Privacy Policy

1. Who I am

This website is run by Gus Maughan, trading as Gus Maughan Paid Media. In this policy, "I" and "me" mean Gus Maughan Paid Media.

I am the data controller for the personal data described here. That just means I decide how and why your data is used, and I am responsible for looking after it properly under UK data protection law (the UK GDPR and the Data Protection Act 2018).

2. What I collect

The data I collect depends on how you deal with me:

• Forms. Your name, email address, phone number (if you give one), business name and website, what you want help with, and anything else you write in your message.
• Booking a call. If you book through Calendly, I receive your name, email address, the time you booked and any answers you give on the booking form.
• Emails and messages. Anything you send me directly by email or through LinkedIn.
• Website data. Your IP address, browser and device type, and which pages you visit, collected through cookies and similar tools (see section 9).

I do not need any sensitive personal data (things like health, religion or political views). Please do not include any in your messages.

3. How and why I use it

UK law says I need a lawful reason (a "lawful basis") for using your data. Here is what I use it for and the basis I rely on:

4. Marketing and outreach

If you submit a form and agree to hear from me, I may contact you about my paid media services. That is usually by email, and sometimes by phone or a LinkedIn message. It might be a follow-up to your enquiry, an idea I think is relevant to your business, or news about what I am offering.

You are always in control:

• Every marketing email has an unsubscribe link.
• You can also email me at work@gusmaughan.com and ask me to stop, and I will.
• If you opt out, I keep a minimal record of that so I do not contact you again by mistake.

Opting out of marketing will not affect any work we are doing together or my reply to your enquiry.

5. Who I share it with

I do not sell your personal data. I only share it with people and companies who help me run my business, and only as far as they need it:

• Website hosting and form tools (Squarespace).
• Scheduling tools (Calendly).
• Email and marketing tools I use to manage enquiries and send emails (Squarespace Email Campaigns and Google Workspace).
• Analytics and advertising tools (Google Analytics and the Meta Pixel) that show me how the website is used and help me measure and show my own ads.
• Professional advisers such as my accountant or legal adviser, where needed.
• Public authorities, if I am legally required to.

These providers handle your data under their own privacy terms and, where they act on my behalf, under agreements that require them to protect it.

6. Transfers outside the UK

Some of the tools I use are based in, or store data in, countries outside the UK, including the United States. When your data is transferred, I make sure it is protected by an approved safeguard, such as UK adequacy regulations (including the UK-US data bridge for certified companies) or the UK International Data Transfer Agreement or Addendum.

7. How long I keep it

• Enquiries that do not go any further: up to 24 months after our last contact, then I delete them.
• Marketing contacts: until you unsubscribe or ask me to delete your details.
• Clients: invoices and accounting records for 6 years, because tax law requires it. Other project data is kept only as long as it is useful for the work.

If you ask me to delete your data sooner, I will, unless the law says I have to keep it.

8. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data I hold about you;
• ask me to correct anything that is wrong or incomplete;
• ask me to delete your data;
• ask me to restrict how I use your data;
• object to me using your data, including an absolute right to object to direct marketing;
• ask for your data in a portable format;
• withdraw your consent at any time, where I rely on consent.

To use any of these, email me at work@gusmaughan.com. There is no charge, and I will reply within one month. I may need to check who you are before I share any data.

If you are unhappy with how I have handled your data, I would like the chance to put it right first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

9. Cookies

This website uses cookies, which are small files stored on your device. Some are essential for the site to work. Others help me understand how the site is used, for example which pages are most visited, and let me measure and show my own ads on platforms like Meta and Google. Where the law requires it, I only use non-essential cookies if you agree.

You can change your choices through the cookie banner on this site, or by adjusting the settings in your browser. Blocking some cookies may affect how parts of the site work.

10. Keeping it safe

I use sensible technical and organisational measures to protect your data, including secure, password-protected tools and limiting who can access it. No method of sending data over the internet is completely secure, so I cannot promise absolute security, but I take it seriously.

11. Children

My services and this website are for businesses and adults. I do not knowingly collect personal data from anyone under 18. If you think a child has sent me their details, email me and I will delete them.

12. Links to other sites

This website may link to other sites, such as LinkedIn or Calendly. I am not responsible for how they handle your data, so please read their privacy policies when you use them.

13. Changes to this policy

I may update this policy from time to time. The date at the top of the page shows when it was last changed. If I make a significant change, I will say so on the website.

14. Contact me