Privacy Policy

Last updated: March 2025

At The SMASH Agency, we take your privacy seriously. We’re all about turning your ideas into action – not misusing your data! This Privacy Policy explains what personal information we collect, how we use it, and your rights under UK GDPR and data protection laws.

Who We Are

We are The SMASH Agency, a marketing and operations support company led by Nicola Toner. We provide tailored support services to business owners, helping them to clarify their strategy and deliver it successfully.

If you need to contact us about anything in this policy, please email:

📧 clients@thesmashagency.co.uk

What Information We Collect

We may collect and process the following types of personal data:

Clients and Prospects

• Name and business name 
• Email address and phone number 
• Billing address and payment details 
• Business goals and information you share in strategy sessions or onboarding forms 
• Login details (if we help manage systems like Kartra, your website, social platforms etc.)
   

Website Visitors

• IP address and browser type 
• Pages you visited and time spent on the site (via cookies and analytics) 
• Details entered into contact forms or newsletter sign-up boxes
   

Email Subscribers

• Name and email address 
• Open rates, click-throughs, and preferences (for improving future emails)
   

How We Use Your Information

We use your data to:

• Deliver our services to you 
• Respond to enquiries and proposals 
• Issue invoices and manage payments 
• Set up and manage marketing and operational tools (e.g. CRMs, email platforms) 
• Send updates, newsletters, and promotions (only with your consent) 
• Improve our website and content through analytics 

We will never sell or rent your data to third parties. Ever.

Lawful Basis for Processing

We rely on the following lawful bases for processing personal data:

• Contract – to provide our services to you 
• Consent – when you sign up to marketing emails 
• Legitimate Interest – for improving our services and website 
• Legal Obligation – for keeping accurate business records
   

Data Sharing & Third Parties

We only share your data when it’s necessary to provide our service or run our business effectively, such as with:

• Trusted tools like Kartra, MailerLite, Stripe, Google Workspace, Xero 
• Our carefully selected team members and contractors 
• Legal or tax authorities if required

All tools and partners we use comply with GDPR and treat your data with care.

Cookies & Analytics

We use cookies (tiny bits of data stored on your device) to help us understand how visitors use our site. They help us make improvements, but they don’t track you personally.

You can adjust your cookie settings in your browser anytime.

How We Store Your Data

Your data is securely stored using encrypted and password-protected systems. We keep your data only as long as necessary – usually for the duration of our working relationship and for a maximum of 7 years for legal/accounting purposes.

Your Rights

You have rights over your data, including:

✅ The right to access your personal information
✅ The right to correct or update it
✅ The right to request deletion (unless we need to retain it for legal reasons)
✅ The right to withdraw consent at any time
✅ The right to complain to the Information Commissioner’s Office (ICO) if you're concerned

To exercise your rights, just email us at clients@thesmashagency.co.uk

Changes To This Policy

We may update this privacy policy from time to time. Any updates will be posted on our website with the latest version date at the top.

Questions?

We aim to be transparent and respectful in how we handle your information. If you’ve got any questions about this policy or how your data is used, just drop us a line!

📧 Clients@thesmashagency.co.uk