Privacy Policy

Last Updated: 8 April 2025

This Privacy Policy explains how I, Andy Fullard, collect, use, and protect your personal data when you visit my website, submit a form, or work with me. I’m committed to respecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR).

  1. Who I Am Andy Fullard Marketing, Sole trader providing Fractional Marketing for D2C Brands. If you have any questions, contact me at: andy@andyfullardmarketing.com
  1. What Personal Data I Collect Depending on how you interact with me, I may collect:
  • Contact details (name, email, phone)
  • Business information (company name, role, goals)
  • Responses from forms (e.g. Typeform lead forms)
  • Usage data (via Google Analytics)
  • Email communications (stored in Gmail or Hubspot)
  1. How I Collect Your Data
  • Directly from you (when you fill out a Typeform, book a call, or contact me)
  • Automatically via cookies and analytics tools (when you browse the site)
  1. Why I Collect It
  • To respond to enquiries and provide services
  • To improve my website and service offerings
  • To manage my client relationships
  • For internal record keeping and legal compliance
  1. Google Analytics I use Google Analytics to understand how visitors interact with my website (e.g. page views, time on site). This may include anonymised IP addresses and browser information. Google Analytics uses cookies. You can opt out using this tool: tools.google.com/dlpage/gaoptout
  1. How I Process Data on Behalf of Clients In the course of delivering services, I may access client-owned platforms such as Klaviyo, Meta Business Suite, Google Ads, Shopify, and similar tools. Where I access customer data within these tools, I do so under the client’s instruction and control.

In some cases, I may export limited personal data—such as customer lists or campaign performance data—to provide services like segmentation, audience analysis, or reporting. This data may be temporarily stored and processed using secure, GDPR-compliant tools (e.g., Google Workspace, Notion, n8n, or spreadsheet tools).

All exported data is handled with strict confidentiality, stored only for as long as needed to complete the agreed work, and deleted after project completion unless otherwise agreed in writing.

  1. Who I Share Data With I do not sell or rent your data. I may use trusted third-party tools that process your data securely:
  • Google Workspace (email, Drive)
  • Typeform (form submissions)
  • Zoho Books (invoicing)
  • CRM tools (Hubspot)
  • n8n (workflow automation)

All data processors are GDPR-compliant to the best of my knowledge.

  1. Data Retention I keep client data for as long as necessary to provide services and comply with legal obligations. For non-client leads: I retain contact form responses for up to 12 months.
  1. Data Retention for Client Projects I do not retain personal data from client platforms beyond the duration of the project. Any exports or working files containing customer data are securely deleted within 30 days of project completion unless otherwise requested by the client.
  1. Your Rights Under the UK GDPR, you have the right to:
  • Access your personal data
  • Request correction or deletion
  • Object to or restrict processing
  • Withdraw consent at any time

To exercise these rights, email: andy@andyfullardmarketing.com

  1. Cookies I use essential and analytics cookies. You can manage cookies via your browser settings or the cookie banner (if enabled).For more information, see my Cookie Policy.
  1. Changes to This Policy This policy may be updated from time to time. Last updated: 8 April 2025