WEBSITE INFORMATION / 21 SEPTEMBER 2026
Privacy policy.
How Expanza handles website enquiries, optional analytics and information you choose to share.
Who is responsible
Expanza Limited, company 17166019, is the data controller for website enquiries and our business contact records. Our registered office is 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Our ICO registration reference is ZC133315. Contact finley@expanza.co.uk about your information.
Information you give us
If you email, call or book a conversation, we receive the details you choose to provide, such as your name, contact details, company and the reason for your enquiry. Please do not send passwords, client datasets or sensitive personal information in an initial enquiry.
How we use it
We use enquiry and booking information to respond, arrange a conversation and discuss requested work. Our hosting provider processes technical information such as IP addresses, request times and security logs to deliver and protect the website. We keep relevant contact details, correspondence summaries and next actions in HubSpot to manage enquiries and business relationships. We do not sell website enquiry information.
Optional website measurement
When configured, Google Analytics is loaded only after you choose to allow analytics. It is used to understand page visits and actions such as opening a booking link. We do not send enquiry content, names, email addresses or phone numbers as analytics event properties. Advertising features are disabled in the integration. You can reject optional analytics and change your choice through Cookie settings. See the Cookies page for the current connection status.
Optional LinkedIn marketing
With your separate marketing consent, the LinkedIn Insight Tag collects information such as your page URL, referrer, IP address, device and browser characteristics and visit time. LinkedIn may associate visits with member accounts to provide advertising measurement, aggregated audience reporting and retargeting. It does not give us a list of identified website visitors. Rejecting marketing keeps the tag off. See LinkedIn’s privacy and cookie policies for its processing and cookie durations.
External services
Booking opens Google Calendar. Email opens your email application. Social, map and AI-summary links open their respective providers only when you follow them. Their own terms and privacy policies apply. AI-summary links contain company-provided information, not your identity or browsing history.
Why we can use this information
Our legitimate interests are responding to business enquiries, managing prospective and existing business relationships, keeping relevant records and protecting the website. Where you personally ask us to take steps towards a contract, we may also process the necessary information for that purpose. Optional analytics and LinkedIn marketing each rely on your consent. Information needed to meet a legal obligation is retained on that basis. Sending an enquiry does not subscribe you to a newsletter or automated marketing. Providing contact details is voluntary, but we may be unable to reply or arrange a call without them.
Services we use
We use Gmail and Google Calendar for correspondence and bookings, and HubSpot for contact and opportunity records. Hostinger provides the public website hosting. Google Analytics processes optional website measurements when you allow analytics. LinkedIn processes advertising measurement and audience information when you allow LinkedIn marketing. These providers process information needed to provide their services. We may also disclose relevant records to professional advisers or authorities where necessary to obtain advice, meet legal obligations or establish, exercise or defend legal claims. There is no embedded HubSpot tracking or website form that automatically adds you to our CRM.
International processing
Our providers and their service partners may process information outside the UK, including in the United States and Europe. Where required, the relevant provider agreements use recognised safeguards, such as an applicable adequacy decision or standard contractual clauses with the UK Addendum. Provider data-processing terms are linked below. Contact us for information about safeguards relevant to your enquiry. We do not promise that all information remains in the UK.
How long we keep information
We keep enquiry and CRM information while a conversation, agreed follow-up or business relationship remains active. When it ends, we assess whether the record is still needed for an unresolved request, contractual responsibility, legal requirement or a potential legal claim; information without a continuing purpose is deleted. We retain only the information relevant to that purpose. We keep a minimal objection record where needed to honour a request not to be contacted. This retention approach also applies to relevant email and booking records. Client delivery records are covered by the agreed engagement and its data-handling arrangements.
Analytics retention
Our Google Analytics property currently retains event-level data for two months and user-level data for fourteen months; the user retention period resets on new activity. These settings do not apply to most aggregated reporting. The website limits analytics cookies to six months and remembers your cookie choice for up to six months. You can withdraw consent at any time.
Your choices
We do not use website enquiry data to make solely automated decisions that have legal or similarly significant effects on you. We do not sell your contact information. Tell us if your details change or you no longer want us to follow up.
Your rights
You can contact finley@expanza.co.uk to ask about information held about you and request access, correction, erasure, restriction, portability or object where those rights apply. You can withdraw optional analytics or marketing consent through Cookie settings. You may also raise a complaint with the Information Commissioner’s Office at ico.org.uk/make-a-complaint/.
Contact Finley about this notice ↗
LinkedIn privacy policy ↗
LinkedIn cookie names and durations ↗
Provider information
HubSpot data-processing terms ↗
Google Workspace data-processing terms ↗
Google Analytics data-processing terms ↗
Hostinger data-processing terms ↗