Privacy Policy

Last updated: 1 June 2026

This Privacy Policy explains how March Onward ("we", "us", "our") collects, uses, and protects your personal data when you visit our website or use our services.

1. Who We Are

March Onward is a UK-based sole trader business operated by:

We provide web design, website hosting, email hosting, Google Ads management, email marketing services, and automation services.

This policy covers personal data for which we are the data controller, such as data about our website visitors, enquirers, and clients. Where we process personal data on behalf of a client (for example, managing their email marketing list), we do so as a data processor under our agreement with that client, and the client's own privacy policy applies to that data.

2. Data We Collect

We may collect the following personal data:

• Name
• Email address
• Business name
• Website URL
• Business type
• Whether your business is local or online
• Information about tools and software you use
• Social media links
• Website configuration details (e.g. CMS, Google Analytics, Google Ads, A/B testing)
• Any information you submit via forms or communications

We may also collect technical data automatically:

• IP address
• Browser type and version
• Device information
• Pages visited and usage behaviour

3. How We Collect Data

We collect data through:

• Consultation forms (processed via Zapier)
• Direct email communication
• Website analytics and cookies (managed via CookieYes consent)

4. How We Use Your Data

We use your data to:

• Provide free website consultation reports
• Respond to enquiries
• Deliver web design, hosting, and marketing services
• Manage client projects
• Improve our website and services
• Send service-related communications (e.g. consultation delivery and feedback requests)
• Send marketing emails, only where consent has been given

5. Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Contract: to provide the services you have requested (for example, a consultation or client work).
• Legitimate interests: to operate, secure, and improve our business and respond to enquiries. We only rely on this where your interests and rights do not override ours.
• Consent: for marketing communications and non-essential cookies.

6. Marketing Communications

If you opt in, we may send occasional marketing emails (a maximum of 4 per year) about our services and insights.

You can withdraw consent at any time using the unsubscribe link in any email. Email marketing is managed via EmailOctopus.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Operate and secure our website
• Analyse website performance (Google Analytics)
• Support advertising and remarketing (Google Ads and Meta Pixel)

Non-essential cookies are only activated with your consent, which is managed through our CookieYes cookie banner. For more detail on the specific cookies we use, see our Cookie Policy.

8. Third-Party Services

We use trusted third-party processors to operate our business, including:

• Zapier — form processing and automation
• Google Analytics — website analytics
• Google Ads — advertising and conversion tracking
• Meta Platforms — advertising and retargeting (future use)
• EmailOctopus — email marketing
• Stripe — payment processing
• Monday.com — project management (future use)
• EuroVPS — website hosting and email infrastructure

We only share the personal data these providers need to deliver their service to us, and each is bound by its own data protection obligations.

9. International Transfers

Some of our third-party providers may process your data outside the UK. Where this happens, we ensure appropriate safeguards are in place in line with UK GDPR, such as transfers to countries the UK considers adequate, or the use of an International Data Transfer Agreement or Standard Contractual Clauses.

10. Data Retention

We retain personal data as follows:

• Consultation and enquiry data: up to 24 months, unless you become a client. Where we decline a Unique Marketing Plan, the data you provided is deleted once we have let you know by email that we are unable to help, unless we are required to keep it for legal, regulatory, or accounting reasons.
• Client data: retained for the duration of the contract, plus up to 6 years afterwards for legal and tax obligations.
• Marketing data: retained until you unsubscribe or request deletion.

11. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing
• Restrict processing
• Request transfer of your data to another provider (data portability)
• Withdraw consent at any time

To exercise these rights, contact: admin@marchonward.co.uk. We will respond within one month.

12. Data Security

We implement appropriate technical and organisational measures to protect your personal data against loss, misuse, or unauthorised access.

13. Children's Privacy

Our services are intended for businesses and are not directed at children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page with a revised "last updated" date.

15. Contact Us

If you have any questions about this Privacy Policy, contact:

Email: admin@marchonward.co.uk

If you are unhappy with how we handle your data, you also have the right to complain to the UK Information Commissioner's Office (ICO). You can contact the ICO at ico.org.uk or by calling 0303 123 1113.