Onwards

Privacy Policy

Last updated 27 July 2026

Onwards is a sole-trader marketing and AI consultancy based in Glasgow, Scotland. This policy explains how I collect, use and protect your personal data when you use this website, in line with UK GDPR and the Data Protection Act 2018.

1. Who I am

Onwards is operated by Yash Singh as a sole trader based in Glasgow, Scotland. For the purposes of UK data protection law, I am the data controller for any personal data you share with me through this website.

You can contact me at yash@onwards.marketing about anything in this policy.

2. What data I collect

I only collect what I actually need to work with you. That means:

  • Contact details you give me when you book a call or email me (name, email address, company, phone number where provided).
  • Booking details. Calls are scheduled through Cal.com, whose booking widget is embedded on the book a call page. When you book, Cal.com processes the details you enter (name, email, and your answers to the booking questions) on my behalf, on EU-hosted infrastructure.
  • Project information you share during discovery or ongoing engagements (briefs, documents, access credentials, brand materials).
  • Website analytics. Aggregate data about how visitors find and use the site, collected through Google Analytics 4 (GA4) if you accept analytics cookies, and through Vercel’s privacy-friendly, cookieless analytics. I don’t collect personally identifying information through analytics and I have IP anonymisation enabled.
  • Cookies. The site uses essential cookies to remember your consent choice (onwards_consent). If you accept analytics cookies, GA4 drops _ga and _ga_* cookies to measure usage; these expire after two years. The embedded Cal.com booking widget sets a small number of strictly necessary cookies of its own (for security and bot protection) when the booking page loads. The site does not use advertising or cross-site tracking cookies.

3. Why I collect it

I use your data for the following purposes:

  • To respond to enquiries and arrange strategy calls.
  • To deliver services you have engaged me for, and to fulfil my contractual obligations.
  • To improve the website and understand which content is useful.
  • To comply with legal and tax obligations (for example, keeping invoice records for HMRC).

I rely on legitimate interests (responding to you, running my business), contract performance (delivering engagements you have signed up for), consent (analytics cookies), and legal obligation (tax and accounting records) as my lawful bases for processing.

4. How long I keep it

I keep personal data only as long as I need it. Enquiry emails are kept for up to two years unless you become a client. Client records and invoices are kept for six years after our engagement ends to meet HMRC requirements. User-level website analytics are retained for 14 months, after which only aggregate reporting remains.

5. Analytics and consent

I use GA4 with Google’s Consent Mode v2. When you first visit, a banner asks whether you’re happy for analytics cookies to be set. If you reject, GA4 runs in cookieless mode and only sends basic, anonymous pings that don’t identify you and set no cookies. If you accept, the _ga and _ga_* cookies measure how pages are used.

The site also uses Vercel Web Analytics, which is cookieless by design: it counts visits in aggregate without cookies, fingerprinting or cross-site tracking, so it runs regardless of your cookie choice.

Advertising-related consent categories (ad_storage, ad_user_data, ad_personalization) are kept denied permanently, because this site doesn’t run ads or share data with advertising networks.

You can change your consent at any time via the Cookie preferences link in the footer.

6. Who I share it with

I do not sell your data to anyone. I share data only with third-party service providers that help me run Onwards, under written data processing terms. These currently include:

  • Email and calendar provider (Google Workspace).
  • Scheduling tool (Cal.com, EU-hosted).
  • Website hosting and analytics (Vercel).
  • Analytics provider (Google).
  • Accounting and invoicing tools.

Some of these providers are based outside the UK. Where they are, I rely on the International Data Transfer Agreement or equivalent safeguards to ensure your data stays protected.

7. Your rights

Under UK GDPR you have the right to:

  • Ask for a copy of the personal data I hold about you.
  • Ask me to correct inaccurate data.
  • Ask me to delete your data, where it is not needed for legal or contractual reasons.
  • Object to certain processing, including direct marketing.
  • Ask me to restrict how I use your data.
  • Withdraw consent at any time, where consent was the basis for processing.

Email yash@onwards.marketingto exercise any of these rights. I’ll respond within one month.

8. Complaints

If you think I have mishandled your personal data, you can complain to the UK Information Commissioner’s Office at ico.org.uk. I would appreciate the chance to put things right before you do, but this is always your right.

9. Changes to this policy

If I change this policy, I’ll update the “last updated” date at the top. If the change is significant, I’ll contact active clients directly.

Book a Call