Privacy Policy

1. Who I am

I am Madhu Nair, a sole trader operating as a website growth and CRO consultancy. My contact email is madhu@madhunairco.com.

For the purposes of data protection law, I am the data controller of your personal data.

2. What data I collect

Data you provide directly

When you submit the Website Growth Review request form, I collect:

• Your name
• Your email address
• Your website URL
• Any additional information you choose to include in your brief

Data collected automatically

When you visit this website, analytics tools collect:

• Pages visited and time spent on each page
• Approximate geographic location (country or city level)
• Device type, browser, and operating system
• Referring website or search term
• Clicks and scroll behaviour (via Microsoft Clarity)

This data is collected in aggregate and is not used to identify you personally.

Data I do not collect

I do not collect payment card details. Payments are handled entirely by a third-party payment processor.

3. How I use your data

I use the information you provide to:

• Respond to your enquiry and deliver the Website Growth Review
• Send you the completed report and any necessary follow-up communication
• Process and confirm payment (via a third-party payment link)
• Comply with any legal obligations

I use analytics data to understand how visitors use this website so I can improve it. I do not use analytics data to profile or target individuals.

I will not use your email address to send you unsolicited marketing. If I wish to follow up with relevant offers after your review, I will ask for your consent first.

4. Legal basis for processing

I process your personal data on the following legal bases under UK GDPR / EU GDPR:

• Contract performance — to deliver the Website Growth Review you have requested and paid for
• Legitimate interests — to improve this website and understand how it is used (analytics)
• Legal obligation — where required by law
• Consent — where you have explicitly opted in (e.g. to receive future communications)

5. Cookies and tracking

This website uses the following tracking technologies:

Google Analytics 4

Used to measure website traffic and visitor behaviour in aggregate. Google Analytics sets cookies to track sessions and page views. Data is processed by Google LLC, whose servers may be located outside the EEA. Google operates under Standard Contractual Clauses for data transfers.

Microsoft Clarity

Used to record anonymised session data including heatmaps and click patterns. Clarity uses input masking to prevent capture of sensitive data. Data is processed by Microsoft Corporation. You can opt out of Clarity tracking at Microsoft's privacy page.

Tally (contact form)

The contact form is hosted by Tally.so. When you interact with the form, Tally may set cookies necessary for its operation. Tally's privacy policy is available at tally.so/privacy.

You can manage or delete cookies through your browser settings. Disabling cookies will not affect your ability to submit the contact form via the direct link.

6. Who I share your data with

I do not sell or rent your personal data. I may share your data with the following third parties only as necessary to deliver the service:

• Payment processor — to handle your payment securely
• Email service provider — to send and receive email communications
• Tally.so — to receive your form submission

Each of these processors is contractually required to handle your data securely and only for the stated purpose.

7. International data transfers

Some of the third-party tools I use (including Google and Microsoft) may process data outside the United Kingdom or European Economic Area. Where this occurs, appropriate safeguards are in place — typically Standard Contractual Clauses approved by the relevant regulatory authority.

8. How long I keep your data

I keep your personal data for as long as necessary to:

• Deliver the service you have requested
• Comply with any legal or tax obligations (typically up to 7 years for financial records)
• Resolve any disputes or queries

After this period, your data is securely deleted. You may request earlier deletion — see Section 10.

9. Data security

I take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. These include using secure, encrypted communication and reputable third-party services with their own security programmes.

No method of transmission over the internet is completely secure. If you have concerns about a specific communication, please contact me directly.

10. Your rights

Under UK GDPR and EU GDPR, you have the following rights regarding your personal data:

• Access — request a copy of the data I hold about you
• Rectification — ask me to correct inaccurate data
• Erasure — ask me to delete your data ("right to be forgotten")
• Restriction — ask me to limit how I use your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, email me at madhu@madhunairco.com. I will respond within 30 days.

If you are unhappy with how I have handled your data, you have the right to lodge a complaint with your national data protection authority — in the UK, the Information Commissioner's Office (ICO) at ico.org.uk.

11. Children's privacy

This website and service are not directed at children under the age of 16. I do not knowingly collect personal data from children. If you believe a child has provided me with personal data, please contact me so I can delete it.

12. Changes to this policy

I may update this Privacy Policy from time to time. When I do, I will update the effective date at the top of this page. Significant changes will be communicated by email if you are a current or recent client.

13. Contact

For any questions or requests relating to this Privacy Policy, please contact:

Madhu Nair
Email: madhu@madhunairco.com
Website: madhunairco.com