Effective Date: 01/04/2025

At JCL Marketing, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, share, and protect personal data through our digital marketing services and platforms.

We predominantly operate in the United Kingdom and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions or concerns about how your data is handled, you can contact us at:

JCL Marketing
📧 [email protected]
📞 07900 940 110
🏢 Unit C, Walstead Road, WS5 4PG

1. Who We Are

JCL Marketing is a UK-based digital marketing agency providing services such as SEO, PPC, email marketing, CRM integrations, analytics, and marketing automation. We work with a range of clients and, in doing so, collect and process personal data both for our business purposes and on behalf of our clients.

2. What Data We Collect

We may collect the following types of data directly from clients or through digital marketing platforms:

A. Client & Contact Information

• Name, business name, job title
• Email address, phone number, business address
• CRM login details (where authorised)
• Communication preferences

B. Website & Marketing Data

• IP address and geolocation
• Device, browser, and operating system data
• User interaction data (clicks, time on page, bounce rates)
• Source and referral data (e.g. via UTM tags)

Collected via:

• Google Analytics
• Google Search Console
• Supabase
• Client CRM systems
• Marketing platforms (e.g. Mailgun)

C. Email & CRM Data

• Email activity (opens, clicks, bounces, unsubscribes)
• Form submissions
• Survey or feedback data
• Customer lifecycle or lead status information

We do not knowingly collect sensitive personal data unless specifically agreed upon with the client and handled with appropriate safeguards.

3. How We Use Your Data

We use personal data for the following purposes:

• To deliver digital marketing services to clients
• To manage email campaigns and subscriber lists
• To analyse website traffic and campaign effectiveness
• To configure and support CRM systems
• To troubleshoot, maintain, or enhance marketing platforms
• To respond to enquiries and provide support
• To meet legal and contractual obligations

4. Lawful Bases for Processing

We rely on the following legal bases for processing data:

• Consent – when required for email marketing or analytics
• Contract – when processing is necessary to fulfil client agreements
• Legitimate interest – for improving service quality and business efficiency
• Legal obligation – where required by regulatory bodies

5. Data Sharing and Third Parties

We use trusted third-party platforms to deliver services, including:

All partners and processors are vetted for GDPR compliance and, where necessary, appropriate Data Processing Agreements (DPAs) are in place.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law or contract.

For data processed on behalf of clients, retention periods are defined by the client or their platform configurations.

7. International Data Transfers

Some of our third-party tools (e.g. Mailgun, Google) store data outside the UK. When this occurs, we ensure safeguards are in place:

• Standard Contractual Clauses (SCCs)
• Vendor compliance with GDPR-equivalent protections
• Secure data encryption and access controls

8. Your Rights Under GDPR

If you are located in the UK or EU, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or outdated data
• Request erasure of your data (“right to be forgotten”)
• Restrict or object to certain processing
• Withdraw consent at any time
• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, please contact: [email protected]

9. Email Communications (Mailgun Compliance)

JCL Marketing uses Mailgun to manage and send email campaigns and transactional messages. Mailgun collects:

• Email addresses
• Interaction data (opens, clicks, bounces, unsubscribes)
• Server logs and delivery status

All marketing messages include an unsubscribe link, and consent is obtained prior to sending non-transactional content in accordance with GDPR and PECR.

10. Cookies and Tracking

We use cookies on our website and client sites to:

• Analyse website usage (via Google Analytics)
• Personalise content and user experience
• Track conversions and optimise campaigns

For details, please refer to our separate [Cookie Policy] (available on our website).

11. Security Measures

We use strong technical and organisational measures to protect data, including:

• SSL encryption for data in transit
• Access controls and authentication for all platforms
• GDPR-compliant data processors (e.g. Supabase, Mailgun)
• Regular audits and internal training

12. Acting as a Data Processor

In many cases, JCL Marketing acts as a data processor on behalf of our clients. In those instances, we:

• Only process data under client instruction
• Maintain strict confidentiality
• Support clients with data subject requests and data breach responses
• Comply with all applicable data protection obligations

13. Changes to This Policy

We may update this Privacy Policy occasionally. Updates will be posted on our website with the “Effective Date” shown above. We encourage you to check periodically for changes.

14. Contact Us

If you have questions, data requests, or complaints, contact:

JCL Marketing
📧 [email protected]
📞 07900 940 110
🏢 Unit C, Walstead Road, WS5 4PG