Roza Marketing Privacy Policy 

1. Introduction

Roza Marketing ("I", "me", or "my") is committed to protecting the privacy and security of your personal data. This policy outlines how I collect and use your information when you visit www.rozamarketing.com or engage my consultancy services.

2. Data I Collect

Contact Information: Name, email address, and phone number provided via my WhatsApp link.

Usage Data: Technical information such as your IP address and how you interact with this site, collected via Google Analytics.

Client Data: Information necessary to perform marketing audits, such as SOSTAC® strategy details or customer data provided for growth analysis.

3. How I Use Your Data

To respond to your inquiries regarding marketing support.

To deliver agreed-upon consultancy services, including event coordination and digital strategy.

To comply with UK legal and tax obligations.

4. Data Storage and Security

Your data is stored securely and is never sold to third parties. As a solo consultant, I am the primary data controller and ensure that any third-party tools used (like Google Workspace) meet UK GDPR standards.

5. Your Rights

Under UK GDPR, you have the right to access, correct, or delete your personal data. To exercise these rights, please contact me at roza@rozamarketing.com.

6. Marketing Execution on Behalf of Clients

Where I am engaged to execute marketing activity on your behalf (such as email marketing, social media advertising, or direct mail), I act as a Data Processor.

Permission-Based Marketing: I only execute marketing campaigns using data where the client (the Data Controller) has confirmed a lawful basis for processing, such as explicit consent or legitimate interest under UK GDPR.

Third-Party Platforms: When I upload data to third-party platforms (e.g., Mailchimp, Meta, or Google Ads) on your behalf, I ensure these platforms are configured to protect customer privacy and that appropriate Data Processing Agreements (DPAs) are in place.

No Data Ownership: I do not "own" or retain any customer data used during these campaigns. Once a project is complete or the consultancy ends, access to this data is relinquished or deleted according to your instructions.