Privacy Policy
Last updated: [DATE]
Draft for review. This is a starting template, not legal advice. Have it checked by a solicitor and confirm every detail matches how you actually handle data before publishing.
Who we are
This site is operated by Ioptimal Ltd, trading as Performance.Social, a company registered in England and Wales under company number 07325754. In this policy, "we", "us" and "our" refer to Ioptimal Ltd.
We are the data controller for personal data collected through this website. If you have any questions about this policy or how we handle your information, contact us at info@performance.social.
What information we collect
Information you give us
When you submit the enquiry form on this site, we collect the details you provide. That typically includes your name, email address, company name, website, an indication of your monthly advertising budget, the service you are interested in, and anything you write in the message field.
Information collected automatically
Our hosting provider records standard technical information when you visit, such as your IP address, browser type, the pages you view and the time of your visit. This is used to keep the site running securely and reliably.
[If you add analytics, advertising pixels or any cookie-based tracking, list them here and add a cookie banner. Do not leave this paragraph in place if it is inaccurate.]
Why we use your information, and our lawful basis
- To respond to your enquiry. Lawful basis: taking steps at your request before entering into a contract.
- To provide services if you become a client. Lawful basis: performance of a contract.
- To keep the website secure and functioning. Lawful basis: our legitimate interests in operating a safe, working site.
- To meet legal and accounting obligations. Lawful basis: compliance with a legal obligation.
We do not sell your personal data, and we do not add enquiry contacts to marketing lists without asking you first.
Who we share it with
We use a small number of third party services to run this site and our business. Each processes data on our behalf under its own terms:
- Netlify, for website hosting and processing form submissions.
- Zapier, to route enquiry notifications into our own systems.
- Email and productivity providers, used to correspond with you and store records.
- [Add any CRM, analytics or scheduling tools you actually use.]
Some of these providers are based outside the UK. Where personal data is transferred internationally, it is protected by appropriate safeguards such as the UK International Data Transfer Agreement or an adequacy decision.
We may also disclose information where we are required to do so by law.
How long we keep it
Enquiries that do not lead to work are kept for up to [12 / 24] months, then deleted. Client records are kept for the duration of the engagement and afterwards for as long as we are required to retain them for tax and accounting purposes, which is currently six years.
Your rights
Under UK data protection law you have the right to access the personal data we hold about you, to have inaccurate data corrected, to request erasure, to restrict or object to processing, and to data portability. Where we rely on consent, you can withdraw it at any time.
To exercise any of these rights, email info@performance.social. We will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
[Describe the cookies this site actually sets. If the site sets no cookies beyond those strictly necessary for hosting, say so plainly. If you add analytics or advertising pixels, you will need consent and a cookie banner.]
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised.