Privacy Policy

1 Data Controller

The data controller responsible for your personal data is:

2 Information We Collect

We may collect the following categories of personal data:

• Contact and account information: name, company name, email address, phone number, and postal address when you register for an account or contact us directly.
• Communications data: the content of messages and attachments you send us when you get in touch.
• Technical data: IP address, browser type, Internet Service Provider (ISP), date and time stamps, referring/exit pages, and number of clicks, collected automatically via log files.
• Cookie and usage data: information about your preferences and how you use our website, collected via cookies and similar technologies (subject to your consent where required).

3 Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

• Contract: where processing is necessary to provide the services you have requested or to take steps before entering into a contract with you.
• Legitimate interests: for analysing website usage, improving our services, fraud prevention, and site administration, where our interests are not overridden by your rights.
• Consent: for non-essential cookies, marketing communications, and any other processing where we have obtained your explicit consent. You may withdraw consent at any time (see Section 9).
• Legal obligation: where we are required by law to process your data.

4 How We Use Your Information

We use your personal data to:

• Provide, operate, and maintain our website and services.
• Improve, personalise, and expand our website and offerings.
• Understand and analyse how visitors use our website.
• Develop new products, services, and features.
• Communicate with you about your account, service updates, and — where you have consented — marketing and promotional material.
• Detect and prevent fraud and abuse of our services.

5 Data Retention

We retain your personal data only for as long as necessary for the purposes described in this policy, or as required by law. Our retention periods are:

• Account and contact information: retained for the duration of your account and for 18 months after closure or last contact.
• Log file and technical data: retained for up to 18 months for security and analytics purposes.
• Marketing data: retained until you withdraw consent or unsubscribe.

Where no fixed period applies, we determine the appropriate retention period based on the nature of the data and the purpose for which it was collected.

6 Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies. Under the UK's Privacy and Electronic Communications Regulations (PECR), we are required to obtain your prior consent before placing non-essential cookies on your device.

We use the following categories of cookies:

• Strictly necessary cookies: essential for the website to function. These do not require your consent.
• Analytics cookies: used to understand how visitors interact with our site. These are only set with your consent.
• Advertising/targeting cookies: set by third-party advertising partners to serve relevant advertisements. These are only set with your consent.

You can manage your cookie preferences at any time via our cookie consent banner or by adjusting your browser settings. Disabling certain cookies may affect the functionality of our website.

7 Sharing Your Data with Third Parties

We may share your personal data with trusted third parties, including:

• Service providers: hosting, analytics, and technology partners who process data on our behalf under data processing agreements.
• Advertising partners: third-party ad networks that may set cookies and receive your IP address to deliver and measure advertising campaigns. Please consult their individual privacy policies for more information.
• Legal and regulatory authorities: where required by law, court order, or government regulation.

We do not sell your personal data to third parties.

8 International Data Transfers

Some of our third-party service providers and advertising partners are based outside the UK. Where we transfer personal data internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR, such as:

• Transfers to countries with a UK adequacy decision; or
• Use of the UK International Data Transfer Agreement (IDTA) or other approved transfer mechanisms.

You can request further information about these safeguards by contacting us.

9 Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

• Right of access: request a copy of the personal data we hold about you (a Subject Access Request).
• Right to rectification: ask us to correct inaccurate or incomplete data.
• Right to erasure: ask us to delete your personal data, subject to certain legal exceptions.
• Right to restrict processing: ask us to limit how we use your data in certain circumstances.
• Right to data portability: request a copy of your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: where processing is based on your consent, withdraw it at any time without affecting the lawfulness of prior processing.
• Rights regarding automated decision-making: not to be subject to decisions made solely by automated means that produce significant effects on you, unless certain conditions apply.

To exercise any of these rights, please contact us at hello@after.marketing. We will respond within one month and may ask you to verify your identity before proceeding.

10 Right to Lodge a Complaint

If you are unhappy with how we have handled your personal data, you have the right to complain to the UK's supervisory authority:

We would appreciate the opportunity to resolve your concerns before you contact the ICO, so please reach out to us first.

11 Children's Privacy

Our website is not directed at children under the age of 13, and we do not knowingly collect personal data from children under 13. If you believe your child has provided us with personal information, please contact us immediately and we will delete such information from our records.

12 Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Where changes are significant, we will notify you by email or a prominent notice on our website. We encourage you to review t