Template wording for review before publishing. Replace every [bracketed] item. Consider having a solicitor or the ICO's small-business guidance check it once your final list of tools is confirmed.
Last updated: [DD Month 2026]
1. Who we are
Marqui & Co ("we", "us") is a UK-based marketing services business. [LEGAL ENTITY NAME], [registered in England and Wales, company number XXXXXXXX], registered address [ADDRESS]. We are the data controller for the personal data described in sections 2 to 4 of this policy. Contact: info@marquico.com. [ICO registration number: XXXXXXX, if registered.]
2. What we collect and why
When you enquire or book a call: your name, phone number, email address, business name and anything you tell us about your business. We use this to respond to your enquiry, hold the call and, if you become a client, set up your account. Lawful basis: taking steps at your request before entering into a contract, and our legitimate interest in responding to enquiries.
When you become a client: the above plus your business address, billing details, Google Business Profile access, and the information needed to configure your system. Lawful basis: performance of our contract with you. Payment card details are handled by our payment provider and are never stored by us.
When you visit this website: technical data such as IP address, browser type and pages viewed, collected through cookies and similar technologies. See our cookie policy. Lawful basis: consent for non-essential cookies; legitimate interest in running a secure website for essential ones.
We do not use your details for marketing unless you have agreed to it, and you can withdraw that agreement at any time.
3. Who we share it with
We use trusted third-party services to run our business, each under a contract that restricts how they may use your data: [GoHighLevel (CRM, messaging and booking)], [Shopify (this website)], [Google (Business Profile and analytics)], [Stripe / GoCardless (payments)], [Xero (accounting)], and [email provider]. Some of these providers store data outside the UK; where they do, transfers are protected by the UK International Data Transfer Agreement, UK adequacy regulations or equivalent safeguards. We do not sell personal data.
4. How long we keep it
Enquiry data: [12] months after our last contact if you don't become a client. Client data: for the duration of our contract and [6] years afterwards for tax and legal reasons. Website analytics: as set out in the cookie policy.
5. Data we process for our clients
When we deliver services to a client business, we process personal data belonging to their customers (for example, names and mobile numbers used for review requests, missed-call replies and rebooking messages). For that data our client is the controller and we act as their processor under a written data processing agreement. If you have received a message from one of our clients and have a question or complaint, please contact that business directly or reply STOP to opt out of messages; we will also pass on any request you send to us.
6. Your rights
Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, to data portability, and to withdraw consent where consent is the basis. To exercise any of these, email info@marquico.com. We will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to resolve it first.
7. Changes
We may update this policy from time to time. The date at the top shows when it last changed.