Privacy policy

Who we are

HyIMPACT is a remote marketing agency for local service businesses, founded by Ike Rowland. HyIMPACT is responsible (the "controller") for the personal information described in this policy.

Questions or requests about your information: use the contact form at hyimpact.io/contact and mention "privacy" in your message. We reply within 30 days.

What we collect

When you send the contact form: your name, email address, business name and website (both optional), and your message.

When you request a free Growth Audit: your website address, name and email address. With your agreement we check the public pages of that website to prepare the audit. We do not log in to any of your accounts.

When you browse the site: Google Analytics records the pages you visit, how you arrived, your approximate location (city or country), and your device and browser type. It uses cookies (names starting with _ga). Google Analytics 4 does not store full IP addresses.

Our hosting provider keeps short-lived server logs (IP address, browser and time of request) to keep the site secure and working.

How we use it and why

To reply to you and, if you ask, to prepare and send your Growth Audit: this is a step you asked us to take before any agreement (UK/EU GDPR Article 6(1)(b)) and our legitimate interest in answering inquiries.

To understand how the site is used and improve it, through Google Analytics: with your consent where the law requires it, otherwise our legitimate interest in running a useful website.

To keep the site secure and prevent abuse: our legitimate interest.

To meet legal obligations, such as keeping business records.

We do not sell personal information, we do not use it for targeted advertising, and we do not add you to a mailing list unless you ask us to.

Who we share it with

Only service providers that run the site for us, under contracts that limit how they use the data: Hostinger (website hosting and email delivery) and Google (Google Analytics, through Google Site Kit).

We may disclose information if the law requires it, or to protect our rights or someone's safety.

These providers may process data outside your country, including in the United States. Where UK or EU law applies, transfers rely on safeguards such as the European Commission's standard contractual clauses or the UK addendum.

How long we keep it

Inquiries and audit requests: up to 24 months after our last contact, unless you become a client; client records are kept for the length of the engagement and as long as the law requires afterwards.

Google Analytics data: according to our Google Analytics retention setting, at most 14 months.

Server logs: as set by our hosting provider, usually a few weeks.

Your rights

Depending on where you live, you can ask to access, correct or delete your personal information, to restrict or object to how we use it, or to receive a copy in a portable format. Where we rely on consent, you can withdraw it at any time.

You can also complain to your data protection authority, for example the Information Commissioner's Office (UK), your local EU supervisory authority, or the Information Regulator (South Africa). We would appreciate the chance to help first.

US residents: we do not sell or share personal information for cross-context behavioral advertising. You can ask what we hold about you and ask us to delete it, and we will not treat you differently for asking.

Cookies

When you first visit, a banner asks whether you accept statistics cookies. Where the law requires consent (for example in the UK, the EU and Switzerland), Google Analytics sets no cookies until you accept. You can change your choice at any time with the "Manage consent" tab at the bottom of the page.

Google Analytics cookies (_ga, _ga_*) measure visits. Your choice is remembered in small functional cookies (names starting with cmplz_ and wp_consent_). You can also block or delete cookies in your browser settings, or install Google's opt-out add-on for Google Analytics.

WordPress sets cookies only for people who log in to manage the site. The contact forms do not set cookies.

Automated tools

The Growth Audit uses automated tools to check public web pages. A person reviews every audit before it is sent. We make no decisions about you that have legal or similarly significant effects by automated means alone.

Children

This site is for businesses. It is not directed at children under 16, and we do not knowingly collect their information.

Security

The site is served only over HTTPS, access to its administration is limited, and every change to the site goes through an approval and activity log. No method of transmission or storage is completely secure, but we work to protect your information.

Changes to this policy

We will update this page when our practices change and show the new date at the top. Significant changes will be highlighted on this page.