Effective date: May 2026
This Privacy Policy sets out how Ryan Does Marketing Ltd and Ryan Does Marketing LLC (together, “we”, “us”, or “our”) collect, use, disclose, and safeguard your personal data when you visit ryandoesmarketing.co.uk (the “Website”) or engage our services (the “Services”). By accessing the Website or engaging the Services, you acknowledge that you have read and understood this Policy.
If you have any questions regarding this Policy or our data practices, please contact us using the details provided at the end of this document.
1. Data Controllers
The data controllers responsible for your personal data are:
Ryan Does Marketing Ltd, a company registered in England and Wales under company number 14545084, with its registered office at Pacific House, Green Lane, Relay Point, Wilnecote, Tamworth B77 5PA, United Kingdom. Ryan Does Marketing Ltd is the data controller for visitors and clients located in the United Kingdom, the European Economic Area, and elsewhere outside the United States.
Ryan Does Marketing LLC, a limited liability company organised under the laws of the State of Florida, with its principal place of business at 4301 32nd Street West, Bradenton, FL 34205, United States. Ryan Does Marketing LLC is the data controller for visitors and clients located in the United States.
Both entities operate in accordance with the same data protection standards set out in this Policy.
2. Personal Data We Collect
We collect personal data in the following circumstances:
2.1 Information you provide directly to us. When you complete a form on the Website (including but not limited to our ranking report request form, contact form, or chat function), or when you communicate with us by email, telephone, WhatsApp, or other means, we collect the personal data you choose to provide. This typically includes your name, business name, email address, telephone number, and any further information you elect to share regarding your business or enquiry.
2.2 Information collected during the provision of Services. Where you engage our Services, we collect such personal data as is necessary to deliver those Services. This may include billing and payment information (processed by our payment provider, as set out in Section 4), records of the Services purchased and delivered, communications between us, and any business credentials or assets you provide to enable us to perform the Services (for example, access credentials to your Google Business Profile, website, or related third-party platforms).
2.3 Information collected automatically. When you access the Website, we (and certain third-party service providers acting on our behalf) automatically collect technical and usage information through cookies and similar technologies. This information may include your Internet Protocol (IP) address, device type, browser type and version, operating system, referring website, the pages you view, the duration of your visit, and similar diagnostic data.
3. Purposes and Legal Bases for Processing
We process your personal data only where we have a lawful basis to do so. The purposes for which we process your personal data, and the corresponding lawful bases under the UK General Data Protection Regulation (“UK GDPR”), are as follows:
(a) To provide the Services you have requested, including responding to enquiries, delivering ranking reports, performing the contracted Services, and providing customer support. Lawful basis: performance of a contract, or steps taken prior to entering into a contract.
(b) To administer and operate our business, including invoicing, accounting, internal record-keeping, business analytics, and improving the Website and Services. Lawful basis: our legitimate interests in conducting and developing our business in an efficient manner.
(c) To send marketing communications to you about our Services, where you have requested such communications or where you are an existing client. You may opt out of marketing communications at any time by using the unsubscribe link contained in each marketing email or by contacting us directly. Lawful basis: your consent, or our legitimate interests in promoting our Services to existing clients.
(d) To comply with our legal and regulatory obligations, including obligations under tax, accounting, anti-money laundering, and consumer protection laws. Lawful basis: compliance with a legal obligation.
(e) To establish, exercise, or defend legal claims, where necessary to protect our legal rights. Lawful basis: our legitimate interests in protecting our legal position.
For visitors located in the United States, we process personal data in accordance with applicable state privacy laws, including the California Consumer Privacy Act (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”), where applicable.
4. Disclosure of Personal Data to Third Parties
We do not sell your personal data. We disclose your personal data only to the categories of recipients set out below, and only to the extent necessary for the purposes described in Section 3:
4.1 Service providers and processors. We engage the following third-party service providers to process personal data on our behalf, under contractual arrangements that require them to safeguard your data and to process it only in accordance with our instructions:
- Stripe, Inc. (payment processing). Payment card details are submitted directly to Stripe and are not stored on our systems. See https://stripe.com/privacy.
- HighLevel Inc. (GoHighLevel / LeadConnector) (customer relationship management and client communication platform). See https://www.gohighlevel.com/privacy-policy.
- Google LLC (Google Workspace for business communications, Google Analytics for Website analytics, and Google Tag Manager). See https://policies.google.com/privacy.
- Meta Platforms, Inc. (Facebook and Instagram advertising, including the Meta Pixel). See https://www.facebook.com/privacy/policy.
- Wistia, Inc. (video hosting for content embedded on the Website). See https://wistia.com/privacy.
- Cloudflare, Inc. (Website security, content delivery, and performance optimisation). See https://www.cloudflare.com/privacypolicy/.
- WhatsApp LLC (Meta) (instant messaging, where you elect to communicate with us via WhatsApp). See https://www.whatsapp.com/legal/privacy-policy.
4.2 Employees and contractors. Members of our team and authorised contractors may access your personal data where necessary to perform their duties. All such persons are subject to written confidentiality obligations.
4.3 Professional advisers. We may disclose personal data to our accountants, auditors, solicitors, insurers, and other professional advisers where reasonably necessary in connection with the operation of our business.
4.4 Legal and regulatory disclosures. We may disclose personal data where required to do so by law, by court order, or by a competent regulatory authority, or where such disclosure is necessary to protect our rights, property, or safety, or those of our clients or third parties.
4.5 Business transfers. In the event of a sale, merger, restructuring, or other transfer of all or part of our business, your personal data may be transferred to the relevant successor entity, subject to the protections set out in this Policy.
5. International Transfers of Personal Data
Because we operate in both the United Kingdom and the United States, and because certain of our service providers are established outside the United Kingdom and the European Economic Area, your personal data may be transferred to, stored in, or processed in jurisdictions other than your own.
Where we transfer personal data outside the United Kingdom or the European Economic Area, we ensure that an appropriate level of protection applies. This may be achieved through reliance on adequacy decisions issued by the UK government or the European Commission, the use of approved Standard Contractual Clauses (and the UK Addendum thereto), participation in the EU-US Data Privacy Framework and its UK Extension, or such other safeguards as may be required by applicable law.
You may request further information regarding the safeguards applied to international transfers of your personal data by contacting us using the details in Section 11.
6. Data Retention
We retain personal data for no longer than is necessary for the purposes for which it was collected, having regard to applicable legal, regulatory, accounting, and reporting requirements. Our standard retention periods are as follows:
(a) Client records (including service records, communications, and billing information): for the duration of the contractual relationship and for a period of 7 years thereafter, to comply with United Kingdom HM Revenue & Customs and United States Internal Revenue Service record-keeping requirements.
(b) Website analytics data: aggregated and retained for up to 48 months within Google Analytics, following which the data is automatically deleted.
(c) Marketing contact lists: retained until you withdraw your consent or unsubscribe, after which your contact details will be added to a suppression list to prevent further communications.
Where personal data is required to be retained beyond these periods to comply with a legal obligation or to establish, exercise, or defend legal claims, we will retain it for such longer period as is necessary and lawful.
7. Cookies and Similar Technologies
The Website uses cookies and similar tracking technologies to enable certain functionality, to analyse usage, and to deliver targeted advertising. The categories of cookies we use are as follows:
(a) Strictly necessary cookies, which are required for the operation of the Website and cannot be disabled.
(b) Analytics cookies, which collect anonymised information about how visitors use the Website (for example, via Google Analytics), enabling us to improve its performance.
(c) Advertising cookies, which are placed by us and our advertising partners (including Meta and Google) to measure the effectiveness of our advertising campaigns and to display relevant advertisements to you.
You may manage your cookie preferences at any time through your browser settings, or, where available, through the cookie preference controls provided on the Website. Please note that disabling certain cookies may affect the functionality of the Website.
8. Security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include encryption of data in transit (HTTPS), access controls, secure authentication, and the use of reputable service providers with established security practices.
No method of transmission over the internet or method of electronic storage is entirely secure, and we cannot guarantee absolute security. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required by law, affected individuals, within 72 hours of becoming aware of the breach.
9. Children’s Data
The Website and the Services are not directed at, or intended for use by, individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child without verified parental consent, we will take steps to delete such data promptly. If you believe a child has provided personal data to us, please contact us at the address below.
10. Changes to This Policy
We reserve the right to amend this Policy from time to time. Your continued use of the Website or the Services following the posting of an amended Policy constitutes your acceptance of the revised terms.
11. Contact Us
For any questions, comments, or requests in relation to this Policy or our processing of your personal data, please contact us as follows:
By email: hello@ryandoesmarketing.co.uk
By post (United Kingdom):
Ryan Does Marketing Ltd
Pacific House, Green Lane, Relay Point, Wilnecote, Tamworth B77 5PA, United Kingdom
By post (United States):
Ryan Does Marketing LLC
4301 32nd Street West, Bradenton, FL 34205, United States
We aim to respond to all enquiries within 30 days of receipt.
