Privacy Policy

I only collect data I actually need. Depending on how you use the site, this can include:

• Enquiry and assessment details. When you submit my contact form or the Website Pipeline Scorecard, I collect the information you provide, such as your name, work email, company website, project type, budget, timeline, and any details you choose to share.
• Usage and analytics data. If you consent to analytics cookies, I collect anonymised or pseudonymised information about how you use the site, such as pages visited, approximate location, device and browser type, and referral source.
• Technical data. Standard server and security information needed to deliver the website reliably.

I do not knowingly collect special category data, and you should not send me sensitive personal information through the forms on this site.

• To respond to your enquiry and provide the services you ask about. Legal basis: taking steps at your request before entering a contract, and my legitimate interest in responding to potential clients.
• To understand and improve site performance through analytics. Legal basis: your consent, which you give through the cookie banner and can withdraw at any time.
• To keep the site secure and working. Legal basis: my legitimate interest in running a safe, functional website.

I do not sell your personal data, and I do not use it for automated decision-making.

The site uses Google Analytics (GA4) to understand how visitors use it. Analytics and advertising cookies are set only after you accept them through the cookie banner. Until you choose, these cookies are kept off by default using Google Consent Mode.

You can change your choice at any time by clearing the site's cookies in your browser, which will make the banner appear again, or by adjusting your browser's cookie settings. Declining analytics does not affect your ability to use the site.

I do not sell your data. I share it only with the service providers that help me run the site and respond to you. These act as my processors and only handle your data on my instructions:

• Google (Firebase / Firestore) — hosting and secure storage of website data and your enquiry submissions.
• Google Analytics — website analytics, where you have consented.
• Google Calendar— if you book a call, your booking details are processed through Google's appointment scheduling.

Some of these providers, including Google, may process data on servers outside the UK, such as in the United States. Where that happens, the transfer is protected by appropriate safeguards, such as the provider's International Data Transfer Agreement or Standard Contractual Clauses, so your data keeps an equivalent level of protection.

I keep enquiry and assessment data only as long as needed to respond to you and, where relevant, to manage our working relationship and meet legal or accounting obligations. After that I delete or anonymise it. Analytics data is retained according to my Google Analytics settings. If you would like your enquiry data removed sooner, just ask.

Under UK data protection law you have the right to:

• access the personal data I hold about you;
• ask me to correct inaccurate or incomplete data;
• ask me to delete your data;
• object to or restrict how I use your data;
• withdraw consent for analytics at any time; and
• ask for a copy of your data in a portable format.

To exercise any of these rights, email me at hello@samheadmarketing.com. I will respond within one month.

If you are unhappy with how I have handled your data, please contact me first so I can put it right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk.

I may update this policy from time to time. The latest version will always be on this page, with the "last updated" date above.

For any privacy question or request, email me at hello@samheadmarketing.com.