At Made By Two, accessible via www.madebytwo.co.uk, we are committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and safeguard your personal data when you interact with our website, services, or communications.

1. Data Controller

The data controller responsible for your personal data is:

Made By Two
Website: www.madebytwo.co.uk
Email: hello@madebytwo.co.uk (use your real support email if different)
Location: United Kingdom

2. Personal Data We Collect

We may collect and process the following data:

• Contact information (e.g., email address, name) when you subscribe, download a free resource, or submit a form

• Technical data (IP address, browser type, device info, operating system)

• Usage data (pages visited, time spent, clicks, referring sources)

• Cookies and tracking data (see section 6)

We do not collect any sensitive personal data unless explicitly provided by you for a specific purpose.

3. How We Use Your Data

We process your data for the following lawful purposes:

• To deliver digital downloads or free resources (e.g., our free calendar)

• To respond to enquiries or support requests

• To send marketing emails only if you have opted in

• To improve website performance and user experience

• To comply with legal obligations

Lawful bases for processing include:

• Consent (e.g., email marketing opt-in, downloadable content delivery)

• Legitimate interests (e.g., analytics, website improvement)

• Contractual necessity (e.g., delivering requested content)

• Legal compliance

4. Email Marketing & Consent

If you subscribe to receive content or marketing communications, we will only email you when:

• You have given clear, affirmative consent

• You have requested a download or service that requires email delivery

Every marketing email contains an unsubscribe link, allowing you to withdraw consent at any time.

5. Data Storage & Security

Your data is stored securely in the UK or EU using trusted providers including:

• Email service platforms for newsletter distribution

• Analytics tools for site usage insights

• Cloud storage for data backups and lead management

We implement appropriate security measures to prevent unauthorised access, disclosure, or loss of your information.

6. Cookies & Tracking

We use cookies to enhance your browsing experience and analyse website performance. These may include:

• Essential cookies (required for the website to function)

• Analytics cookies (to understand user behaviour)

• Marketing cookies (only if consent is provided)

You can manage or disable cookies through your browser settings. On first visit, we request cookie consent where required.

7. Data Sharing & Third Parties

We never sell your data.

We may share data only with trusted service providers who assist us in delivering our services, and only when a Data Processing Agreement is in place. These parties are obligated to keep your information secure and confidential.

8. How Long We Keep Your Data

We retain personal data only as long as necessary:

• Marketing subscribers: until consent is withdrawn

• Download/lead form submissions: up to 24 months unless refreshed or removed

• Analytics data: 26 months maximum

9. Your Rights Under GDPR

You have the right to:

• Access your personal data

• Request correction or deletion

• Withdraw consent

• Object to processing based on legitimate interests

• Request data portability

• Lodge a complaint with the UK Information Commissioner’s Office (ICO)

To exercise any of these rights, contact us at our support email.

10. External Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites. We encourage users to review their respective privacy policies.

11. Updates to This Policy

We may update this policy from time to time. Continued use of the website indicates acceptance of the latest version.