This privacy policy applies to the website www.ohsosocialmarketing.co.uk and governs the privacy of its users. It sets out the obligations of Oh So Social as the data controller, and the rights of users, in respect of personal data collected through this website.
Oh So Social is the trading name of the business operated by Katherine George. As data controller, Oh So Social determines the purposes and means of processing your personal data. Our registered address is: The Athenaeum, Penvale, Kimberley Place, Falmouth, Cornwall.
This policy is written in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have any questions about how we handle your data, please contact us at katherine@ohsosocialmarketing.co.uk.
We only process your personal data where we have a lawful basis to do so. Depending on the activity, this may be:
Consent – for example, where you have opted in to receive our email newsletter or agreed to the use of non-essential cookies.
Legitimate interests – for example, analytics to understand how our website is used and to improve it, where this does not override your rights.
Contractual necessity – where processing is required to fulfil a service you have requested.
This website uses cookies to improve the user experience. On your first visit, you will be presented with a cookie consent notice allowing you to accept or decline non-essential cookies. This is in accordance with the UK GDPR and the Privacy and Electronic Communications Regulations 2003 (PECR), which require explicit consent before non-essential cookies are placed on your device.
Cookies are small text files saved to your device that track, save, and store information about your interactions with the website. We use the following categories of cookies:
These are necessary for the website to function and cannot be disabled. They include session management and security cookies.
We use Google Analytics 4 (GA4), provided by Google LLC, to understand how visitors interact with our website. GA4 uses cookies to collect anonymised data about page views, session duration, device type, and general location. This data is processed under your consent where required, and on the basis of our legitimate interests in website improvement.
Google Analytics data is stored on Google’s servers, which may be located outside the UK. We have ensured appropriate safeguards are in place. You can learn more at Google’s Privacy Policy.
We use HubSpot, provided by HubSpot Inc., to manage contact forms, track visitor interactions, and support our marketing activities. HubSpot may place cookies on your device to identify returning visitors and to track activity across multiple sessions. This data is used to personalise communications and improve the relevance of content we share with you.
HubSpot acts as a data processor on our behalf. Data collected may be stored on servers in the United States; HubSpot complies with applicable data transfer mechanisms including the UK-US Data Bridge where relevant.
For further information, see HubSpot’s Privacy Policy.
We use social media tracking pixels on this website, which may include the Meta Pixel (Facebook/Instagram), LinkedIn Insight Tag, Pinterest Tag, TikTok Pixel, and similar technologies. These pixels allow us to:
Measure the effectiveness of our paid social advertising campaigns.
Build retargeting audiences for advertising purposes.
Gain aggregate insights into how users interact with our website.
These pixels are placed with your consent. Where consent is given, the social media platforms involved may collect data about your visit and link it to your profile on their platform. Each platform’s use of this data is governed by their own privacy policy:
You may withdraw consent for non-essential cookies at any time by adjusting the settings in our cookie consent banner. You can also disable cookies through your browser settings, though this may affect the functionality of the website.
When you contact us via a form on this website, the personal information you provide (such as your name and email address) is collected and stored securely. We use this information to respond to your enquiry.
We use HubSpot to receive and manage contact form submissions. Data submitted through our forms is stored in HubSpot in accordance with our data processing agreement with HubSpot Inc.
We will not use your contact details for marketing purposes unless you have separately given consent to receive such communications. Your data will not be passed to third parties for their own marketing purposes.
We retain contact data only for as long as is necessary to respond to your query or maintain a business relationship with you, after which it will be securely deleted.
We operate an email newsletter programme to inform subscribers about our services, insights, and updates. We use Constant Contact, provided by Constant Contact Inc., to manage subscriptions and deliver email campaigns.
Subscriptions are taken on the basis of your explicit consent. You may subscribe via our website or through a prior written agreement. We will only add you to our mailing list if you have clearly opted in.
Constant Contact acts as a data processor on our behalf under a data processing agreement. Your subscription data is stored securely and is not shared with third parties for their own marketing purposes.
Our email campaigns may contain tracking technologies that record:
Whether the email was opened.
Which links were clicked.
The time, date, and frequency of engagement.
This information is used to improve the relevance and quality of future campaigns. It is processed on the basis of legitimate interests. If you object to this tracking, you may unsubscribe at any time.
Every email we send includes a clear unsubscribe link. You may opt out at any time. Unsubscription requests are processed automatically via Constant Contact.
As a data subject, you have the following rights in relation to your personal data:
Right of access – you may request a copy of the personal data we hold about you (a Subject Access Request).
Right to rectification – you may ask us to correct inaccurate or incomplete data.
Right to erasure – you may ask us to delete your personal data in certain circumstances.
Right to restriction – you may ask us to restrict processing of your data in certain circumstances.
Right to data portability – you may request your data in a structured, machine-readable format.
Right to object – you may object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at katherine@ohsosocialmarketing.co.uk. We will respond within one calendar month. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. In general:
Contact enquiry data is retained for up to two years from the date of last contact.
Email subscriber data is retained for as long as you remain subscribed, plus a short period to comply with suppression list obligations.
Analytics data is subject to the retention settings configured in GA4 (typically 14 months).
When data is no longer required, it is securely deleted or anonymised.
This website may contain links to external websites. We endeavour to include only quality, relevant links; however, we cannot guarantee or verify the contents of any externally linked site. Users click external links at their own risk. Oh So Social cannot be held liable for any damages arising from visiting external links.
Oh So Social maintains accounts on various social media platforms including Facebook, Instagram, LinkedIn, and others. Any communication or engagement on those platforms is subject to the privacy policy and terms of service of the relevant platform.
We will never ask for sensitive personal information via social media. Users wishing to share sensitive details should contact us directly by email or telephone.
Our website may include social sharing buttons. Using these buttons may result in the relevant social media platform recording the share action, linked to your account on that platform.
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The current version will always be published on this page with the version date shown below. We encourage you to review this policy periodically.
UK GDPR (as retained in UK law)
Privacy and Electronic Communications Regulations 2003
Information Commissioner’s Office (ICO)