Privacy Policy

1. Who we are

Unflawed Marketing Ltd ("we", "us", "our") is the data controller for personal data collected through this website and through our client portal. Registered office: [REGISTERED ADDRESS], United Kingdom. Company number [COMPANY NUMBER].

You can contact us about anything in this policy, or about your data, at info@unflawed.uk. If you are not satisfied with our response you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

2. The data we collect

Information you give us directly: your name, company name, email address, telephone number, website address, and the answers you provide in our marketing readiness check — including your industry, company size, location, current marketing channels, approximate advertising spend, how you measure results, how enquiries are handled, your main challenge and approximate enquiry volume.

Account information: when you create an account or we invite you to our client portal, we store your name, email address and sign-in credentials (passwords are held only as secure hashes by our authentication provider; we never see or store your password).

Client service data: if you become a client, we store records relating to your engagement — reports we prepare for you, scheduled meetings, messages you send us through the portal, billing history and the status of access you grant us to your own marketing accounts. We never ask for or store passwords to your advertising, analytics or website accounts.

Payment data: payments are processed by Stripe. We receive and store the payment status, amount, date and Stripe reference — never your full card details, which are held by Stripe under their own security certifications.

Information collected automatically: the page you arrived on, the referring website, and campaign parameters such as utm_source, utm_medium, utm_campaign, utm_content, utm_term and advertising click identifiers (such as gclid or fbclid) where present. We also collect standard technical logs such as IP address, browser type and pages visited, for security and performance purposes.

Website analysis: when you run our marketing readiness check, we retrieve and analyse the publicly available pages of the website you submit. We do not access any private area of your systems.

3. How we use your data and our lawful bases

To respond to your enquiry and prepare your marketing readiness report (legitimate interest in responding to a business enquiry, and steps necessary to enter into a contract).

To provide our services to you as a client: operating your portal account, delivering reports, scheduling, messaging and billing (performance of a contract).

To send service and account emails — for example report notifications, schedule updates, payment links and payment confirmations (performance of a contract).

To understand which marketing channels produce enquiries, so we can measure our own advertising (legitimate interest).

To keep our systems secure, prevent fraud and maintain records required for accounting and tax purposes (legal obligation and legitimate interest).

4. Marketing communications

We will contact you about the enquiry or engagement you asked about. We send wider marketing communications only where we are permitted to do so, and you can opt out at any time using the link in any email or by contacting us. Opting out of marketing does not affect service emails about your account or engagement.

5. Who we share data with

We use a small number of service providers who process data on our instructions only: website and database hosting, authentication, email delivery, payment processing (Stripe) and website analysis tools. Each is bound by contract to protect your data and may not use it for their own purposes.

Where a provider is based outside the UK, transfers are made under appropriate safeguards such as the International Data Transfer Agreement or adequacy regulations.

We do not sell personal data, and we do not share it with third parties for their own marketing.

We may disclose data where required by law, regulation or legal process, or to protect our rights.

6. How long we keep data

Enquiry records are kept for up to 24 months from your last contact with us, after which they are deleted or anonymised. Client records are kept for the duration of the engagement and for up to 6 years afterwards, to meet accounting, tax and legal requirements. You can ask us to delete your data sooner where the law allows.

7. How we protect data

Access to personal data is restricted to authorised team members. Our systems use encryption in transit and at rest, row-level access controls so each client can only ever see their own data, and signed, verified connections to payment and email providers. No method of transmission or storage is completely secure, but we maintain safeguards appropriate to the data we hold.

8. Your rights

You have the right to access a copy of your data, to have it corrected, to request deletion, to restrict or object to processing, and to data portability. Where we rely on consent you may withdraw it at any time. To exercise any of these rights, contact us at the address above — we respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.

9. Cookies

Details of the cookies and similar technologies used on this site are set out in our Cookie Policy.

10. Changes to this policy

We may update this policy from time to time. The version on this page is the current one, and significant changes will be flagged on this page or by email where appropriate.