Privacy Policy

Last updated: 22 July 2026

This Privacy Policy explains how March Onward ("we", "us", "our") collects, uses, and protects your personal data when you visit our website or use our services.

1. Who We Are

March Onward is a UK-based sole trader business operated by:

We provide web design, website hosting, email hosting, Google Ads management (including Google Ad Grant management for registered charities), email marketing services, and automation services.

This policy covers personal data for which we are the data controller, such as data about our website visitors, enquirers, and clients. Where we process personal data on behalf of a client (for example, managing their email marketing list), we do so as a data processor under our agreement with that client, and the client's own privacy policy applies to that data.

2. Data We Collect

We may collect the following personal data:

• Name
• Email address
• Business name
• Charity name and registered charity number
• Charity postcode
• Whether your organisation currently has a Google Ad Grant
• Website URL
• Business type
• Whether your business is local or online
• Information about tools and software you use
• Social media links
• Website configuration details (e.g. CMS, Google Analytics, Google Ads, A/B testing)
• Any information you submit via forms or communications

We may also collect technical data automatically:

• IP address
• Browser type and version
• Device information
• Pages visited and usage behaviour

3. How We Collect Data

We collect data through:

• Consultation forms (processed via Zapier)
• Enquiry forms on our website, including the charity grant check form (processed via Zapier)
• Direct email communication
• Website analytics and cookies (managed via CookieYes consent)
• Publicly available registers, including the Charity Commission register of charities (see section 9)

4. How We Use Your Data

We use your data to:

• Provide free website consultation reports
• Respond to enquiries
• Deliver web design, hosting, and marketing services
• Manage client projects
• Improve our website and services
• Send service-related communications (e.g. consultation delivery and feedback requests)
• Send marketing emails, only where consent has been given

5. Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Contract: to provide the services you have requested (for example, a consultation or client work).
• Legitimate interests: to operate, secure, and improve our business, to respond to enquiries, and to offer relevant services to organisations (see section 9). We only rely on this where your interests and rights do not override ours.
• Consent: for marketing communications and non-essential cookies.

6. Marketing Communications

If you opt in, we may send occasional marketing emails (a maximum of 4 per year) about our services and insights.

You can withdraw consent at any time using the unsubscribe link in any email. Email marketing is managed via EmailOctopus.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Operate and secure our website
• Analyse website performance (Google Analytics)
• Support advertising and remarketing (Google Ads and Meta Pixel)

Non-essential cookies are only activated with your consent, which is managed through our CookieYes cookie banner. For more detail on the specific cookies we use, see our Cookie Policy.

8. Third-Party Services

We use trusted third-party processors to operate our business, including:

• Zapier — form processing and automation
• Stannp — printing and posting of direct mail
• Google Analytics — website analytics
• Google Ads — advertising and conversion tracking
• Meta Platforms — advertising and retargeting (future use)
• EmailOctopus — email marketing
• Stripe — payment processing
• Monday.com — project management (future use)
• EuroVPS — website hosting and email infrastructure

We only share the personal data these providers need to deliver their service to us, and each is bound by its own data protection obligations.

9. Direct Mail to Charities

We write to registered charities in the United Kingdom to offer Google Ad Grant management.

The details we use, which are the charity name, correspondence address, postcode, registered charity number, reported income and area of activity, are taken from the Charity Commission's public register of charities, which is published as open data.

Letters are addressed to the charity itself, not to a named individual. Where a charity's published correspondence address is a private one, we use it only as the address that charity has given for correspondence.

Our lawful basis is legitimate interests: offering a relevant service to organisations that are eligible for it, using the contact details those organisations have published. We have considered the limited nature of this processing and the fact that the data is already publicly available.

We keep a record of which charities we have written to and when, so that we can recognise replies and avoid writing to the same organisation twice. If a charity contacts us through our website, we may match the details they give us against that record.

If you would prefer we did not write to you again, email admin@marchonward.co.uk and we will remove you from all future mailings.

10. International Transfers

Some of our third-party providers may process your data outside the UK. Where this happens, we ensure appropriate safeguards are in place in line with UK GDPR, such as transfers to countries the UK considers adequate, or the use of an International Data Transfer Agreement or Standard Contractual Clauses.

11. Data Retention

We retain personal data as follows:

• Consultation and enquiry data: up to 24 months, unless you become a client. Where we decline a Unique Marketing Plan, the data you provided is deleted once we have let you know by email that we are unable to help, unless we are required to keep it for legal, regulatory, or accounting reasons.
• Direct mail records: up to 24 months from the date of posting, so that we can recognise replies and avoid writing to the same organisation twice. Where someone asks us not to write again, we keep a minimal record of that request for as long as necessary to honour it.
• Client data: retained for the duration of the contract, plus up to 6 years afterwards for legal and tax obligations.
• Marketing data: retained until you unsubscribe or request deletion.

12. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing
• Restrict processing
• Request transfer of your data to another provider (data portability)
• Withdraw consent at any time

To exercise these rights, contact: admin@marchonward.co.uk. We will respond within one month.

13. Data Security

We implement appropriate technical and organisational measures to protect your personal data against loss, misuse, or unauthorised access.

14. Children's Privacy

Our services are intended for businesses and organisations and are not directed at children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page with a revised "last updated" date.

16. Contact Us

If you have any questions about this Privacy Policy, contact:

Email: admin@marchonward.co.uk

If you are unhappy with how we handle your data, you also have the right to complain to the UK Information Commissioner's Office (ICO). You can contact the ICO at ico.org.uk or by calling 0303 123 1113.