Privacy
Privacy notice
This notice explains what personal data Authority Works collects, why it is collected, how long it is kept and what you can ask me to do with it. It is written to be read, not to be skimmed past.
Who is responsible for your data
Sam Broom operates Authority Works and is the data controller, based in Preston, Lancashire, United Kingdom. You can reach me at hello@sbroom.co.uk.
What I collect
- Enquiry details you submit: name, email, company, website, optional phone number, the service you are interested in and your message.
- Attribution data attached to your enquiry: UTM campaign parameters, the landing page you arrived on and the referring website.
- Analytics data about how the site is used, collected in an aggregated form. Personal data from the enquiry form is never sent to analytics.
Why I use it and the lawful basis
- To reply to your enquiry and, if you go ahead, to deliver the work. Lawful basis: legitimate interests and, once engaged, performance of a contract.
- To send occasional marketing emails, but only where you have ticked the separate optional marketing consent box. Lawful basis: consent. You can withdraw it at any time.
- To understand which channels produce enquiries so marketing spend can be justified. Lawful basis: legitimate interests.
Cookies and analytics
Analytics and tag management run through Google Tag Manager with Consent Mode. Non essential cookies are only set once you have given consent through the banner. You can change your choice at any time.
Who else sees your data
Your enquiry is delivered to my email and automation tooling so I can respond and keep a record of the conversation. Processors are used for hosting, email, analytics and spam protection. No personal data is sold or shared for advertising purposes.
How long it is kept
Enquiries that do not become projects are deleted after 24 months. Client records are kept for six years after the end of the engagement to meet accounting and legal obligations. Marketing consent records are kept for as long as you remain subscribed, plus the period needed to evidence the consent.
Your rights
Under UK GDPR you can ask for a copy of your data, ask for it to be corrected or deleted, object to processing based on legitimate interests, and withdraw marketing consent. Email me and I will action it. If you are unhappy with how I have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.
Changes to this notice
If this notice changes materially, the updated version will be published here with a revised date.