Privacy Policy
Last updated: 24 August 2026
1. About this Privacy Policy
This Privacy Policy explains how Ross Purves Marketing, operated by Ross Purves as a sole trader (“I”, “me”, “my” or “Ross Purves Marketing”), collects and uses personal information when you visit or interact with this website.
For the purposes of applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, I am the data controller for personal information collected through this website.
This Privacy Policy applies to information collected through:
- this website;
- forms and other contact methods available through this website; and
- your direct interactions with me arising from your use of this website.
It does not attempt to govern personal information I may process separately when delivering consultancy services to clients. Where you become a client, additional contractual, operational or privacy arrangements may apply depending on the nature of the services provided.
If you have any questions about this Privacy Policy or how I handle your personal information, please contact me.
2. What personal information do I collect?
The information I collect depends on how you interact with the website.
Information you provide directly
If you contact me through the website, I may collect:
- your name;
- your business or organisation name;
- your email address;
- your telephone number;
- your website address, where provided;
- the contents of your enquiry or message; and
- any other information you voluntarily provide in your communication.
You do not have to provide information that is not necessary for your enquiry. However, if you do not provide sufficient information, I may not be able to respond to your request or assess how I can assist you.
Marketing preferences
My contact form includes an optional marketing consent checkbox.
If you choose to opt in, I may collect and use your name and email address to send you occasional marketing tips, updates and insights from Ross Purves Marketing.
The marketing checkbox is not selected by default. Choosing not to receive marketing communications will not prevent you from contacting me or receiving a response to an enquiry.
Where marketing subscriptions are managed through Mailchimp, I intend to use a double opt-in process to confirm subscriptions.
You can withdraw your consent to marketing communications at any time by using the unsubscribe link in a marketing email or by contacting me directly.
Booking a call
Information provided when booking a call If you book a call through the website using Calendly, I may collect information such as:
- your name;
- your email address;
- your telephone number, where requested;
- your organisation or business name, where requested;
- information you provide in response to booking questions;
- and details of the meeting you have booked, including the date, time and meeting type.
Calendly processes this information on my behalf to provide appointment scheduling and related services. The information you provide when booking a meeting may be stored and processed by Calendly in accordance with its own privacy and data-processing arrangements.
3. Information collected automatically
When you visit this website, certain technical information may be processed by the website and by third-party services used to operate, analyse and secure it.
Depending on the technologies enabled and your consent preferences, this may include information such as:
- IP address;
- browser type and version;
- operating system;
- device type;
- referring website or page;
- pages visited;
- date and time of visits;
- information about how you interact with the website; and
- technical information required to maintain website security and functionality.
IP addresses may be processed by website security services where necessary to detect and prevent malicious activity, including attempted unauthorised access to the website.
Wordfence may process technical information, including IP addresses, browser information and information relating to attempted access or other security events, for the purpose of protecting the website against malicious activity, unauthorised access and other security threats.
Cloudflare may process technical and traffic information, including IP addresses and traffic routing information, where its services are used to operate, protect or secure the website.
Google Analytics may use IP address information at the point of data collection to determine approximate geographic information and route data to the appropriate Google data centre. Google states that IP addresses are discarded before the information is logged or stored by Google Analytics.
The contact form itself does not collect or retain your IP address.
Some information may also be collected through cookies and similar technologies. The use of non-essential cookies and analytics technologies is explained in my Cookie Policy.
4. How I use your personal information
I may use personal information collected through this website to:
- respond to enquiries and requests;
- communicate with you about a potential project or service;
- understand your requirements and determine how I may be able to assist you;
- provide information you have requested;
- maintain and improve the website;
- understand how visitors use the website;
- analyse website performance where you have given the necessary consent;
- protect the website against spam, abuse, fraud and other security threats;
- administer and maintain website functionality;
- manage marketing subscriptions where you have actively opted in;
- send marketing communications where you have provided the necessary consent;
- comply with legal or regulatory obligations;
- manage and schedule meetings and consultations;
- send appointment confirmations, reminders and other communications relating to booked meetings;
- provide online meetings through services such as Zoom where you select this option; and
- manage and maintain records of appointments and communications with prospective clients.
I will not use your personal information for purposes that are incompatible with the purpose for which it was collected unless I have a lawful basis to do so and, where required, have provided you with appropriate information or obtained your consent.
5. Lawful bases for processing
I will only process personal information where there is a lawful basis for doing so under applicable data protection law.
Depending on the circumstances, I may rely on the following lawful bases.
Legitimate interests
I may process personal information where it is reasonably necessary for my legitimate interests, provided those interests are not overridden by your rights and freedoms.
Examples may include:
- responding to general enquiries;
- managing and maintaining the website;
- protecting the website from spam and malicious activity;
- maintaining website security;
- understanding and improving website performance; and
- maintaining appropriate business records relating to enquiries.
Steps taken at your request before entering into a contract
Where you contact me about potentially engaging my services, I may process information you provide in order to respond to your enquiry, understand your requirements and take steps at your request before entering into a contract.
Consent
I will rely on consent where consent is required by law.
This may include:
- analytics and other non-essential cookies or tracking technologies; and
- sending marketing emails where consent is required.
Where I rely on consent, you can withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Legal obligations
I may process personal information where necessary to comply with a legal or regulatory obligation.
6. Contact forms and enquiries
The website uses Elementor Forms to collect enquiries.
The contact form collects the information described in Section 2 of this Privacy Policy.
Contact form submissions are not stored in the website’s WordPress database or Elementor’s backend.
Instead, submitted information is transmitted using SMTP2GO, an email delivery service, for delivery to my business email account.
The contact form itself does not collect or retain your IP address.
SMTP2GO is used to transmit and deliver contact form emails. My SMTP2GO service is configured to use its EU infrastructure for email delivery.
SMTP2GO may retain certain delivery-related information, such as email headers and other information necessary to operate and monitor its service, in accordance with its own retention policies.
Once an enquiry has been delivered, the email is stored in my Proton Mail account and may be retained in accordance with this Privacy Policy.
Bookings made through Calendly are handled separately from the website contact form. Information submitted through Calendly is processed by Calendly for the purpose of scheduling and managing the appointment and is not stored in the website’s WordPress or Elementor database.
I do not sell contact form information or use it for unrelated third-party marketing.
If you separately opt in to receive marketing communications, your relevant contact information may be transferred to my email marketing provider for the purpose of managing your subscription and sending the communications you have requested.
7. Email
Email correspondence relating to website enquiries is handled using Proton Mail.
Proton Mail is provided by Proton AG, based in Switzerland. Proton provides services designed with privacy and data protection requirements in mind.
Email correspondence may contain personal information that you provide when contacting me, including your name, contact details and the contents of your enquiry.
Emails stored in my Proton Mail account are protected using Proton’s zero-access encryption, which is designed so that the contents of stored messages can only be decrypted by authorised users. Proton states that it cannot access the contents of messages protected by zero-access encryption.
I take reasonable steps to protect access to my email account and the devices I use to access it.
I use this information only for legitimate business purposes, including responding to enquiries, communicating with prospective clients and managing correspondence.
8. Marketing communications
If you actively opt in to receive marketing communications, I may use your contact details to send occasional marketing tips, updates and insights from Ross Purves Marketing.
My email marketing platform is Mailchimp.
Where Mailchimp is used:
- your contact details will only be added to the marketing list where you have provided the necessary consent or another lawful basis applies;
- marketing subscriptions may use a double opt-in confirmation process;
- your subscription status and consent information may be retained to demonstrate
- how and when consent was obtained;
- every marketing email will provide an opportunity to unsubscribe; and
- you can withdraw your consent at any time.
I will not make receipt of marketing communications a condition of contacting me or using the website.
The ICO’s guidance requires electronic marketing consent to be freely given, specific, informed and based on a clear affirmative action. Pre-ticked boxes or silence do not constitute valid consent. My marketing opt-in is therefore separate from the contact form itself and is not selected by default.
9. Cookies and analytics
This website uses cookies and similar technologies.
Some cookies are necessary for the website to operate correctly and may be used without consent where permitted by law.
Other cookies and technologies, including those used for analytics, are non-essential and will be controlled through the website’s cookie consent mechanism.
I use Google Analytics to understand how visitors use the website and to assess website performance.
Google Tag Manager may be used to manage website tags and associated technologies.
I may introduce other analytics or user-experience technologies in the future, such as Hotjar.
Non-essential analytics and tracking technologies will only be activated where the required consent has been provided.
You can manage your cookie preferences through the website’s cookie consent controls.
For further information about the specific cookies used on the website and how they operate, please see the [Cookie Policy].
10. Google Analytics and Google Tag Manager
I use Google Analytics to understand how visitors use the website, including information such as pages viewed, interactions and general website usage.
Google Tag Manager may be used to manage tags and scripts on the website. The information processed through Google Tag Manager depends on the tags that are configured within it.
Google Analytics and other non-essential tracking technologies will only operate after the appropriate consent has been provided.
Google may process information outside the UK as part of providing its services. Where personal information is transferred internationally, appropriate safeguards will be used where required by applicable data protection law.
11. Cloudflare and website security
Cloudflare services are used to help operate, protect and secure the website.
Cloudflare Web Application Firewall (WAF) helps protect the website against malicious traffic, automated attacks and other security threats. The WAF may process technical information relating to requests made to the website, including IP addresses, URLs, headers and other request information, for the purposes of detecting, preventing and mitigating malicious activity.
The website uses Cloudflare Turnstile to help prevent spam, automated submissions and other malicious activity.
Turnstile analyses technical signals from your browser or device to help determine whether a request is likely to have been generated by a human rather than an automated system. These signals may include your IP address, browser and device information and other technical information relevant to detecting automated activity.
Turnstile does not access, store or transmit the contents of information you enter into the website’s forms.
Turnstile is used for website security and spam prevention and is not used by me for advertising or behavioural marketing.
Cloudflare processes information in connection with Turnstile in accordance with its own privacy and data-processing arrangements.
For more information, see Cloudflare’s Turnstile Privacy Addendum.
12. WhatsApp, Calendly & Zoom
The website provides an option to contact me through WhatsApp.
When you select the WhatsApp contact option, your device may open the WhatsApp application or WhatsApp web interface and prepare a message containing my contact details and the following suggested message:
“I found your website and want to discuss a project.”
The message is not sent automatically. You decide whether to send it.
Once you choose to use WhatsApp and send a message, your communication is processed by WhatsApp and is subject to WhatsApp’s own terms and privacy policies.
I will process information you send to me through WhatsApp for the purpose of responding to your enquiry and communicating with you.
Calendly
The website uses Calendly to allow you to book calls and meetings with me.
When you use Calendly to book an appointment, information you provide during the booking process is processed by Calendly on my behalf. This may include your name, email address, telephone number, organisation or business name, responses to booking questions, meeting details and information relating to the appointment.
Calendly is responsible for providing the scheduling service, including managing availability, sending booking confirmations and reminders, and maintaining information relating to scheduled appointments.
Calendly states that customer and invitee data is stored in data centres located in the United States. Calendly provides contractual safeguards for UK personal data, including the UK Addendum to the Standard Contractual Clauses, and states that it uses appropriate safeguards for international transfers.
Calendly encrypts data in transit and at rest.
Calendly may use third-party service providers to provide its services. Its current list of sub-processors is available through its website and may change from time to time.
For more information about how Calendly processes personal information, please see Calendly’s Privacy Notice.
Zoom
Where you select Zoom as the meeting method when booking a call, Calendly may create a Zoom meeting associated with your appointment.
Zoom may process information required to create and operate the meeting, including your name, email address, meeting details and technical information relating to your participation.
Where you participate in a Zoom meeting, Zoom processes your information in accordance with its own privacy policy and terms.
The meeting is not recorded unless recording is expressly enabled. Where a meeting is recorded, appropriate notice will be provided and the recording will be handled in accordance with applicable data protection requirements.
For more information, see Zoom’s Privacy Statement.
13. Who do I share personal information with?
- Elementor, for website forms and website functionality;
- SMTP2GO, for transmission and delivery of contact form emails;
- Proton, for email hosting and correspondence;
- Google, for analytics and website tag management;
- Wordfence, for website security, firewall protection and threat detection;
- Cloudflare, for DNS management, Web Application Firewall protection, website security, traffic protection and spam prevention;
- Mailchimp, where you have opted in to marketing communications;
- Calendly, for appointment scheduling and meeting management;
- Zoom, where you select Zoom as the meeting method;
- WhatsApp, where you choose to contact me through WhatsApp; and
- other technical service providers that are necessary to operate and maintain the website.
14. International transfers
Some of the service providers used by this website may process personal information outside the United Kingdom.
For example:
- Proton Mail is provided by Proton AG, which is based in Switzerland;
- SMTP2GO provides EU-based infrastructure for my email delivery;
- Google services may involve processing outside the UK;
- Calendly stores customer and invitee data in US-based data centres and may involve international processing through its service providers. Calendly states that it uses contractual and other safeguards for transfers of UK personal data;
- Cloudflare services may involve international processing;
- Mailchimp may involve international processing if and when I introduce it for marketing communications; and
- Wordfence, provided by Defiant, Inc. in the United States, may involve the processing or transfer of technical and security-related information outside the UK. Wordfence states that appropriate safeguards are used for international transfers of personal data, including the UK International Data Transfer Agreement or UK Addendum where applicable.
Where personal information is transferred outside the UK, I will take appropriate steps to ensure that the transfer is made in accordance with applicable UK data protection law.
This may include relying on an adequacy decision, appropriate contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum, or another lawful transfer mechanism where required.
15. How long do I keep your information?
I keep personal information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required by law.
For website enquiries, I will generally retain correspondence for as long as reasonably necessary to manage the enquiry and any resulting relationship, and for a reasonable period afterwards where necessary for legitimate business, legal or record-keeping purposes.
If an enquiry does not result in a client relationship, I will not retain personal information indefinitely.
Contact form submissions are not retained in the website’s WordPress database or Elementor’s backend.
SMTP2GO retains certain email delivery information according to its own retention policies and service settings.
Calendly retains appointment and related information according to its own retention policies and the settings available within my Calendly account.
Marketing subscription information will generally be retained while you remain subscribed, together with appropriate records of consent and withdrawal where necessary to demonstrate compliance.
Some technical or analytics information may be retained by third-party providers according to their own retention policies and the settings configured for the website.
Where information is no longer required, I will take reasonable steps to delete or anonymise it.
16. How I protect your information
I take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
These measures include:
- appropriate website security;
- access controls;
- encrypted email and secure email services;
- encryption and security controls on devices used to access personal information;
security monitoring; - spam and automated-abuse prevention; and
- minimising the storage of contact form information on the website itself.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure. I therefore cannot guarantee absolute security of information transmitted to or from the website.
17. Your data protection rights
Under applicable UK data protection law, you may have rights including:
- the right to be informed about how your personal information is used;
- the right to request access to personal information I hold about you;
- the right to request correction of inaccurate or incomplete information;
- the right to request deletion of your personal information in certain circumstances;
- the right to request restriction of processing in certain circumstances;
- the right to object to certain processing, including direct marketing;
- the right to withdraw consent where processing is based on consent; and
- the right to data portability in circumstances where that right applies.
These rights are subject to certain legal conditions and exemptions.
You can exercise your rights by contacting me.
I may need to request additional information from you to verify your identity before responding to certain requests.
I will normally respond to a valid data protection request within one month, although this period may be extended where permitted by law for complex or multiple requests.
18. Direct marketing and your right to object
If you receive marketing communications from me, you can unsubscribe at any time using the unsubscribe mechanism provided in the communication or by contacting me directly.
You have an absolute right to object to the processing of your personal information for direct marketing purposes.
If you object to direct marketing, I will stop processing your personal information for that purpose unless there is a lawful reason why I am entitled or required to retain limited information to ensure that your preference is respected.
19. Complaints
If you have concerns about how I have handled your personal information, please contact me first.
You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), if you believe your personal information has been handled unlawfully.
You can find information about making a complaint on the ICO’s website.
20. Third-party websites and services
This website may contain links to third-party websites and services, including social media platforms, WhatsApp and other external websites.
Once you leave this website, the privacy practices of the relevant third party will apply.
I am not responsible for the privacy practices, security or content of third-party websites or services.
21. Changes to this Privacy Policy
I may update this Privacy Policy from time to time to reflect changes to the website, the services I use, the way I process personal information or changes in applicable law.
The “Last updated” date at the top of this policy indicates when it was most recently revised.
I recommend checking this page periodically for any changes.
22. Contact
If you have any questions about this Privacy Policy, how your personal information is processed, or your data protection rights, please contact me here.
Ross Purves Marketing
Ross Purves, Sole Trader
If you have any questions about this Privacy Policy or how I handle your personal information, please contact me