Last updated: 1 September 2026
1. Who we are
This Privacy Policy explains how One Tap Marketing collects, uses and protects personal information when you visit websites.onetapmarketing.co.uk, contact us, request a website quote or enquire about our services.
For data-protection purposes, the data controller is:
One Tap Marketing, a trading name of One Tap Marketing Automation
Business address: 2 Snowden St, Burnley, Lancs, BB12 6JH
Email: paul@one-tap-marketing.com
Telephone: 01282 500056
Website: https://websites.onetapmarketing.co.uk
2. The information we collect
The personal information we collect depends on how you interact with us.
Information you provide
When you complete a form, request a quote, telephone us or send an email, we may collect:
- Your name;
- Business or organisation name;
- Email address;
- Telephone number;
- Existing website address;
- Business location or service area;
- The type of website or service you require;
- Your website objectives and preferred timescale;
- Information about your content, branding and existing systems;
- Services or functionality you are interested in;
- Messages, documents or other information you choose to provide; and
- Your communication and marketing preferences.
If you become a client, we may also collect:
- Billing and invoicing information;
- Project contacts;
- Contract and payment records;
- Website content and business materials;
- Login or integration information supplied for the project;
- Correspondence, feedback and project decisions; and
- Information required to deliver and support the agreed services.
Please do not send sensitive personal information or passwords through a general contact form. If access credentials are required for a project, we will arrange an appropriate method for providing them.
Information collected automatically
When you visit the website, our hosting, security and analytics systems may collect limited technical information, including:
- IP address;
- Browser and device type;
- Operating system;
- Approximate location derived from an IP address;
- Referring website;
- Pages visited;
- Date and time of access;
- Website interactions;
- Error and security logs; and
- Cookie or similar-technology identifiers.
Some of this information may constitute personal data under UK data-protection law.
3. How we use your information
We may use personal information to:
- Respond to enquiries;
- Review website requirements;
- Prepare recommendations, estimates and proposals;
- Arrange consultations;
- Provide website design, development, maintenance and marketing services;
- Manage projects and client relationships;
- Process payments and maintain financial records;
- Provide support and communicate about services;
- Improve the website and customer experience;
- Understand how visitors use the website;
- Protect the website, our systems and our users;
- Prevent fraud, spam and misuse;
- Establish, exercise or defend legal rights;
- Comply with legal, tax, accounting and regulatory obligations; and
- Send marketing communications where legally permitted.
We will not sell your personal information.
4. Our lawful bases
UK data-protection law requires us to have a lawful basis for using personal information.
Depending on the circumstances, we rely on the following bases:
Contract
We use information when it is necessary to take steps at your request before entering into a contract or to perform a contract with you. This includes preparing a proposal, managing a website project and providing agreed support.
Legitimate interests
We use information where it is necessary for our legitimate business interests and those interests are not overridden by your rights.
These interests may include:
- Responding to business enquiries;
- Operating and improving our website;
- Managing client relationships;
- Keeping appropriate business records;
- Protecting our systems;
- Preventing misuse; and
- Understanding and improving our services.
Legal obligation
We use and retain certain information when necessary to comply with legal, tax, accounting or regulatory requirements.
Consent
We rely on consent where the law requires it, including for certain non-essential cookies and some forms of electronic marketing.
You may withdraw consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.
5. Website enquiries and quote requests
When you complete our contact form or website planner, we use the information to:
- Understand your requirements;
- Assess whether we can assist;
- Prepare an appropriate response or indicative project range;
- Contact you about the enquiry; and
- Keep a reasonable record of the conversation.
Submitting an enquiry does not automatically subscribe you to general marketing emails.
Information provided through an instant quote or planning tool may be used to generate an indicative project recommendation. Any such result is preliminary and will be reviewed before a binding proposal or contract is agreed.
We do not use enquiry information to make solely automated decisions that produce legal or similarly significant effects.
6. Marketing communications
We may send service-related communications when necessary to respond to an enquiry or manage a client relationship.
We will only send general marketing messages when we have a lawful basis to do so. Where consent is required, we will ask for it separately and clearly.
You can stop receiving marketing communications at any time by:
- Using the unsubscribe option in the message; or
- Emailing paul@one-tap-marketing.com.
Stopping marketing messages will not prevent us from sending necessary communications about an active enquiry, contract, invoice or service.
7. Cookies and analytics
The website may use cookies and similar technologies.
Essential cookies may be used for:
- Website operation;
- Security;
- Form functionality;
- User preferences; and
- Basic session management.
Optional cookies may be used for analytics, embedded content or marketing only where permitted and, when required, after you have provided consent.
You can manage optional cookies through the consent controls displayed on the website and through your browser settings.
Further information about the cookies used should be provided in our separate Cookie Policy or cookie-management panel.
8. Who we share information with
We may share limited personal information with trusted service providers that help us operate the business and deliver services.
These may include providers of:
- Website hosting and backups;
- Domain and DNS services;
- Website security and spam prevention;
- Contact forms;
- Email hosting and delivery;
- Customer relationship and project-management systems;
- Analytics;
- Appointment booking;
- File storage and collaboration;
- Invoicing, accounting and payment processing;
- Website themes, plugins and technical integrations; and
- Professional legal, accounting or technical advice.
These providers may only receive information reasonably necessary to perform their function.
We may also disclose information:
- When required by law, a court or regulatory authority;
- To protect our rights, systems, clients or other people;
- In connection with the proposed sale or restructuring of the business; or
- With your instruction or consent.
We do not sell or rent personal information to third parties.
9. International transfers
Some technology providers may process or store information outside the United Kingdom.
Where personal information is transferred internationally, we take reasonable steps to ensure an appropriate safeguard is in place. Depending on the destination and provider, this may include:
- A UK adequacy regulation;
- The UK International Data Transfer Agreement;
- The UK Addendum to approved standard contractual clauses; or
- Another safeguard permitted by UK data-protection law.
You may contact us for further information about safeguards relevant to your personal information.
10. How long we retain information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.
Our usual retention approach is:
- Unsuccessful or inactive enquiries: normally up to 24 months after the last meaningful contact;
- Client and project records: normally for the duration of the relationship and up to six years afterwards;
- Financial and tax records: for the period required by applicable UK law;
- Marketing preferences and suppression records: for as long as needed to respect your communication choice;
- Security and technical logs: for a limited period appropriate to security and troubleshooting; and
- Cookie information: for the period stated in our cookie controls or Cookie Policy.
We may retain information for longer where necessary to resolve a dispute, establish or defend legal claims, investigate misuse or meet a legal requirement.
Information that is no longer required will be deleted, anonymised or securely disposed of.
11. How we protect information
We use reasonable technical and organisational measures intended to protect personal information from loss, unauthorised access, alteration, disclosure or misuse.
These measures may include:
- Encrypted website connections;
- Access controls and strong authentication;
- Software and security updates;
- Backups;
- Malware and spam protection;
- Restricted administrative access; and
- Appropriate procedures for handling client information.
No internet transmission or storage method can be guaranteed completely secure. If you believe information you supplied to us has been compromised, contact us promptly.
12. Your data-protection rights
Depending on the circumstances, UK data-protection law may give you the right to:
- Be informed about how your information is used;
- Request access to your personal information;
- Ask us to correct inaccurate or incomplete information;
- Ask us to delete information;
- Ask us to restrict how information is used;
- Object to certain processing;
- Receive certain information in a portable format;
- Withdraw consent; and
- Challenge qualifying solely automated decisions.
These rights are not absolute and exemptions may apply.
To exercise a right, email paul@one-tap-marketing.com. We may ask for information needed to confirm your identity before responding.
We normally respond within one month, although the law permits an extension in certain complex circumstances. We will explain if an extension is necessary.
You will not normally be charged for exercising your rights. A reasonable fee may be charged, or a request refused, where a request is manifestly unfounded or excessive, as permitted by law.
13. Complaints
Please contact us first if you have a concern about how we use your personal information. We will try to investigate and resolve it.
You also have the right to complain to the UK Information Commissioner’s Office:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: https://ico.org.uk/make-a-complaint/
14. Links and embedded content
Our website may contain links to third-party websites or embedded content such as maps, videos, booking tools or social-media features.
Third parties may collect information when you interact with their services. Their processing is governed by their own privacy policies, and we encourage you to review those policies.
15. Children’s information
Our services are intended for businesses and adults. We do not knowingly collect personal information from children through this website.
If you believe a child has submitted personal information, please contact us so we can review and, where appropriate, delete it.
16. Changes to this policy
We may update this Privacy Policy when our services, technology or legal obligations change.
The current version will be published on this page and identified by the “last updated” date. Significant changes may also be communicated by another appropriate method.
17. Contact us
Questions, requests or concerns about this Privacy Policy can be sent to:
One Tap Marketing
Email: paul@one-tap-marketing.com
Telephone: 01282 500056
Address: 2 Snowden St, Burnley, Lancs, BB12 6JH
This covers the information the website currently appears designed to collect. However, before publishing it, check these points:
- Your exact legal identity: sole trader or limited company
- Your full correspondence address
- Hosting provider
- Contact-form provider
- Email provider
- Analytics platform, if any
- Cookie-consent system
- CRM or project-management platform receiving enquiries
- Booking system, if one is added
- Payment provider, if online payments are added
The ICO requires privacy information to reflect the organisation’s real processing purposes, lawful bases, retention and recipients, so those providers should be named or clearly categorised accurately. ICO guidance
