Privacy Policy

Last updated: 1 April 2026

This privacy policy explains how Onlineify ("we", "us", "our") collects, uses, stores, and protects your personal data when you visit our website at onlineify.co.uk or engage with our services. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Who We Are

Onlineify is a digital marketing agency based in the United Kingdom. We provide services including but not limited to: Meta Ads management, Google Ads management, website development and SEO, Google Business Profile optimisation, email marketing, CRM setup and management, and custom application development.

2. What Data We Collect

2.1 Data you provide directly

  • Full name
  • Email address
  • Phone number
  • Business name and details
  • Any additional information you submit via contact forms, questionnaires, or email correspondence

2.2 Data we collect automatically

  • IP address (anonymised where possible)
  • Browser type and version
  • Device type and operating system
  • Pages visited, time spent, and navigation patterns
  • Referring website or source
  • Cookie and tracking pixel data (see Section 7)

2.3 Data we collect through third-party tools

We use the following third-party tools which may collect data on our behalf:

  • Google Analytics — website usage and traffic analysis
  • Meta Pixel (Facebook) — advertising performance tracking and audience insights
  • GoHighLevel (GHL) — CRM, pipeline management, forms, and client communication
  • Instantly.ai — email outreach and campaign management
  • Google Ads — advertising conversion tracking

3. How We Use Your Data

We process your personal data for the following purposes:

  • To respond to enquiries submitted through our website or other channels
  • To provide and manage our digital marketing services
  • To send you relevant marketing communications (only with your consent)
  • To analyse website traffic and improve our website and services
  • To manage our client relationships through our CRM system
  • To comply with legal obligations
  • To protect our legitimate business interests

4. Lawful Basis for Processing

Under the UK GDPR, we rely on the following lawful bases:

  • Consent — where you have given clear consent for us to process your personal data for specific purposes (e.g. marketing emails, cookie placement)
  • Contractual necessity — where processing is necessary to perform a contract with you or to take pre-contractual steps at your request
  • Legitimate interests — where processing is necessary for our legitimate business interests (e.g. improving our services, website analytics), provided these do not override your rights
  • Legal obligation — where processing is necessary to comply with UK law

5. Marketing Communications

We will only send you marketing emails where you have provided explicit opt-in consent. You can withdraw your consent at any time by:

We use Instantly.ai for email marketing campaigns. Your email address will be processed by Instantly.ai in accordance with their privacy policy. We do not sell or share your contact details with unrelated third parties for their own marketing purposes.

6. Who We Share Your Data With

We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

  • Service providers and processors — third-party platforms that help us deliver our services (e.g. GoHighLevel, Google, Meta, Instantly.ai)
  • Professional advisors — accountants, legal advisors, or auditors where necessary
  • Law enforcement or regulators — where required by law or to protect our legal rights

We do not sell your personal data to any third party. Where data is transferred outside the UK, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses or adequacy decisions).

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. Under PECR, we obtain your consent before placing non-essential cookies on your device.

7.1 Essential cookies

These are strictly necessary for the website to function and do not require consent. They include session cookies and security cookies.

7.2 Analytics cookies

We use Google Analytics to understand how visitors interact with our website. These cookies collect anonymised data about page visits, time on site, and navigation paths. You can opt out via our cookie banner or by adjusting your browser settings.

7.3 Marketing and advertising cookies

We use Meta Pixel and Google Ads conversion tracking to measure the effectiveness of our advertising campaigns and to build audience segments. These cookies are only placed with your explicit consent.

7.4 Managing cookies

You can manage or withdraw cookie consent at any time through our cookie banner, or by adjusting your browser settings. Please note that disabling certain cookies may affect website functionality.

8. How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Enquiry data — retained for up to 12 months after your last interaction, unless you become a client
  • Client data — retained for the duration of our working relationship and for up to 6 years afterwards (in line with HMRC requirements)
  • Marketing consent records — retained for as long as consent is active, plus 12 months after withdrawal
  • Analytics data — anonymised and retained in accordance with Google Analytics default retention settings

9. Your Rights

Under the UK GDPR, you have the following rights:

  • Right of access — to request a copy of the personal data we hold about you
  • Right to rectification — to request correction of inaccurate or incomplete data
  • Right to erasure — to request deletion of your data in certain circumstances
  • Right to restrict processing — to request that we limit how we use your data
  • Right to data portability — to receive your data in a structured, machine-readable format
  • Right to object — to object to processing based on legitimate interests or for direct marketing
  • Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at info@onlineify.co.uk. We will respond within one calendar month.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk — Helpline: 0303 123 1113

10. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

  • Encrypted data transmission (HTTPS/TLS)
  • Access controls and authentication on all systems
  • Regular review of data processing activities
  • Secure storage of client data within our CRM and internal systems

While we take every reasonable precaution, no method of data transmission or storage is completely secure. We cannot guarantee absolute security of your data.

11. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will delete it promptly.

12. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policies of any third-party websites you visit.

13. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, services, or legal requirements. Any significant changes will be communicated via our website. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this privacy policy or wish to exercise your data protection rights, please contact us: