Privacy Policy

EQUALS3 Ltd (“we”, “us”, or “our”) is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, and share your personal information when you visit our website at equalsthree.co.uk or engage with our services.

EQUALS3 Ltd is a company registered in England and Wales (Company No. 15186426) with its registered address at Upton Lane, Stroud, GL4 0UT, United Kingdom. We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy or how we handle your data, please contact us at Team@equalsthree.co.uk.

We may collect the following types of personal data:

We use the personal data we collect for the following purposes and on the following legal bases under UK GDPR:

• To respond to your enquiries — when you contact us via our website or email, we process your data to reply to you. Legal basis: legitimate interest.
• To provide our consultancy services — to deliver the growth strategy, analytics, and operational consulting services you have engaged us for. Legal basis: performance of a contract.
• To schedule appointments — to manage strategy call bookings through Google Calendar. Legal basis: legitimate interest.
• To improve our website — to understand how visitors use our site so we can enhance the user experience. Legal basis: legitimate interest.
• To comply with legal obligations — where we are required by law to retain or disclose data. Legal basis: legal obligation.

Our website uses cookies and similar technologies to enhance your browsing experience and to collect usage data.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect website functionality.

We use a number of third-party services to operate our website and deliver our services. These providers may process your personal data on our behalf:

• Vercel — hosts our website. Vercel may process technical data such as IP addresses and request logs. Vercel's servers are located in various global regions.
• Google Analytics — provides website analytics. Data is processed by Google LLC, which may transfer data outside the UK. Google participates in approved data transfer mechanisms.
• Google Calendar — manages appointment scheduling. When you book a strategy call, your name and email are shared with Google to create the calendar event.
• GoHighLevel — processes contact form submissions and manages client communications. Data you submit through our contact forms is stored within GoHighLevel's platform.
• Sanity — our content management system. Sanity stores and delivers website content such as blog posts and page content. It does not process visitor personal data.

We ensure that all third-party providers who process data on our behalf have appropriate data protection measures in place. Where data is transferred outside the UK, we ensure that adequate safeguards exist, such as Standard Contractual Clauses or an adequacy decision.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Enquiry data — retained for up to 24 months from the date of your last interaction with us, unless you become a client.
• Client data — retained for the duration of our engagement plus 6 years to comply with UK tax and accounting requirements.
• Analytics data — Google Analytics data is retained for 14 months, after which it is automatically deleted.

Under the UK General Data Protection Regulation, you have the following rights in relation to your personal data:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct any inaccurate or incomplete data.
• Right to erasure — you can request that we delete your personal data, subject to certain legal exceptions.
• Right to restrict processing — you can ask us to limit how we use your data in certain circumstances.
• Right to data portability — you can request your data in a structured, commonly used, machine-readable format.
• Right to object — you can object to our processing of your data where we rely on legitimate interest as our legal basis.
• Right to withdraw consent — where we rely on your consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at Team@equalsthree.co.uk. We will respond to your request within one month.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website uses HTTPS encryption to secure data transmitted between your browser and our servers.

While we take every reasonable precaution, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated “last updated” date. We encourage you to review this page periodically.