GDPR Policy

1. Data Controller

Visionary Marketing is the data controller responsible for your personal data. Our registered office is City Quadrant, 11 Waterloo St, Newcastle upon Tyne NE1 4DP. For any data protection queries, contact our Data Protection Officer at chris@visionary-marketing.co.uk.

2. Lawful Bases for Processing

We process personal data under the following lawful bases as defined by Article 6 of the UK GDPR:

• ■ Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as subscribing to marketing communications.
• ■ Contract: Where processing is necessary for the performance of a contract we have with you, or to take steps at your request before entering into a contract.
• ■ Legitimate Interest: Where processing is necessary for our legitimate interests or the legitimate interests of a third party, provided your rights do not override those interests. This includes improving our services and marketing our business.
• ■ Legal Obligation: Where processing is necessary to comply with a legal obligation, such as tax or accounting requirements.

3. Data We Collect

• ■ Identity Data: First name, last name, job title.
• ■ Contact Data: Email address, telephone number, company name, business address.
• ■ Technical Data: IP address, browser type and version, time zone, operating system, and platform.
• ■ Usage Data: Information about how you use our website, including pages visited, time on site, and referral source.
• ■ Marketing Data: Your preferences for receiving marketing from us and your communication preferences.

4. Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights:

• ■ Right of Access: You can request a copy of the personal data we hold about you (Subject Access Request).
• ■ Right to Rectification: You can request correction of inaccurate or incomplete personal data.
• ■ Right to Erasure: You can request deletion of your personal data where there is no compelling reason for its continued processing.
• ■ Right to Restrict Processing: You can request that we limit the processing of your personal data in certain circumstances.
• ■ Right to Data Portability: You can request to receive your personal data in a structured, commonly used, machine-readable format.
• ■ Right to Object: You can object to processing based on legitimate interests or direct marketing at any time.

To exercise any of these rights, contact us at chris@visionary-marketing.co.uk. We will respond within one month.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Contact form submissions are retained for 24 months. Client account data is retained for the duration of the contract plus 6 years to comply with HMRC requirements. Website analytics data is anonymised after 14 months.

6. International Transfers

Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the Information Commissioner's Office (ICO), or transfers to countries deemed adequate by the UK government.

7. Data Breaches

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours. Where the breach is likely to result in a high risk to your rights, we will also notify you directly without undue delay.

8. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would appreciate the opportunity to address your concerns first — please contact us at chris@visionary-marketing.co.uk.