Privacy Policy
Last updated: 26 October 2026
This policy explains what personal data Perpetual Marketing collects, why we collect it, how we look after it, and the rights you have over it. It covers this website, our client work, and the tools we use to publish content to social media accounts.
1. Data we collect
When you contact us
When you fill in a form on this site (for example the free audit or Creator Ventures enquiry form), we collect what you enter: your name, email address, social media handle, the platforms you use, your audience size, your product and the challenge you describe. We also collect anything you send us by email, WhatsApp or on a call.
When you browse this site
If you accept analytics cookies, we use Google Analytics to understand how visitors use the site. It collects information such as pages visited, time on page, approximate location (city level), device and browser type, and how you arrived at the site. We do not use this data to identify you personally.
Google Analytics stays switched off until you click Accept in the cookie banner, and no analytics cookies are set if you click Reject. We store your choice in your browser for 12 months so we don't ask again on every visit. You can change it at any time with the Cookie settings link at the bottom of every page.
When you work with us as a client
To deliver our services we may access your ad accounts, analytics, website tools and customer lists. Where we handle your customers' personal data on your behalf (for example leads from an ad campaign), we act as your data processor and follow your instructions under our written agreement with you.
When you connect a social media account to our publishing tools
We use our own software, and approved third-party apps, to schedule and publish video and image content to social media accounts that we own or that our clients have authorised us to manage. When an account is connected, we access only what the platform grants for publishing:
- TikTok (via Login Kit and the Content Posting API): your basic profile information (display name, avatar and a unique account identifier) and permission to upload videos to your account or your TikTok drafts.
- Instagram and Facebook (via the Meta Graph API): your account ID, username and profile details, and permission to publish posts and Reels, plus the performance data for those posts.
- LinkedIn: your basic profile and permission to post on your behalf.
- YouTube (via YouTube API Services): your channel details and permission to upload and schedule videos.
We store the access tokens the platforms issue in encrypted storage. We never see or store your social media passwords. We do not read your private messages, followers' personal data or any content beyond what we need to publish and to report on the posts we publish.
2. Why we use it, and our legal basis
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Replying to your enquiry and preparing a proposal or audit | Steps at your request before a contract, and our legitimate interest in responding to enquiries |
| Delivering services to clients, invoicing and record-keeping | Performance of a contract, and legal obligation |
| Publishing content to connected social media accounts | Performance of a contract, or your consent given when you authorise the connection |
| Website analytics | Consent, given through the cookie banner |
| Occasional updates about our services, if you ask for them | Consent, which you can withdraw at any time |
We do not sell your personal data, and we do not use data from connected social media accounts for advertising or profiling.
3. Who we share it with
We share personal data only with service providers that help us run the business, under contracts that require them to protect it:
- Hostinger: website hosting.
- Google: Google Workspace (email and documents) and Google Analytics.
- Resend: sending the emails our website forms generate.
- Social media platforms (TikTok, Meta, LinkedIn, Google/YouTube): when we publish content you have asked us to publish.
- Scheduling and AI tools we use to plan, write and publish content, limited to the content being prepared.
- Professional advisers such as accountants, and authorities where the law requires it.
Some of these providers process data outside the UK, including in the United States. Where they do, the transfer is protected by the UK's adequacy regulations, the UK International Data Transfer Addendum or equivalent safeguards.
4. How long we keep it
- Enquiries that don't become clients: up to 24 months, then deleted.
- Client records and invoices: 6 years after the engagement ends, as UK tax law requires.
- Social media access tokens: until you disconnect the account, the platform revokes access, or our engagement ends, whichever comes first. We delete them within 30 days of that point.
- Analytics data: kept in Google Analytics for 14 months.
5. Disconnecting a social media account
You can withdraw our access at any time, either by emailing us or directly in each platform's settings:
- TikTok: Settings and privacy → Security → Apps and services permissions.
- Instagram / Facebook: Settings → Apps and websites (or Business Integrations).
- LinkedIn: Settings → Data privacy → Permitted services.
- YouTube / Google: Google security settings → Third-party connections.
Our use of YouTube API Services is governed by the YouTube Terms of Service and the Google Privacy Policy.
6. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to how we use it;
- receive your data in a portable format;
- withdraw consent at any time, where we rely on consent.
To use any of these rights, email mauricio@perpetual.marketing. We will reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
7. Security
We protect personal data with access controls, two-factor authentication on our accounts, encrypted storage for credentials and tokens, and by giving access only to people who need it. No system is completely secure, so if a breach affects your data we will tell you and the ICO where the law requires it.
8. Children
Our services are for businesses and adult creators. We do not knowingly collect personal data from anyone under 18.
9. Changes to this policy
We may update this policy as our services or the law change. The date at the top shows when it last changed. If we make a significant change that affects connected accounts, we will tell the account owners directly.