as our services, systems or legal requirements change. The date at the beginning identifies this version. Material changes affecting how your information is used will be brought to your attention where required.

Separate notices may apply to employment, recruitment, a particular event, a content project or a client-controlled activity. External websites and booking platforms have their own privacy notices. Contact us if you need this policy in another accessible format.