Privacy policy

01 Who is responsible for your data?

Socialectric is operated by Eric Phung, an independent consultant based in Sale, Manchester, UK. I am the data controller for any personal information collected through this site.

02 What data do I collect, and why?

Data you provide directly

When you get in touch, whether by booking a call, by email, or through a form on this site, I collect your name, email address, and the details of your message. I use this solely to respond to your enquiry and, where relevant, to discuss whether a Blueprint Audit or project might be a good fit.

The AI Policy Builder works differently. Your answers to its questions stay in your browser while you answer them and preview the draft: nothing is sent anywhere until you press Download. When you do, your name, your organisation's name, your email address, a short summary of your answers, whether you asked to hear about clause updates, and the time you confirmed the draft will be reviewed before adoption are sent to me, so that there is a record of the download. The Word file itself is built in your browser and is not sent to me.

Data collected automatically

When you visit the site, Cloudflare Web Analytics records aggregate technical data: which pages are visited, roughly where in the world visits come from, and the general device and browser type. It does not use cookies and does not follow visitors between websites.

If, and only if, you accept analytics cookies on the banner, Google Analytics 4 also measures your visit: pages viewed, approximate location derived from your IP address, and general device and browser type. Google is the processor for that data. Until you accept, Google's script is not loaded and your browser sends nothing to Google at all. Advertising, ad-personalisation and ad-user-data signals are disabled permanently, for every visitor, regardless of what you choose.

The same choice also switches on Apollo, a sales-intelligence service. It records the pages you view and uses your IP address to work out which organisation the visit comes from, so I can see which organisations are reading the site. Outside the United States it identifies the organisation only, never the person. For visitors it locates in the US, it also tries to identify the individual, through its identity partner LiveIntent; for a visitor in the UK or EU, LiveIntent's script is never loaded. Until you accept, Apollo's script is not loaded either.

I do not sell this data to third parties. For visitors in the UK and EU it tells me which organisations read the site, not who you are.

Data I obtain from other sources

I use Apollo, a sales platform, to reach prospects: organisations my work may help. I use it to find the right person's work details (name, job title, organisation and work email address) and to send them email about whether my work could help. I do not use Apollo to find people located in the European Union. If you are in the EU and I write to you, your details came from somewhere else, such as your organisation's website or an introduction.

These emails carry no open or click tracking, wherever you are: I do not record whether you opened one or which links you clicked. If you would rather I did not contact you, reply to the email or write to hello@socialectric.com and I will stop. I keep only enough to make sure you are not contacted again.

03 Cookies

This site sets no advertising cookies, and no third-party cookies unless you ask for the booking calendar: clicking a "Book a call" link loads Cal.com's calendar, which may store what it needs to run the booking. One first-party item is always stored, which remembers that the opening animation has played, plus a record of the cookie choice you made. That choice is also kept as a pseudonymous entry in my own consent log, holding the random identifier the banner generates, which categories you allowed, and when, with no name, email address or IP address, so that I can demonstrate consent was properly obtained if a regulator asks. The Google Analytics cookies and Apollo's stored items are set only if you accept them. All of them are listed in full on the Cookie Policy page, where you can also change your choice or clear them.

04 What is my legal basis for processing your data?

Under UK GDPR, I process your data on the following grounds:

Consent, for Google Analytics and Apollo, which run only if you accept it on the cookie banner and which you can switch off again at any time from the Cookie settings link in the footer; for any email communications or lead magnets in future, where I will ask before signing you up; and for emails about updates to the AI Policy Builder's clauses, sent only if you ticked that box, which you can withdraw at any time by asking me to stop. Legitimate interest, for contacting people at organisations my work may help, about that work, by email, which you can object to at any time by asking me to stop; for the cookieless, aggregate Cloudflare measurement, which cannot identify you; for keeping a record of each AI Policy Builder download, including your confirmation that the draft will be reviewed before adoption; for keeping a pseudonymous record of cookie-consent choices, which UK GDPR's accountability principle requires me to be able to demonstrate; and for keeping the contact form secure. Contractual necessity, for data shared during an active client engagement.

05 How long do I keep your data?

Contact enquiry data is kept for as long as it takes to respond and, if relevant, complete a project. After that, I delete it unless there is a legal reason to retain it. Analytics data is retained in an anonymised, aggregated form and does not persist as individually identifiable information. Consent-log records are kept for about 13 months and then deleted automatically. AI Policy Builder download records are kept until they are no longer needed or you ask me to delete them, and a request for clause updates until you withdraw it.

06 Do I share your data with anyone?

I do not sell, trade, or share your personal data with third parties for marketing purposes. I do use a small number of established service providers to run this business. They process data only on my instructions, under a written data processing agreement, and for no purpose of their own.

Transfers outside the UK

Some of these providers process data outside the UK. Where that happens, I rely on the European Commission's Standard Contractual Clauses together with the UK Addendum issued under section 119A of the Data Protection Act 2018, the safeguard recognised by the ICO for transfers of this kind. Moxie's data processing agreement, which incorporates both, is published at withmoxie.com/terms-legal/data-processing.

07 Your rights under UK GDPR

You have the right to access the personal data I hold about you, request a correction if it is inaccurate, ask me to delete it where there is no legal reason to keep it, and object to how it is being used. To exercise any of these rights, simply email me at hello@socialectric.com.

08 Changes to this policy

If this policy changes, I will update the date at the top of this page. It is worth checking back occasionally.

09 Questions?

If you have any concerns about how your data is handled, you can contact me directly at hello@socialectric.com. If you are not satisfied with my response, you can also contact the Information Commissioner's Office (ICO), the UK's data protection authority, at ico.org.uk.