Privacy policy.

1Who We Are

BuzzBold Marketing Ltd
Registered in England and Wales
Company number: 17174837
Registered address: 128 City Road, London, EC1V 2NX, United Kingdom

• Data Controller for visitors to buzzboldmarketing.com.
• Data Processor for personal data processed on behalf of clients (their customers' data).
• Contact: support@buzzboldmarketing.com

2What Data We Collect

Website visitors:

• Name, business name, email, phone number, postcode (via the contact form).
• Trade type, business size, current frustrations (via the qualification form).
• IP address, browser type, device type, pages visited (via privacy-friendly analytics).
• Cookies: strictly necessary only. No advertising cookies, no third-party tracking cookies.

Clients:

• Business information (trade, services, pricing, service area).
• Account credentials.
• Payment information (processed by our payment provider — we do not store card details).
• Communication history.

Client customers (processed on behalf of our clients):

• Name, phone number, email address.
• Job history and service records.
• Communication records (automated messages sent on the client's behalf).
• Review responses.

3How We Use Data

Website visitor data:

• To respond to enquiries and qualification form submissions.
• To assess area availability.
• To improve our website and services.
• To send service-related communications (not marketing, unless consented).
• Lawful basis: legitimate interest and pre-contractual steps.

Client data:

• To provide and improve our services.
• To process payments.
• To communicate about service updates.
• To create anonymised case studies (unless opted out).

Client customer data (as Data Processor):

• To send automated messages on behalf of the client (follow-ups, review requests, appointment reminders).
• To manage the client's customer database.
• To generate reports for the client.
• We do NOT use client customer data for BuzzBold Marketing Ltd's own marketing purposes.

4Data Processing Relationship

Where BuzzBold Marketing Ltd processes personal data on behalf of clients, such processing is governed by a separate Data Processing Addendum where required by law. The client remains the Data Controller for their customers' data. BuzzBold Marketing Ltd acts as Data Processor and will only process such data in accordance with the client's instructions and applicable data protection law.

5Legal Basis for Processing (UK GDPR)

• Contract performance: processing necessary to deliver our services.
• Legitimate interests: improving our services, preventing fraud, ensuring security.
• Consent: where we request marketing consent (you can withdraw at any time).
• Legal obligation: where required by law (tax records, regulatory compliance).
• Pre-contractual steps: processing enquiries and assessing area availability before entering a contract.

6Data Sharing

• We use third-party service providers for hosting, email delivery, payment processing, SMS delivery, and analytics.
• We do NOT sell, rent, or trade personal data to third parties.
• We do NOT share data with advertisers.
• We may share data if required by law or to protect our legal rights.
• All third-party providers are assessed for UK GDPR compliance and bound by data processing agreements.

7Data Retention

• Website enquiries: retained for 12 months, then deleted unless converted to a client.
• Client data: retained for the duration of the subscription plus 6 years (UK tax requirements).
• Client customer data: retained for the duration of the client's subscription, then deleted within 90 days of termination.
• Analytics data: aggregated and anonymised after 26 months.

8Your Rights (UK GDPR)

• Right of access — request a copy of your personal data.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion of your data (subject to legal obligations).
• Right to restrict processing — request limitation of how we use your data.
• Right to data portability — request your data in a machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent.

To exercise any of these rights, email support@buzzboldmarketing.com. We will respond within 30 days.

9Cookies

• We use strictly necessary cookies for website functionality.
• We use privacy-friendly analytics to understand how visitors use our site (anonymised).
• We do NOT use advertising or tracking cookies.
• You can control cookies through your browser settings.

10Data Security

• All data is transmitted over encrypted connections (HTTPS/TLS).
• Access to personal data is restricted to authorised personnel only.
• We use industry-standard security measures to protect data at rest and in transit.
• We conduct regular security reviews of our systems and providers.

11Personal Data Breaches

Where required by law, BuzzBold Marketing Ltd will notify affected parties and relevant regulators of personal data breaches within applicable legal timeframes. BuzzBold Marketing Ltd maintains incident response procedures to identify, contain, and remediate data breaches promptly.

12International Transfers

• Some of our service providers may process data outside the UK.
• Where this occurs, we ensure appropriate safeguards are in place — UK GDPR adequacy decisions, standard contractual clauses, or equivalent protections.

13Children

• Our services are not directed at individuals under 18.
• We do not knowingly collect data from children.

14Changes to This Policy

• We may update this policy from time to time.
• Material changes will be communicated via email to clients.
• The “last updated” date at the top of this page will reflect the most recent version.

15Complaints

• If you have concerns about how we handle your data, contact support@buzzboldmarketing.com.
• You have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk.

16Data Protection Officer

• For data protection queries, contact: support@buzzboldmarketing.com.
• BuzzBold Marketing Ltd acts as both Data Controller (for its own data) and Data Processor (for client customer data).