Onwards

Legal

Privacy Policy

Last updated 21 April 2026

This is a draft privacy policy for Onwards, a sole-trader marketing and AI consultancy based in Glasgow, Scotland. It covers how I collect, use and protect your personal data in line with UK GDPR and the Data Protection Act 2018. I’ll publish a final version before taking on any personal data through the site.

1. Who I am

Onwards is operated by Yash Singh as a sole trader based in Glasgow, Scotland. For the purposes of UK data protection law, I am the data controller for any personal data you share with me through this website.

You can contact me at yash@onwards.marketing about anything in this policy.

2. What data I collect

I only collect what I actually need to work with you. That means:

  • Contact details you give me when you fill in a form, book a call, or email me (name, email address, company, phone number where provided).
  • Project information you share during discovery or ongoing engagements (briefs, documents, access credentials, brand materials).
  • Website analytics. Aggregate data about how visitors find and use the site, collected through Google Analytics 4 (GA4) if you accept analytics cookies. I don’t collect personally identifying information through analytics and I have IP anonymisation enabled.
  • Cookies. The site uses essential cookies to remember your consent choice (onwards_consent). If you accept analytics cookies, GA4 drops _ga and _ga_* cookies to measure usage. These expire after two years. The site does not use advertising or cross-site tracking cookies.

3. Why I collect it

I use your data for the following purposes:

  • To respond to enquiries and arrange strategy calls.
  • To deliver services you have engaged me for, and to fulfil my contractual obligations.
  • To improve the website and understand which content is useful.
  • To comply with legal and tax obligations (for example, keeping invoice records for HMRC).

I rely on legitimate interests (responding to you, running my business), contract performance (delivering engagements you have signed up for), and legal obligation (tax and accounting records) as my lawful bases for processing.

4. How long I keep it

I keep personal data only as long as I need it. Enquiry emails are kept for up to two years unless you become a client. Client records and invoices are kept for six years after our engagement ends to meet HMRC requirements. Website analytics are aggregated and retained for 26 months.

5. Analytics and consent

I use GA4 with Google’s Consent Mode v2. When you first visit, a banner asks whether you’re happy for analytics cookies to be set. If you reject, GA4 runs in cookieless mode and only sends basic pings that don’t identify you. If you accept, the _gaand _ga_* cookies measure how pages are used.

Advertising-related consent categories (ad_storage, ad_user_data, ad_personalization) are kept denied permanently, because this site doesn’t run ads or share data with advertising networks.

You can change your consent at any time via the Cookie preferences link in the footer.

6. Who I share it with

I do not sell your data to anyone. I share data only with third-party service providers that help me run Onwards, under written data processing terms. These currently include:

  • Email and calendar provider (Google Workspace).
  • Scheduling tool (Calendly).
  • Website hosting (Vercel).
  • Analytics provider.
  • Accounting and invoicing tools.

Some of these providers are based outside the UK. Where they are, I rely on the International Data Transfer Agreement or equivalent safeguards to ensure your data stays protected.

7. Your rights

Under UK GDPR you have the right to:

  • Ask for a copy of the personal data I hold about you.
  • Ask me to correct inaccurate data.
  • Ask me to delete your data, where it is not needed for legal or contractual reasons.
  • Object to certain processing, including direct marketing.
  • Ask me to restrict how I use your data.
  • Withdraw consent at any time, where consent was the basis for processing.

Email yash@onwards.marketing to exercise any of these rights. I’ll respond within one month.

8. Complaints

If you think I have mishandled your personal data, you can complain to the UK Information Commissioner’s Office at ico.org.uk. I would appreciate the chance to put things right before you do, but this is always your right.

9. Changes to this policy

If I change this policy, I’ll update the “last updated” date at the top. If the change is significant, I’ll contact active clients directly.

Book a Call