Privacy Policy | GMB Profile Solutions

Last updated: 25 September 2026

Please note: this page is a starter template. It should be reviewed by a qualified adviser before you rely on it, and updated to reflect how GMB Profile Solutions actually operates.

This Privacy Policy explains how GMB Profile Solutions (we, us, our) collects and uses personal data when you visit our website or contact us about a case. We are committed to handling your information fairly and lawfully under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

The data controller responsible for your personal data is GMB Profile Solutions, London, United Kingdom. If you have any questions about this policy or how we handle your data, please contact us at info@gmbprofilesolutions.com.

GMB Profile Solutions is an independent service provider and is not affiliated with Google.

2. The data we collect

Information you give us through the case review form

When you complete our case review form, we collect:

your name
your business name
your phone number and email address
your website address
the town or city where your business is based
the service you are enquiring about
your description of the problem
the link to your Google Business Profile or other relevant profile
your preferred contact method

Please only include the information we need to understand your case. Do not send us passwords, payment card details or other sensitive information. We will never ask for your Google account password.

Marketing attribution data

When you submit the form, we may also record how you found us. This can include campaign (UTM) parameters in the web address, advertising click identifiers such as gclid (Google) and fbclid (Meta), the page on which you first arrived on our website (landing page) and the website that referred you (referrer). This helps us understand which of our marketing activities are working.

Information you give us in later contact

If you email, call or message us, including by WhatsApp, we will keep a record of that correspondence and any documents or screenshots you choose to share with us about your case.

Information collected through cookies

We use an essential cookie to remember your cookie choices. With your consent, we also use analytics and marketing cookies. Please see our Cookie Policy for details.

3. How we use your data and our lawful bases

Under UK GDPR we must have a lawful basis for each way we use your personal data. We rely on the following:

Steps prior to entering into a contract: to review your enquiry, assess your case, contact you about it and provide a quote or proposal at your request.
Performance of a contract: where you engage us, to deliver the agreed services and manage our relationship with you.
Legitimate interests: to run and improve our business, respond to general enquiries, keep records of our advice, understand which marketing activities bring enquiries (using attribution data submitted with the form), and protect our website and business from misuse. We balance these interests against your rights and do not use your data in ways you would not reasonably expect.
Consent: to set optional analytics and marketing cookies and similar technologies. You can withdraw your consent at any time.
Legal obligation: to keep records we are required to keep by law, for example for tax and accounting purposes.

We do not use your data to make decisions about you based solely on automated processing, and we do not sell your personal data.

4. How long we keep your data

We aim to keep personal data for no longer than necessary for the purposes set out above. As a guide:

We aim to keep enquiries that do not lead to paid work for up to 24 months from our last contact with you, so we can respond if you get in touch again, unless you ask us to delete them sooner.
Where you become a client, we aim to keep case records for as long as needed to provide the service and deal with any questions afterwards, and financial records for as long as the law requires.
Cookie data is kept for the periods set out in our Cookie Policy.

When data is no longer needed, we will delete it securely or anonymise it.

5. Who we share your data with

We do not sell or rent your personal data. We only share it with trusted service providers who process it on our behalf (processors) and under contracts that require them to protect it. These include:

Our website hosting provider, which hosts our website and processes form submissions.
Our email provider, which we use to receive and send emails about your enquiry.
Analytics and advertising providers, such as Google (Google Analytics 4 and Google Tag Manager) and Meta (Meta Pixel), but only if you have consented to the relevant cookies.

We may also share data where required by law, to protect our legal rights, or with professional advisers such as accountants or lawyers under a duty of confidentiality.

6. International transfers

Some of our service providers may store or process data outside the United Kingdom, for example in the European Economic Area or the United States. Where this happens, we aim to make sure appropriate safeguards are in place, such as a UK adequacy decision, the UK International Data Transfer Agreement or Addendum, or another mechanism recognised under UK data protection law.

7. Your rights

Under UK GDPR you have the right to:

ask for a copy of the personal data we hold about you (right of access)
ask us to correct inaccurate or incomplete data (right to rectification)
ask us to delete your data in certain circumstances (right to erasure)
ask us to restrict how we use your data in certain circumstances
object to our use of your data where we rely on legitimate interests
ask us to transfer data you gave us to another organisation, where applicable (data portability)
withdraw your consent at any time, where we rely on consent

To exercise any of these rights, please email info@gmbprofilesolutions.com. We may need to confirm your identity before acting on a request. We aim to respond within one month, as required by law.

8. Complaints

If you are unhappy with how we have handled your personal data, please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection, at ico.org.uk.

9. Security

We take reasonable technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. These include using secure connections (HTTPS) on our website, limiting access to those who need it and choosing reputable service providers. No method of transmission over the internet is completely secure, so please avoid sending highly sensitive information through the form or by email.

10. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.