Skip to content

Legal

Privacy Policy

Last updated: 1 August 2026

1. Who we are

This website is operated by Steve Mark Consultancy Ltd, trading as We Are SMC (“we”, “us”, “our”). We are the data controller responsible for your personal data.

  • Registered company: Steve Mark Consultancy Ltd, registered in England and Wales, company number 16000804.
  • Registered office: 25 Market Square, Leighton Buzzard, Bedfordshire, England, LU7 1EU.
  • Email: [email protected].
  • Telephone: 07849 020558.
  • Website: wearesmc.co.uk.

This policy explains how we collect and use your personal data when you visit this website, make an enquiry, or book a call with us. We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. The personal data we collect

We collect the following categories of personal data.

Information you give us:

  • Enquiry form data: your first name, last name, email address, telephone number, business or company name, the type of enquiry, and the message you send us through our contact form.
  • Booking data: information you provide when you book a call through our online booking calendar, such as your name, email address, telephone number and chosen time.

Information we collect automatically:

  • Marketing attribution data: when you arrive from an online advertisement or campaign, we capture technical marketing parameters from the web address, including the Google click identifier (gclid) and campaign parameters (utm_source, utm_medium, utm_campaign, utm_term and utm_content), together with the page you landed on and the page you submitted a form from. We use this to understand which marketing brought you to us. Where you submit an enquiry, this data is attached to your enquiry.
  • Usage and device data: your IP address, browser type, device information, and how you use the site, collected through cookies and similar technologies. See our Cookie Policy for detail.

3. How we collect your data

We collect personal data:

  • Directly from you, when you complete our contact form, book a call, or contact us by email or telephone.
  • Automatically, through cookies and similar technologies as you use the website, and through the marketing attribution described above.
  • From third parties, such as our advertising and analytics providers, in connection with the campaigns that bring visitors to the site.

4. Why we use your data and our lawful basis

We use your personal data for the following purposes, relying on the lawful bases set out below.

  • To respond to your enquiry and provide the information or services you request. Lawful basis: our legitimate interests in responding to enquiries, and taking steps at your request before entering into a contract.
  • To arrange and manage calls and meetings you book with us. Lawful basis: our legitimate interests, and steps taken before entering into a contract.
  • To provide our services where you become a client. Lawful basis: performance of a contract.
  • To measure and improve our marketing and understand which campaigns are effective. Lawful basis: our legitimate interests, and your consent for non-essential cookies.
  • To operate, secure and improve the website, including protecting our forms from spam and abuse. Lawful basis: our legitimate interests in running a safe and effective website.
  • To comply with our legal and regulatory obligations. Lawful basis: compliance with a legal obligation.

Where we rely on legitimate interests, we have considered the impact on you and do not use your data in ways you would not reasonably expect. Where we rely on consent, you can withdraw it at any time.

5. Cookies and tracking

We use cookies and similar technologies for essential site functions, analytics and advertising. Analytics and advertising cookies are non-essential: they load only after you consent through our cookie banner, which we operate using Google Consent Mode. Our advertising and analytics partners, Google (Google Analytics) and Meta (the Meta pixel), set cookies to measure performance and show relevant advertising once you have consented. You can accept, reject or change your choice at any time using the “Cookie preferences” link in the footer. Full detail, including the cookies each category sets and how to control or refuse them, is in our Cookie Policy.

6. Who we share your data with

We do not sell your personal data. We share it with the following categories of service provider (processors) who help us run our business, and only for the purposes described in this policy.

  • Our customer relationship management (CRM), forms and booking provider, HighLevel (also operating as LeadConnector), which stores your enquiry and booking data and helps us follow up.
  • Our analytics and advertising providers, Google (analytics) and Meta (advertising), which help us measure and deliver marketing.
  • Our website hosting, security and content-delivery provider, Cloudflare, including its Turnstile service, which protects our forms from automated abuse.

We may also disclose your data where required by law, to establish or defend legal claims, or to a successor in the event of a business sale or reorganisation.

7. International transfers

Some of our providers, including HighLevel, Google, Meta and Cloudflare, are based outside the United Kingdom, or process data outside the UK, including in the United States. Where personal data is transferred outside the UK, we rely on appropriate safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement, the UK Addendum to the European Commission Standard Contractual Clauses, or a country covered by UK adequacy regulations.

8. How long we keep your data

We keep your personal data only for as long as we need it for the purposes set out in this policy.

  • Enquiry and booking data is kept for up to 24 months from your last contact with us, unless you become a client.
  • Where you become a client, we keep relevant data for the duration of our relationship and for up to 6 years afterwards, to meet legal, tax and accounting requirements.
  • Analytics and advertising data is kept in line with the retention settings of the relevant provider.

When we no longer need your data, we securely delete or anonymise it.

9. Your rights

Under UK GDPR you have the following rights in relation to your personal data:

  • The right to be informed about how we use your data.
  • The right of access to the data we hold about you.
  • The right to rectification of inaccurate or incomplete data.
  • The right to erasure of your data in certain circumstances.
  • The right to restrict our processing in certain circumstances.
  • The right to object to processing based on our legitimate interests, and to object to direct marketing at any time.
  • The right to data portability in certain circumstances.
  • The right to withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email us at [email protected]. We will respond within one month. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

10. How to complain

If you have a concern about how we handle your personal data, please contact us first at [email protected] so we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk, by calling 0303 123 1113, or by writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised. Please check back for the current version.

12. How to contact us

For any question about this policy or your personal data, contact us at [email protected], call 07849 020558, or write to Steve Mark Consultancy Ltd, 25 Market Square, Leighton Buzzard, UK.