LEGAL
Privacy Policy
How Smit Marketing Ltd collects, uses and protects your personal data. Last updated:
In short
- We only collect what we need to reply to you, run our business and deliver our services.
- We never sell your data, and we only email you marketing you can opt out of in one click.
- You can ask to see, correct or delete your data at any time by emailing francois@smitmarketing.co.uk.
1. Who we are
Smit Marketing Ltd is a UK marketing consultancy. We help businesses set up, run and get more from HubSpot, including onboarding, audits, training, automation, reporting and CRM clean-ups.
We are the "data controller" for personal information collected through this website and when you contact us. That means we decide how and why it is used, and we are responsible for looking after it.
- Company name: Smit Marketing Ltd, registered in England and Wales (Company No. 16632071)
- Registered address: [registered office address]
- Website: www.smitmarketing.co.uk
- Email: francois@smitmarketing.co.uk.
- Phone: 0163 592 5118
When we work on a client's HubSpot account, we usually handle that client's contacts on their behalf. In that case the client is the data controller and we act as their "data processor". Our client agreement, not this policy, covers that data.
2. What data we collect
We may collect:
- Identity and contact details: name, job title, company name, email address and phone number.
- Enquiry and booking details: what you tell us in forms, emails, calls and meeting bookings.
- Health check answers: your answers to our free HubSpot health check quiz, your score and the results we email you. These are questions about your business's HubSpot setup, not about you personally.
- Client and project data: proposals, contracts, invoices, payment records and service history.
- Marketing preferences: whether you have subscribed or opted out, and which emails you open or click.
- Technical and usage data: IP address, browser, device type, pages viewed and how you arrived at our site.
We do not knowingly collect sensitive data (such as health, religion or ethnicity). Please do not include it in forms or messages. Our services are aimed at businesses, not children.
3. How we collect it
- Directly from you: when you fill in a form, take the health check, book a call, email or phone us, or become a client.
- Automatically: through cookies and similar tools when you browse our website (see section 6).
- From third parties: for example from HubSpot, Google Analytics, LinkedIn, or from a colleague or partner who refers you to us.
4. How we use your data and our lawful bases
UK data protection law says we need a lawful reason ("lawful basis") for each use of your data. Here is what we do and why.
|
What we use it for |
Lawful basis |
|---|---|
|
Replying to your enquiry or booking a call |
Legitimate interests (responding to people who contact us) |
|
Sending your health check results and a follow-up |
Legitimate interests, or consent where you tick a box to hear more |
|
Preparing proposals and delivering our services |
Contract (or steps before entering one) |
|
Invoicing, accounts and tax records |
Legal obligation |
|
Sending marketing emails and newsletters |
Consent, or legitimate interests for existing business contacts (see section 5) |
|
Analysing website use to improve our site and content |
Consent (via our cookie banner) |
|
Keeping our website and systems secure |
Legitimate interests |
|
Dealing with complaints or legal claims |
Legitimate interests and legal obligation |
We do not make decisions about you using purely automated processing that have a legal or similarly significant effect on you. Health check scores are calculated automatically, but they are only a guide for you.
5. Marketing and communication
We send marketing emails, such as HubSpot tips, guides and news about our services, only when:
- you have opted in, for example by ticking a box on a form or the health check; or
- you are a business contact or client, and the emails relate to services similar to those you asked about. You can opt out at any time.
Every marketing email has an unsubscribe link. You can also email [privacy email] to opt out. Opting out of marketing does not stop service emails, such as replies to your enquiry, invoices or project updates.
We may use your business email address to show you relevant ads on platforms such as LinkedIn or Google, using their matched-audience tools. You can object to this at any time.
6. Cookies
Cookies are small files saved on your device when you visit a website. We use:
|
Type |
What it does |
Do we ask first? |
|---|---|---|
|
Strictly necessary |
Makes the site work, keeps it secure and remembers your cookie choices |
No, the site needs these |
|
Analytics |
Tells us how people use the site, for example through Google Analytics and HubSpot |
Yes |
|
Marketing |
Helps us measure ads and show relevant ads on other sites, such as LinkedIn |
Yes |
Your cookie choices: when you first visit, our cookie banner lets you accept or reject analytics and marketing cookies. We only set them if you click "Accept". You can change your mind at any time by clicking "Cookie settings" at the bottom of any page, or by clearing cookies in your browser.
If you leave a comment on our blog, we may save your name and email in a cookie for one year, so you do not have to type them again.
7. Who we share data with
We never sell or rent your data. We only share it with trusted suppliers who help us run our business, and only what they need:
|
Supplier |
What they do for us |
|---|---|
|
HubSpot |
CRM, forms, health check, email marketing and meeting booking |
|
Google (Analytics and Workspace) |
Website analytics, email and file storage |
|
[Website host] |
Hosts our website |
|
|
Advertising and audience measurement, if you accept marketing cookies |
|
[Accountant / bookkeeping software] |
Invoicing, accounts and tax |
|
Spam protection services |
Check blog comments and forms for spam |
These suppliers act on our instructions and must keep your data secure. We may also share data with professional advisers (such as lawyers or insurers), with authorities where the law requires it, or with a buyer if our business is ever sold.
8. International transfers
Some of our suppliers, such as HubSpot and Google, may store or access data outside the UK, including in the EU and the US.
When this happens, we make sure your data is protected by one of the safeguards UK law allows. These include countries the UK recognises as having adequate protection, the UK-US "data bridge", or approved contract terms with the supplier. You can email us for more details.
9. Keeping your data secure
We protect your data with sensible technical and organisational measures. These include encrypted connections (HTTPS), strong passwords and two-factor authentication on our systems, access limited to people who need it, and suppliers with recognised security standards.
No system is completely secure. If a data breach is likely to put you at risk, we will tell you and the ICO where the law requires us to.
10. How long we keep your data
We keep data only as long as we need it, then delete or anonymise it.
|
Type of data |
How long we keep it |
|---|---|
|
Enquiries and health check answers (no project follows) |
2 years from our last contact |
|
Client project records |
6 years after the project ends |
|
Invoices and accounting records |
6 years after the end of the financial year (required by law) |
|
Marketing contacts |
Until you unsubscribe, or 2 years with no engagement |
|
Unsubscribe records |
Kept so we do not email you again by mistake |
|
Blog comments |
Until the comment is removed |
|
Analytics data |
Up to 14 months |
11. Your rights
Under UK data protection law, you have the right to:
- Access your data and get a copy of it.
- Correct data that is wrong or incomplete.
- Delete your data, where we have no good reason to keep it.
- Restrict how we use your data while a concern is looked into.
- Object to us using your data based on legitimate interests, and to direct marketing at any time.
- Move data you gave us to another provider (data portability).
- Withdraw consent at any time, where we rely on it. This does not affect anything we did before.
To use any of these rights, email [privacy email]. It is free. We may ask you to confirm your identity, and we will reply within one month (we will tell you if a complex request needs longer).
12. Changes to this policy
We review this policy at least once a year and when we change how we use data. The "Last updated" date at the top shows the latest version. If a change significantly affects you, we will let you know by email or on our website.13. Contact and complaints
For any question about this policy or your data, email francois@smitmarketing.co.uk, call 0163 592 5118 or write to Smit Marketing Ltd, [registered office address].
If you are unhappy with how we have handled your data, please tell us first so we can put it right. We will acknowledge your complaint within 30 days.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.