Privacy Policy

1. Who We Are (Data Controller)

GlowSocial.uk operates as a UK sole trader business founded by Gary Lanham, providing professional social media management, video creation, and creative strategy services across the United Kingdom.

For the purposes of UK data protection legislation, Gary Lanham trading as GlowSocial.uk is the Data Controller responsible for your personal information.

If you have questions regarding this policy or wish to exercise your data rights, contact Gary directly at Hello@glowsocial.uk.

2. Information We Collect

We collect personal information strictly necessary to communicate with you and perform client work:

• Identity & Contact Details: Your full name, business email address, phone number, and business name supplied when you submit our contact form, book a discovery call, or email us.
• Project & Social Media Information: Your public social media profiles (Instagram, Facebook, TikTok, Threads, Bluesky, YouTube, WhatsApp, Google Business Profile, LinkedIn), target audience criteria, and brand preferences.
• Technical & Usage Data: Basic website telemetry (such as browser type, operating system, and aggregate pages visited) collected through standardized cookies to optimise website responsiveness.

3. Lawful Bases for Processing

Under UK GDPR (Article 6), we process your personal data under the following lawful bases:

• Contractual Necessity: To respond to your enquiries, formulate proposals, and deliver agreed monthly social media retainers.
• Legitimate Interests: To correspond with prospective and existing clients, answer questions, and manage our direct creative partnerships.
• Consent: For optional non-essential performance cookies (Google Analytics 4), managed via our on-site Cookie Consent Banner.
• Legal Compliance:To maintain accurate invoicing and tax records in accordance with HM Revenue & Customs (HMRC) statutory regulations.

4. Absolute Commitment: We Never Sell Your Data

GlowSocial.uk does not sell, rent, lease, or trade personal data or client contact lists to any third parties or marketing brokers. Your details are treated with strict confidentiality and used exclusively to fulfil our direct service commitments to you.

5. Data Storage, Security & Retention

All digital records are stored using enterprise-grade, encrypted cloud storage (including Google Workspace infrastructure) protected with strong passwords and multi-factor authentication.

We retain prospective enquiry data only as long as necessary to answer questions and establish service terms. Client financial and billing records are retained for a statutory period of six (6) years in accordance with UK tax law.

6. Third-Party Data Processors (Sub-Processors)

To securely deliver our website, store client enquiries, and communicate with you, we partner with trusted third-party cloud service providers under data processing agreements:

• Cloudflare, Inc. (USA / Global): Provides edge content delivery (CDN), DNS routing, DDoS security protection, and worker hosting. International transfers are protected via the UK International Data Transfer Addendum and EU Standard Contractual Clauses (SCCs).
• Google LLC (Google Workspace & Apps Script): Cloud infrastructure used to securely receive, route, and store contact form enquiries and business emails. Google complies with UK GDPR via their Cloud Data Processing Addendum.
• Google LLC (Google Calendar Appointments): Embedded appointment scheduler for discovery calls. When used, Google processes appointment booking times and names.
• Meta Platforms Ireland Ltd (WhatsApp): Direct end-to-end encrypted messaging communications when you choose to message Gary via the WhatsApp chat button.

7. Your Statutory Rights Under UK GDPR

You hold statutory rights regarding your personal information under the UK GDPR:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure: Request the deletion of your personal data where retention is no longer legally required.
• Right to Restrict or Object: Object to or restrict specific data processing activities.
• Right to Data Portability: Request the transfer of your data to another provider in a structured format.

To exercise any of these statutory rights, please email us directly at Hello@glowsocial.uk.

You also have the right to lodge a formal complaint with the UK supervisory authority: the Information Commissioner's Office (ICO) at ico.org.uk .