Privacy policy

What we collect

• Contact form: your name, email address, company (if you give it), your message, and whether you opted in to marketing emails.
• Marketing diagnostic: your name, email address, company, your role and sector, business size, and your answers to the diagnostic questions.
• Technical data: our website host automatically logs basic technical information such as your IP address and browser type, to keep the site running and secure.

Why we use it, and our lawful basis

• To reply to your enquiry and, where relevant, to discuss working together, our legitimate interest in responding to people who contact us, and taking steps at your request before entering a contract.
• To generate and send your diagnostic report, and to follow up if you reply to it, our legitimate interest in providing a tool people have asked to use.
• To send occasional marketing emails, only where you have ticked the opt-in box. This is based on your consent, which you can withdraw at any time.
• To keep the website secure and working, our legitimate interest in protecting our systems.

Who we share it with

We don't sell your data and we don't share it for anyone else's marketing. We use a small number of trusted service providers who process data on our behalf, under contract:

• Vercel, website hosting.
• Resend, sending the diagnostic report and enquiry notifications by email.

We may also disclose information if the law requires it. This site uses no advertising or analytics trackers.

Storing data outside the UK

Vercel and Resend are US companies, and Vercel and Resend are both certified under the UK extension to the EU-US Data Privacy Framework, the recognised safeguard for sending personal data to the US. For any other provider whose data leaves the UK, we rely on a UK adequacy decision for the country in question or standard contractual clauses with the UK addendum.

How long we keep it

We keep enquiry and diagnostic information for as long as there is an active conversation or a realistic prospect of working together, and then for up to 24 months after our last contact, after which it is deleted. Marketing contacts are kept until you unsubscribe. You can ask us to delete your data sooner at any time.

Cookies and third-party content

We don't use tracking or advertising cookies, and we don't run any analytics on this site. Any storage in your browser is limited to what's needed for the site to function, such as remembering a choice you've made.

The one exception is our podcast page, which can show episode players hosted by RSS.com, our podcast host. Those players are never loaded automatically, only if you click to enable them, and RSS.com may then set its own cookies in your browser. See RSS.com's cookie policy for what they set.

Complaints

If you're unhappy with how we've handled your data, email dan@bluebirdmarketing.co.uk and we'll acknowledge it within 30 days and look into it properly. If you're not happy with our response, you can complain to the Information Commissioner's Office at ico.org.uk.

Your rights

Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to data portability, and, where we rely on consent, to withdraw that consent at any time. To exercise any of these, email dan@bluebirdmarketing.co.uk.

Changes

We may update this policy from time to time. The version on this page, with the date above, is the one that applies.

Contact

Questions about this policy or your data: dan@bluebirdmarketing.co.uk. See also our website terms of use.