Draft. Replace every bracketed placeholder and have this reviewed before you publish the site. The descriptions of what this website does are accurate; the company details are not filled in yet.
Who we are
This website is operated by GBN INTERNATIONAL LIMITED, trading as GBN Agency, registered in [COUNTRY] under company number [NUMBER], at [REGISTERED ADDRESS]. For anything in this policy you can reach us at admin@gbnlimited.com.
For the purposes of UK and EU data protection law we are the data controller for personal data collected through this website.
What we collect
Information you give us
When you submit the contact form we collect the name, organisation, work email, website and message you enter, plus the Ad Grant status and service interest you select. If you book a call we also receive whatever the scheduling tool asks for, typically your name, email and chosen time.
Information collected automatically
If — and only if — you accept analytics cookies, Google Analytics 4 records standard usage data: pages viewed, approximate location derived from a truncated IP address, device and browser type, and how you arrived at the site. Until you accept, our analytics runs in Google Consent Mode with all storage denied, which means no analytics or advertising cookies are written.
Our web host will also keep standard server logs, including IP addresses, for security and troubleshooting.
Why we use it, and our lawful basis
| Purpose | Data | Lawful basis |
|---|---|---|
| Replying to your enquiry and running the audit | Form and booking details | Legitimate interests / steps prior to a contract |
| Delivering services if you become a client | Contact and account details | Performance of a contract |
| Understanding which pages help nonprofits find us | Analytics data | Consent |
| Keeping the site secure | Server logs | Legitimate interests |
We do not sell personal data, and we do not add enquirers to a marketing list without asking.
Who we share data with
We use a small number of processors, each only for the purpose listed:
- Vercel Inc. — serves the website and keeps server logs.
- Web3Forms — delivers contact form submissions to our inbox.
- Calendly LLC — handles call bookings. The booking calendar on our contact page is loaded from Calendly, and if you book a call it receives the name, email address and answers you give it.
- Google (Analytics and Ads) — analytics and advertising measurement, only after you accept cookies.
Some of these providers process data outside the UK/EEA. Where they do, transfers rely on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.
Cookies
We set no cookies of our own until you make a choice in the banner.
- Strictly necessary: we store your cookie choice itself in your browser's local storage so we stop asking. That never leaves your device.
- Analytics and advertising: set by Google only after you press Accept. You can change your mind by clearing site data for this domain, which brings the banner back.
- Booking calendar: the contact page embeds Calendly's scheduling widget, and Calendly sets its own cookies when that page loads — before you interact with it, and independently of the choice you make in our banner. Every other page on this site is unaffected. Calendly's own privacy notice covers what it collects; if you would rather it did not load, email us at the address above and we will arrange a call that way instead.
How long we keep it
- Enquiries that do not become clients: [12 MONTHS], then deleted.
- Client records: for the length of the engagement plus [6 YEARS] for tax and accounting.
- Analytics data: retained per the retention period set in our GA4 property, currently [2 MONTHS / 14 MONTHS].
Your rights
Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or hand it to another provider. Where we rely on consent you can withdraw it at any time. Email admin@gbnlimited.com and we will respond within one month.
If you are unhappy with how we handled your data you can complain to your national supervisory authority — in the UK that is the Information Commissioner's Office at ico.org.uk.
Children
This site is aimed at people working at nonprofit organisations. We do not knowingly collect data from anyone under 16.
Changes
If we change this policy we will update the date at the top. Material changes will be flagged on the homepage for a reasonable period.