Privacy Policy
Beyond Scope Strategies • Last update
1. Who we are
Beyond Scope Strategies is a digital marketing agency offering SEO, paid advertising (PPC), content, web design and conversion optimisation services. We are the data controller for the personal data described in this policy.
- Company name: beyondscopestrategies
- Email: info@beyondscopestrategies.com
- WhatsApp: +92 311 9878215
This policy explains what personal data we collect when you visit our website, contact us or use our services, how we use it, and the rights you have under the UK GDPR and the Data Protection Act 2018.
2. Personal data we collect
Depending on how you interact with us, we may collect:
- Contact details: your name, email address, phone or WhatsApp number, company name and job title.
- Enquiry information: the details you share in forms, emails, WhatsApp messages or calls, such as your website address, goals and budget.
- Client and billing information: invoicing details, billing address and payment records. We do not store full card details; payments are handled by our payment providers.
- Website usage data: IP address, browser type, device, pages viewed, time on page, referring website and approximate location.
- Cookie and tracking data: information collected through cookies and similar technologies (see section 6).
- Communication preferences: whether you have opted in or out of marketing emails.
We do not knowingly collect special category data (such as health or political opinions). Please do not send us this kind of information.
3. How we collect your data
- Directly from you: when you fill in a form, email us, message us on WhatsApp, book a call or sign up for our services.
- Automatically: when you browse our website, through cookies, analytics and server logs.
- From third parties: for example, from advertising platforms, business directories or publicly available sources such as LinkedIn, where relevant to a business enquiry.
4. How we use your data and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Respond to enquiries and send quotes or free audit results | Legitimate interests, or steps taken before entering a contract |
| Provide and manage our services, including reporting and support | Performance of a contract |
| Invoicing, accounting and tax records | Legal obligation |
| Send marketing emails and newsletters | Consent, or legitimate interests for existing clients (you can opt out at any time) |
| Improve our website, services and user experience through analytics | Consent (for non-essential cookies) or legitimate interests |
| Run and measure our own advertising | Consent |
| Keep our website and systems secure, prevent fraud | Legitimate interests |
Where we rely on legitimate interests, we balance them against your rights and freedoms. You can ask us for details of this assessment.
5. Marketing communications
We will only send you marketing emails if you have opted in, or if you are an existing client and the message relates to similar services. You can unsubscribe at any time using the link in any email, or by emailing info@beyondscopestrategies.com. We will never sell your personal data to third parties for their own marketing.
If you contact us on WhatsApp, we will use your number only to reply to your message and manage your enquiry or project, unless you agree to receive other messages.
6. Cookies and similar technologies
Our website uses cookies and similar technologies to make the site work, understand how visitors use it and measure our advertising. These may include:
- Essential cookies: needed for the website to function and stay secure.
- Analytics cookies: such as Google Analytics, which help us understand traffic and improve our content.
- Advertising cookies and pixels: such as Google Ads or Meta, which help us measure and improve our campaigns.
Non-essential cookies are only set with your consent. You can change or withdraw your choice at any time through our cookie banner or your browser settings. You can also block cookies in your browser, although some parts of the site may not work properly.
7. Who we share your data with
We share personal data only where necessary, with:
- Service providers (processors) who help us run our business, such as website hosting, email and CRM tools, project management software, analytics, accounting and payment providers.
- Advertising and analytics platforms such as Google and Meta, in line with your cookie choices.
- Professional advisers such as accountants and lawyers, where needed.
- Authorities, where we are legally required to do so.
We require our providers to protect your data and to use it only on our instructions.
7a. International transfers
Some of our team and service providers are located outside the UK, including in Pakistan, and some providers (such as Google and Meta) process data in the United States and other countries. Where we transfer personal data outside the UK, we use appropriate safeguards, such as UK adequacy regulations, the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses, and we take steps to protect your data to a standard equivalent to UK law.
8. How long we keep your data
We keep personal data only as long as needed for the purposes described above:
- Enquiries that do not become clients: up to 24 months from our last contact.
- Client records and project data: for the duration of our work together and up to 6 years afterwards, for legal and accounting purposes.
- Invoices and financial records: 6 years, as required by law.
- Marketing consent records: until you unsubscribe, plus a short period to make sure we respect your choice.
- Analytics data: typically 14 to 26 months, depending on our analytics settings.
When data is no longer needed, we delete or anonymise it securely.
9. How we protect your data
We use appropriate technical and organisational measures to protect your personal data, including secure hosting, access controls, encrypted connections (HTTPS) and staff confidentiality obligations. No online system is completely secure, so we cannot guarantee absolute security, but we will notify you and the ICO where required if a data breach affects you.
10. Your rights
Under UK data protection law, you have the right to:
- Access the personal data we hold about you.
- Rectification: ask us to correct inaccurate or incomplete data.
- Erasure: ask us to delete your data in certain circumstances.
- Restriction: ask us to limit how we use your data in certain circumstances.
- Portability: receive your data in a structured, commonly used format, where applicable.
- Object to processing based on legitimate interests, and to direct marketing at any time.
- Withdraw consent at any time, where we rely on consent. This will not affect processing already carried out.
To exercise any of these rights, email info@beyondscopestrategies.com. We may need to verify your identity, and we will normally respond within one month.
You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve your concerns first, so please contact us.
11. Children
Our website and services are aimed at businesses and are not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.
12. Links to other websites
Our website may contain links to third-party websites, such as social media platforms or client case studies. We are not responsible for their privacy practices, so please read their privacy policies before sharing any personal data.
13. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page with the “Last updated” date at the top. If we make significant changes, we will let you know in a suitable way, such as a notice on our website or an email.
14. Contact us
If you have any questions about this policy or how we handle your personal data, please contact us:
- Email: info@beyondscopestrategies.com
- WhatsApp: +92 311 9878215
