Meere Marketing Limited

Privacy Policy

What we collect when you use this website, why, and what you can tell us to do about it.

The short version. If you fill in a form, we get your name and a way to contact you, and we use it to reply. We record which advert brought you here so we know what is working. We do not sell anything to anybody, and you can tell us to delete the lot by emailing us.

01Who we are

Meere Marketing Limited (“we”, “us”) is a marketing agency registered in Scotland, company number SC783462, with its registered office at 68 Old School Crescent, Mayfield, Dalkeith, EH22 5DW.

For the information described in this notice we are the data controller — we decide what is collected and why.

Two things sit outside this notice. When we run advertising or manage leads on behalf of a client, that client is the controller of their own customer data and we act as their processor; those arrangements are governed by our contract with them, not by this page. And our client portal at app.meere-marketing.com has its own notice, shown when you sign in.

Data protection questions go to [email protected]. We have not appointed a Data Protection Officer; we are not required to.

02What we collect

Only three things, and the first is the only one you type.

What you give us

When you submit an enquiry form on this website we collect your name, and an email address or a phone number (one of the two is required — we do not insist on an email, because most people reading this are on a phone and want a call back). If the form offers them, we also collect your business name, the service you are interested in, and anything you write in the message box.

Please do not put special category information — health, political views, anything of that kind — in a free-text box. We have no use for it and no reason to hold it.

How you got here

So we can tell which advertising works, the page records the campaign details carried in the link you arrived on and the site that sent you:

WhatWhy
utm_source, utm_medium, utm_campaign, utm_content, utm_term Which campaign and which advert brought you here
fbclid, gclid The click identifiers Meta and Google add to their own ad links
Referring website and landing page Which page you arrived on and what linked to it
_fbc, _fbp Meta advertising cookies, read only if you have accepted advertising cookies

This is held in your browser for the current session and is attached to your enquiry only if you actually submit one. Browse without submitting and it goes when you close the tab.

Technical data

Our servers log your IP address and browser user agent when a form is submitted. We use these to rate-limit the form — without that, it gets used to send spam — and, if you have accepted advertising cookies, to match your enquiry to an advert (see section 5).

We do not use website analytics such as Google Analytics, and we do not profile you or make any automated decision that produces a legal or similarly significant effect.

03Why we use it, and our lawful basis

Under UK GDPR we must have a lawful basis for each use. Ours are these:

What we doLawful basisWhere that leaves you
Reply to your enquiry, quote for work, and discuss it with you Legitimate interests — and, once we are quoting, steps taken at your request before entering a contract You asked us to get in touch. You can tell us to stop at any time.
Keep a record of enquiries so we know who we have spoken to Legitimate interests in running the business and not contacting the same person twice You can ask us to erase it — see section 7.
Send you marketing by email or text Consent, or the soft opt-in where you have enquired about our services and we are offering something similar Every message carries a way to stop, and stopping is immediate and free.
Advertising cookies, and sending a hashed match to Meta Consent, given through the cookie banner Reject it and nothing in this row happens. See the Cookie Policy.
Rate-limit the form and keep the site up Legitimate interests in security Necessary for the form to exist at all.
Keep invoices and accounting records Legal obligation (company and tax law) We must keep these even if you ask us to erase everything else.

Where we rely on legitimate interests we have weighed them against your rights. The balance is a short one: you filled in a form asking to be contacted, we contact you about that, and you can stop it with one reply.

04Who we share it with

We do not sell your information and we do not share it for anyone else’s marketing. It reaches these suppliers because they run the systems we use:

WhoWhat forWhere it is held
HighLevel (GoHighLevel) This website and our CRM — your enquiry becomes a contact record here United States
Supabase Our database, where the enquiry is stored European Union (Paris)
Vercel Hosting for the application that receives the form United Kingdom (London region)
Resend The email that tells us an enquiry has come in United States / EU
ClickSend Text messages, where we send you one United Kingdom / Australia
Meta Platforms Advertising measurement — only with your consent, and only as irreversibly hashed values (section 5) United States
Google Fonts Serves the typefaces on this page, which discloses your IP address to Google United States

We will also disclose information where the law requires it, and to our professional advisers where we need advice. If the business is ever sold, records transfer with it.

Transfers outside the UK

The suppliers above marked United States receive personal data outside the UK. Those transfers are made under the UK’s International Data Transfer Addendum to the European Commission’s Standard Contractual Clauses, or under the UK Extension to the EU–US Data Privacy Framework where the supplier is certified. You can ask us for a copy of the safeguard that applies to a particular supplier.

05Advertising measurement, in plain terms

This is the part most privacy notices leave vague, so here it is properly.

If you accept advertising cookies, two things happen when you submit an enquiry. Your browser tells Meta that a lead was submitted, and separately our server tells Meta the same thing. Both carry the same event reference so Meta counts one conversion rather than two.

The server-side message includes your email address, phone number and name hashed with SHA-256 before they leave our systems. Hashing is one-way: Meta receives a fingerprint it can compare against its own records, not something it can read back. It also receives the Meta click identifiers from your browser and your IP address.

The purpose is narrow — to tell Meta which of its adverts produced a real enquiry, so the advertising is aimed better. We do not upload lists to build audiences from people who merely visited.

If you reject advertising cookies, none of this happens. No pixel loads, no browser event fires, and no server-side event is sent. Your enquiry still reaches us and is still answered — the only thing lost is our ability to tell which advert worked.

06How long we keep it

WhatHow longWhy that long
Enquiries that did not become work While there is a realistic prospect of working together, reviewed periodically — and deleted whenever you ask An enquiry from two years ago is often the person who comes back. We would rather tell you the test we apply than name a deadline and keep your details past it
Client records and correspondence6 years after the work ends The period for bringing a contract claim in Scotland
Invoices and accounting records6 years from the end of the accounting period Required by company and tax law
Marketing suppression listIndefinitely If you ask us to stop contacting you, we must remember that you asked
Session attribution in your browserUntil you close the tab It exists only to travel with a form submission

After these periods we delete or anonymise. Where a record has to stay for one reason — an invoice, say — we keep only that record and not the correspondence around it.

For the first row we give you the test we apply rather than a fixed number of months, which the law allows where a single period would not be honest. A published deadline we did not keep to would be worse than no deadline at all — and whatever the test says, asking us to delete your enquiry ends it immediately. See section 7.

07Your rights

Over information we hold about you, you can ask us to:

  • Give you a copy of it, and tell you what we do with it.
  • Correct it if it is wrong or incomplete.
  • Erase it, where we have no overriding reason to keep it.
  • Restrict what we do with it while a dispute about it is resolved.
  • Hand it over to you or another provider in a portable format, where we hold it on the basis of consent or a contract.
  • Stop — you can object to processing we justify on legitimate interests, and you can object to direct marketing at any time, for any reason or none. That one is absolute: we must stop.
  • Withdraw consent you have given, including for cookies, without affecting what was done before you withdrew it.

Email [email protected] and say what you want. We answer within one month. There is no charge. We may ask you to confirm who you are first — not to be difficult, but because handing someone’s details to the wrong person is the worst thing we could do with them.

If we get it wrong

Tell us first and we will try to put it right. But you can complain to the Information Commissioner’s Office at any time, and you do not need our permission:

ico.org.uk/make-a-complaint · 0303 123 1113 · Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

08Keeping it safe

Access to enquiry and client records is limited to the people who need it, each with their own account. Data is encrypted in transit, our database enforces row-level access rules rather than relying on the application to remember them, and credentials a client gives us are encrypted at rest and shown only on request to a named administrator, never printed into documents or left on screen.

No system is perfect. If a breach ever puts your rights at risk we will tell the ICO within 72 hours and tell you without undue delay.

09Children

Our services are sold to businesses and this website is not aimed at children. We do not knowingly collect information about anyone under 18. If you think we have, tell us and we will delete it.

10Changes to this notice

When we change this notice we change the date at the foot of the page. If a change materially affects what we do with information we already hold, we will tell the people affected directly rather than relying on them to re-read the page.

This notice is governed by the law of Scotland.

Meere Marketing Limited is a company registered in Scotland (number SC783462). Registered office: 68 Old School Crescent, Mayfield, Dalkeith, EH22 5DW.
Privacy · Cookies · Terms · Acceptable use · Complaints

Last updated: 5 October 2026