Found First Marketing Ltd ("Found First", "we", "us") runs online marketing for businesses: Google Maps and SEO, Meta and Google ads, social media management, websites and AI automations. This policy explains what personal data we collect when you use our website or work with us, why, and what your rights are.
Who we are
Found First Marketing Ltd, a company registered in England and Wales.
Company number: [after registration]
Registered office: [registered office address]
ICO registration number: [after paying the ICO data protection fee]
Email: [privacy or hello@ business email] · Phone: [business phone]
- Details you give us. When you fill in a form, book a free visibility check, become a client or message us: your name, email address, phone number, business name, website, and anything you type into a message box.
- Booking details. When you pick a slot in our calendar we record the time you chose and the contact details you enter, so we can confirm the call and remind you about it by text and email.
- Payment details. If you become a client, you pay by card through Stripe or by direct debit. We never see or store your full card number. We receive confirmation of the payment, the amount, and the last four digits of the card. [If direct debit is not through Stripe, name the provider here and below.]
- Usage data. How you use our site: pages visited, time on page, the device and browser you use, and your rough location from your IP address. Collected through cookies and similar tools (see Cookies and tracking).
Why we use it
- To reply to you and do what you asked for: a reply to your message, a confirmed call, your free visibility check, a proposal.
- To run your account and deliver the services you have bought, including monthly billing.
- To send you marketing emails about our services, where you have opted in or are a client. Every marketing email has an unsubscribe link.
- To understand how our site and ads perform, so we can improve them.
- To meet our legal obligations, such as keeping records of sales.
The legal bases we rely on are: performing a contract with you (delivering what you bought), our legitimate interests (running and improving the business, marketing to existing clients), your consent (where you opt in), and legal obligation (tax and accounting records).
If you're a client
When we run ads, forms, follow-ups or a website for your business, we handle your customers' details (for example the people who enquire through your ads) on your behalf. For that data you are the controller and we act as your processor: we only use it to deliver the service to you, we keep it secure, and we don't use it for anything else. The details are set out in our client agreement.
Who we share it with
We use trusted services to run the business, and they process data on our behalf:
- GoHighLevel (LeadConnector) for our website, forms, calendar, email, text messages and CRM.
- Stripe for payments.
- Meta (Facebook and Instagram) and Google for advertising and analytics, including the Meta Pixel and Google Analytics.
We do not sell your data. We only share it where needed to deliver a service, where the law requires it, or with your permission.
Some of these providers store data outside the UK. Where that happens, transfers are covered by the provider's standard contractual safeguards.
Cookies and tracking
Our site uses cookies and similar tools for two things: making the site work (for example remembering a form you started) and measuring advertising (the Meta Pixel, Google Analytics and similar tags tell us when someone who saw an ad visited the site or got in touch). You can block cookies in your browser settings. The site will still work, but some measurement will not.
How long we keep it
- Enquiries and leads: up to 2 years from last contact.
- Client and purchase records: 6 years, to meet UK tax and accounting rules.
- Marketing lists: until you unsubscribe. We then keep a record of the unsubscribe so we don't email you again.
Your rights
Under UK data protection law you can ask us to: tell you what data we hold about you, correct it, delete it, stop using it for marketing, restrict how we use it, or give you a copy in a portable format. You can also object to processing based on our legitimate interests.
To use any of these rights, email [business email]. We will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Children
Our services and site are for businesses and adults. We do not knowingly collect data from anyone under 18.
Changes
We will update this page if our practices change. The date at the top tells you when it was last revised.
Not legal advice. Plain-English draft based on the PS Results policy (UK GDPR, Data Protection Act 2018, PECR). Worth a solicitor's once-over before launch.