Privacy Policy

1. Who We Are

Massive Marketing Ltd ("we", "us", "our") is a marketing and web design agency registered in England and Wales (Company No. 16127606). We are the data controller for personal data collected through this website and our business operations.

For any data privacy enquiries, contact us at privacy@massive-marketing.co.uk.

2. What Data We Collect and Why

We collect personal data only where we have a lawful basis to do so under UK GDPR.

Enquiries and consultations

Data: Name, email address, phone number, company name, job titleLawful basis: Legitimate interests — to respond to your enquiry and assess whether we can work togetherRetention: 2 years from last contact, or the duration of any resulting client relationship

Client contracts and project delivery

Data: Name, email address, business details, project materials you share with usLawful basis: Contract performance — necessary to deliver the services agreedRetention: 7 years from project completion (legal and financial compliance requirements)

Marketing communications and newsletter

Data: Name, email addressLawful basis: Consent — you can withdraw at any time by clicking unsubscribe or emailing usRetention: Until you unsubscribe or withdraw consent

Website analytics

Data: IP address (anonymised), browser type, device, pages visited, session duration, user interactionsLawful basis: Legitimate interests — to understand how our website performs and improve itTools: Google Analytics 4 (GA4), HotjarRetention: GA4 data retained for 14 months; Hotjar session recordings retained for 365 days

3. Tools We Use to Process Your Data

We use the following third-party tools in our business operations. Each acts as a data processor on our behalf.

Webflow — website hosting and CMS. Processes website visitor data and form submissions. Servers located in the USA; Standard Contractual Clauses in place.

Google Analytics 4 — website analytics. Processes anonymised usage and behavioural data. Servers located in the USA; Standard Contractual Clauses in place.

Hotjar — session recording and heatmaps. Processes anonymised behavioural data. Servers located in the USA and EU; Standard Contractual Clauses in place.

Attio — CRM and contact management. Processes names, email addresses, company details, and communications. Servers located in the USA; Standard Contractual Clauses in place.

Typeform — intake and onboarding forms. Processes form responses and contact details. Servers located in the USA and EU; Standard Contractual Clauses in place.

PandaDoc — proposals and contract signing. Processes names, email addresses, signatures, and business details. Servers located in the USA; Standard Contractual Clauses in place.

We do not sell your data to any third party.

4. International Data Transfers

Some of the tools listed above transfer data outside the UK. Where this occurs, we ensure appropriate safeguards are in place — primarily Standard Contractual Clauses (SCCs) approved under UK GDPR, or transfers to countries covered by UK adequacy regulations.

5. Cookies and Tracking

We use cookies and similar technologies on our website. These fall into the following categories:

• Strictly necessary — required for the site to function (no consent needed)
• Analytics — GA4 and Hotjar, used to understand site performance (consent required)
• Preferences — remembering your cookie choices

You can manage or withdraw your cookie consent at any time via the cookie settings on our website. Disabling analytics cookies will not affect your ability to use the site.

6. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data where there is no legitimate reason to retain it
• Restriction — ask us to restrict processing in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, email privacy@massive-marketing.co.uk. We will respond within 30 days.

7. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)ico.org.uk0303 123 1113

We would always appreciate the chance to address your concerns directly before you contact the ICO.

8. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for their privacy practices and recommend you review their policies independently.

9. Changes to This Policy

We review this policy periodically. Any material changes will be posted on this page with an updated effective date. Where changes significantly affect how we process your data, we will notify you directly where we hold your contact details.

‍