Privacy policy | Anthony McGrath

This policy explains what personal information Anthony McGrath collects, why we collect it, how we use and protect it, and your rights. It covers this website, the people we contact about our services, and the Google account data our own business tools use.

Last updated: 13 October 2026.

Who we are

Anthony McGrath is a digital marketing agency for direct-to-consumer ecommerce brands. Anthony McGrath is the data controller for the information described here. For any privacy question, email ppcmarketingkey@gmail.com or call 07828 224315.

Information we collect

Quote and contact forms: your name, company, phone number, email address, store platform, your answers to the form questions and any message you write.
Messages: emails, WhatsApp messages and calls you send us, and our replies.
Business contacts: for business-to-business outreach, the name, job role, company, business email address, phone number and website of people at companies we think our services could help. We collect these from public sources such as company websites and business directories, or from you directly.
Clients: contract, invoice and meeting details needed to provide our services.
Website usage data: only if you accept analytics and advertising cookies, information such as pages visited, the ad or search that brought you here and your device type.

How we use it and our lawful basis

To reply to your enquiry and prepare a quote (steps you asked for before a contract).
To provide our services, send contracts and invoices and keep records (contract and legal obligation).
To send you confirmations of your request by email or WhatsApp (contract).
To contact businesses about our services by email, with a clear way to opt out in every email (legitimate interests). If you ask us to stop, we stop and keep only what we need to make sure we do not contact you again.
To see whether those emails arrive and are opened (legitimate interests). Our outreach emails contain a small image that tells us when an email is opened, and we note when an email bounces. You can stop this by turning off images in your email app.
To send you marketing emails, only if you tick the separate box asking for them (consent, which you can withdraw at any time).
To measure which advertising brings enquiries, only if you accept those cookies (consent).

Google user data

Our private admin area connects to our own Google account, which we sign in to ourselves through Google OAuth. Members of the public never sign in to this website with Google. With our permission, the admin area uses these Google services:

Gmail (send and read): to send emails from our own Gmail address to our clients, enquiries and business contacts, and to read replies from those same people so they appear in our contact records. We only store messages exchanged with people already in our contact list or enquiries: the sender, recipient, subject, date and message text. Other emails in the account are not stored.
Google Calendar (events): to create calendar events with Google Meet links when we book a call with a client, and to cancel them.
Basic account information: the email address of the connected Google account, so we know which account is sending.

We use this Google user data only to provide these features to ourselves. We do not sell it, share it with third parties, use it for advertising, or use it to train artificial intelligence or machine learning models. The only people who read these emails are the Anthony McGrath team who own the account, to run our business, for example to answer a client.

Anthony McGrath's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The Google access tokens are stored encrypted in transit and at rest on our hosting provider, Cloudflare, and can only be used by our own server. We can remove access at any time by pressing Disconnect in our admin area, or from the Google account at myaccount.google.com/permissions. When access is removed, we delete the stored tokens straight away. Emails already saved in a contact record are deleted when that contact is deleted, or on request.

We use trusted suppliers to run this site and our business: Cloudflare (website hosting, database and file storage), Google (Gmail, Calendar and, if you accept cookies, Analytics and Ads), Meta (WhatsApp and, if you accept cookies, the Meta pixel), Resend (only if we use it to send email), CallMeBot and Telegram (alerts to our own team) and Zoom (video calls). They process data only on our instructions. We never sell personal information. Some suppliers store data outside the UK; where they do, they use safeguards approved under UK law, such as the International Data Transfer Agreement.

How long we keep it

Enquiries: up to 24 months after our last contact.
Business contacts: up to 24 months after our last contact, or until you ask us to stop.
Clients: for as long as we work together, then 6 years for tax and accounting records.
Website usage data: as set by the cookie provider, usually up to 14 months.

How we protect it

Our admin area is protected by password, with limits on login attempts. Data is sent over encrypted connections (HTTPS) and stored with Cloudflare. Only people who need it to run Anthony McGrath can access it.

Your rights

Under UK data protection law you can ask to see, correct or delete your information, ask us to limit how we use it, object to how we use it (including all business outreach), ask for a copy to move elsewhere, or withdraw consent at any time. Email ppcmarketingkey@gmail.com and we will reply within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.

Children

Our services are for businesses. We do not knowingly collect information from anyone under 18.

Changes to this policy

We will update this page if we change how we use personal information, and change the date at the top.

Contact

Email ppcmarketingkey@gmail.com, phone 07828 224315.