Privacy Policy

Last Updated: October 2025

This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website, use our services, or interact with us. It applies to all personal data processed by Make and Market (“we”, “us”, “our”).

1. Information We Collect

We may collect and process the following types of personal information:

  • Personal Information You Provide:
    When you contact us, sign up for a newsletter, download free resources, or use our services, you may provide details such as your name, email address, phone number, postal address, and any other information you choose to share.

  • Automatically Collected Information:
    When you visit our website, we may automatically collect information about your device and browsing behaviour, including IP address, browser type, referring/exit pages, and interactions with our site. This is done through cookies and similar technologies (e.g., Google Analytics).

2. How We Use Your Information

We use your personal information for the following purposes, under the lawful bases set out by the UK GDPR:

  • To provide and manage our services (Contractual necessity).

  • To communicate with you about enquiries, projects, or updates (Legitimate interests).

  • To send newsletters and marketing emails if you have opted in (Consent).

  • To track website performance and improve user experience (Legitimate interests).

  • To manage client projects, contracts, and communications (Contractual necessity).

We will not use your information for purposes materially different from those described without first notifying you and, where required, obtaining your consent.

3. Sharing Your Information

We do not sell your personal information to third parties. However, we may share data with trusted third-party service providers who help us operate and deliver our services. These providers only process your data to the extent necessary to perform their functions and are contractually required to keep your information secure and confidential.

The main third-party providers we use are:

  • Mailchimp – for email marketing and subscription management.

  • Google Analytics – for website analytics and performance tracking.

  • Dubsado – for managing client projects, forms, scheduling, and contracts.

  • Squarespace – for website hosting, form submissions, and analytics.

  • GoCardless – for processing client payments and managing direct debits.

Some of these providers may be located outside the UK (e.g., in the United States). Where international data transfers occur, we ensure that appropriate safeguards are in place, such as the use of Standard Contractual Clauses approved by the UK Information Commissioner’s Office (ICO), to protect your personal information in line with UK GDPR requirements.

4. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to comply with legal, accounting, or reporting requirements. When we no longer need your data, it will be securely deleted or anonymised.

5. Your Rights

As a UK-based business, we comply with the UK General Data Protection Regulation (UK GDPR). You have the right to:

  • Access, correct, or request deletion of your personal information.

  • Object to or restrict processing in certain circumstances.

  • Withdraw consent to marketing at any time by clicking “unsubscribe” in our emails.

  • Lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk if you believe your data rights have been violated.

We will respond to any rights requests within one month, in line with legal requirements.

6. Cookies

Our website uses cookies to enhance your browsing experience and analyse site performance. You can choose to accept or reject cookies through your browser settings. Disabling cookies may affect how the website functions.

For more information, see our Cookie Policy

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, or alteration. While we strive to use commercially acceptable means to protect your data, no system is 100% secure, and we cannot guarantee absolute security.

8. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact:

Carly Stewart
Email: carly@makeandmarket.co.uk

9. Udates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. Any updates will be posted on this page with a revised “Last Updated” date. We encourage you to review this page periodically.