Privacy Policy

Who We Are

Margin Intelligence is a growth analytics consultancy providing async audit and advisory services for nutrition, supplement, and wellness brands. We operate at marginreport.co.uk and can be contacted at hello@marginreport.co.uk.

For the purposes of UK data protection law, Margin Intelligence is the data controller for personal data collected through this website and our services.

What Data We Collect

We collect the following categories of personal data:

• Contact information: your name, email address, and business name when you contact us, complete our intake form, or purchase a service.
• Payment information: payment is processed by Stripe. We do not store your card details. Stripe's own privacy policy applies to payment data.
• Business data: commercial information you provide as part of a Growth Snapshot, Full Diagnostic, or Accelerator engagement, including revenue estimates, ad spend figures, platform data, and operational details.
• Communications: emails, messages, and any written correspondence between you and Margin Intelligence.
• Usage data: basic website analytics such as page visits. We use no advertising trackers or third-party analytics beyond what is described in this policy.
• Intake form responses: responses submitted via our Google Form intake process, hosted by Google. Google's privacy policy applies to form data storage.

Why We Collect It and Our Legal Basis

We collect and process your data for the following purposes and on the following legal bases under UK GDPR:

• To deliver our services (Contract): we need your contact and business data to perform the Growth Snapshot, Full Diagnostic, or Accelerator service you have purchased.
• To process payments (Contract): payment processing via Stripe requires your email address and billing information.
• To respond to enquiries (Legitimate Interests): when you contact us, we process your data to respond to your message.
• To comply with legal obligations (Legal Obligation): we may retain certain financial records as required by HMRC and UK tax law.
• To send service-related communications (Contract / Legitimate Interests): we send emails directly related to your engagement, including intake forms, report delivery, and Q&A responses.

We do not send marketing emails without your explicit consent. We do not sell your data to any third party.

How Long We Keep Your Data

• Client data: retained for 6 years from the end of the engagement. This is required for HMRC compliance purposes.
• Enquiry data: if you contact us but do not become a client, we retain your data for 12 months and then delete it.
• Payment records: retained by Stripe in accordance with their data retention policy. We retain invoice records for 6 years.
• Email correspondence: retained for the duration of the client relationship plus 6 years.

Who We Share Your Data With

We do not sell or rent your personal data. We share data only with the following third parties where necessary to deliver our services:

• Stripe: payment processing. Stripe is PCI-DSS compliant. Their privacy policy is available at stripe.com/gb/privacy.
• Google: we use Google Forms for client intake, Google Docs for report delivery, and Google Drive for file storage. Google's privacy policy applies to data processed through these tools.
• IONOS: email hosting for hello@marginreport.co.uk. IONOS processes email data in accordance with their privacy policy.
• Cloudflare: website hosting and delivery. Cloudflare may process basic request data. Their privacy policy is available at cloudflare.com/privacypolicy.
• Loom: we use Loom to record and deliver video walkthroughs. Loom's privacy policy applies to video data.

All third-party processors are required to handle your data securely and in accordance with applicable data protection law.

Cookies and Website Tracking

Our website loads fonts from Google Fonts, which may result in a request being sent to Google's servers. We do not use advertising cookies, tracking pixels, or behavioural analytics tools.

Cloudflare, our hosting provider, may set a security cookie to protect against malicious traffic. This cookie does not track your browsing behaviour across other sites.

We do not use Google Analytics, Facebook Pixel, or any other third-party analytics or advertising tracker on this website.

By continuing to use this website, you consent to the limited technical cookies described above that are necessary for the site to function.

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access: you can request a copy of the personal data we hold about you.
• Right to rectification: you can ask us to correct inaccurate data.
• Right to erasure: you can ask us to delete your data, subject to our legal retention obligations.
• Right to restrict processing: you can ask us to limit how we use your data in certain circumstances.
• Right to data portability: you can request your data in a structured, machine-readable format.
• Right to object: you can object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at hello@marginreport.co.uk. We will respond within 30 days.

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Data Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. These include:

• All email communication via encrypted IONOS mail servers
• Payment processing entirely handled by Stripe with full PCI-DSS compliance
• Client files stored in Google Drive with access restricted to Margin Intelligence only
• Website served over HTTPS via Cloudflare with SSL encryption

No method of transmission over the internet is completely secure. We cannot guarantee absolute security but we are committed to protecting your data to the best of our ability.

International Transfers

Some of our third-party providers, including Google, Stripe, Loom, and Cloudflare, may process data outside the UK. Where this occurs, we rely on those providers' compliance with UK GDPR adequacy decisions or standard contractual clauses to ensure your data remains protected.

Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last updated. Continued use of our website or services after any update constitutes acceptance of the revised policy.

For material changes that affect how we use your data, we will contact existing clients directly by email.