Privacy Policy

1. Who we are

This website is operated by Pedro Manzanera Mondejar, trading as Chairside Marketing (referred to in this policy as “we”, “us” or “our”).

Data controller: Pedro Manzanera Mondejar, trading as Chairside Marketing
Address: 182 Hardy Mill Road, Bolton, BL2 3PW, United Kingdom
Email: hello@chairsidemarketing.co.uk

2. What data we collect and why

Enquiry forms

When you submit the free marketing audit form or the blog enquiry form, we collect:

• Your name and email address (required)
• Your phone number, practice name, practice website, and practice location (optional)
• A description of your main marketing concern and any message you include (optional)
• Metadata about your submission: the page you submitted from, the referring page, and UTM campaign parameters (source, medium, campaign) if present in the URL
• Submission timestamp and notification delivery status

This information is used to respond to your enquiry and to understand how visitors find our website.

IP address (rate limiting only)

To prevent automated abuse of our forms, we apply rate limiting. Your IP address is hashed with a one-way cryptographic function (HMAC-SHA256) at the point of submission; the raw IP address is never stored. The hash is retained for a maximum of two hours and is then automatically deleted. It is used solely to enforce submission limits and cannot be used to identify you.

Website analytics (optional, consent required)

We use Google Analytics 4 (GA4) to understand how visitors use this website. GA4 is loaded only if you choose to accept analytics cookies via the consent banner that appears on your first visit. If you reject analytics, or have not yet made a choice, no analytics script is loaded and no data is sent to Google.

When analytics are active, GA4 collects information such as pages visited, time spent on each page, and general geographic location (country or city level). It does not collect your name, email address, or any information you enter into our forms. This data is processed by Google in accordance with Google’s own privacy policy.

We have set the GA4 event-data retention period to two months. We do not use GA4 for advertising or remarketing purposes.

3. Legal basis for processing

We process enquiry form data on the basis of legitimate interests: you have actively requested information or a review from us, and it is in both our interests to follow up on that request. You may withdraw your consent or object to this processing at any time by contacting us at hello@chairsidemarketing.co.uk.

Rate-limit hashes are processed on the basis of our legitimate interest in protecting our services from automated abuse.

Analytics data is processed on the basis of your consent. You can withdraw consent at any time using the “Cookie settings” link in the website footer.

4. How we store and protect your data

Enquiry data is stored in a cloud database provided by Supabase. Email notifications of new enquiries are sent via Resend. This website is hosted on Vercel. These third-party processors are listed in section 5 below.

We apply access controls so that enquiry data is only accessible to authorised personnel. All data is transmitted over encrypted connections (HTTPS/TLS).

5. Third-party processors

We share your data with the following processors, solely as necessary to deliver our services:

We do not sell your personal data to third parties. We do not use it for advertising.

6. How long we keep your data

• Enquiry form submissions are retained until the enquiry is resolved or you ask us to delete them, and no longer than is necessary for our legitimate business purposes.
• Rate-limit hashes are automatically deleted within two hours of submission.
• Analytics event data is retained in Google Analytics for two months. Your cookie consent choice is stored in your browser for 12 months.

7. Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data (“right to be forgotten”)
• Object to or restrict how we process your data
• Receive your data in a portable format
• Withdraw consent at any time (where consent is the legal basis)

To exercise any of these rights, contact us at hello@chairsidemarketing.co.uk. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

8. Cookies and analytics consent

When you first visit this website, a banner asks whether you would like to accept optional analytics cookies. Your choice is stored in your browser for 12 months. You can change your choice at any time by clicking “Cookie settings” in the website footer.

If you accept, Google Analytics 4 cookies are set and usage data is collected as described in section 2. If you reject, no analytics cookies are set and no data is sent to Google. Rejecting cookies does not affect any part of the website.

We implement Google Consent Mode v2. Advertising consent is permanently denied because we do not run advertising tags on this website.

You can also manage or clear cookies at any time through your browser settings.

9. Changes to this policy

We may update this policy from time to time. The date at the top of this page will reflect the most recent revision. We encourage you to check this page periodically.