PRIVACY POLICY

Last updated: 14 October 2026

At Add Salt, we take your privacy seriously. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, subscribe to our communications or use our services.

We are committed to handling your personal information responsibly and transparently, in accordance with applicable UK data protection legislation.

1. Who we are

Add Salt is the trading name of Beverley Salt, a sole-trader B2B marketing consultant based in the United Kingdom.

Website: www.addsalt.co.uk
Email: bev@addsalt.co.uk
Telephone: +44 (0)7799 767810

For the purposes of UK data protection legislation, Add Salt is generally the data controller of personal information collected through our own website, business enquiries, marketing activities and client relationships.

Where we process personal information solely on behalf of a client and under their instructions, we may act as a data processor. In these circumstances, the client's own privacy policy and our contractual arrangements will also apply.

2. What personal information we collect

Depending on how you interact with Add Salt, we may collect the following information:

Contact details: Your name, email address, telephone number, job title and business or organisation.
Enquiry information: Details you provide when contacting us through our website, email, telephone or other communication channels.
Client information: Information necessary to provide our marketing consultancy, project support, workshops and freelance advisory services, including correspondence and relevant business records.
Marketing preferences: Your newsletter subscriptions, communication preferences and any requests to unsubscribe.
Website usage information: Information about how visitors use our website, including pages visited, referral sources, device and browser information, approximate location and interactions with website content.
Professional information: Business contact details obtained through networking, professional platforms, events, referrals and publicly available business sources.

We only collect and use personal information where it is relevant and necessary for legitimate business purposes or where another appropriate lawful basis applies.

We do not intentionally collect sensitive personal information, such as health information, unless there is a specific and lawful reason to do so.

3. How we collect your information

We collect personal information in several ways:

Directly from you, when you:

Contact us through our website, email, telephone or social media.
Subscribe to our newsletter or other marketing communications.
Enquire about or purchase our consultancy or freelance advisory services.
Attend a workshop, consultation or business meeting.
Become a client or collaborate with Add Salt.

From other sources, including:

Professional networking and business events.
Business referrals and introductions.
Publicly available professional information, such as company websites and LinkedIn profiles.
Clients and project collaborators, where relevant to delivering agreed services.
Website analytics, cookies and similar tracking technologies.

Where we obtain personal information from a third party, we will take appropriate steps to ensure its collection and use comply with applicable data protection requirements, including providing privacy information where required.

4. How and why we use your information

We use personal information for the following purposes, relying on the lawful bases identified under UK GDPR.

Where we rely on legitimate interests as our lawful basis, those interests include operating, administering and developing our business, maintaining professional relationships, responding to enquiries, delivering and improving our services, protecting our business and systems, and carrying out proportionate business-to-business marketing activities.

When relying on legitimate interests, we consider and balance those interests against the rights, freedoms and reasonable expectations of the individuals concerned. We only process personal information in this way where we are satisfied that our interests are not overridden by those rights and interests.

Special Category Data

We do not routinely collect or process special category personal data, such as information relating to an individual's health, racial or ethnic origin, religious or philosophical beliefs, trade union membership, sexual orientation, biometric data or genetic data.

However, in the course of providing consultancy, coaching or advisory services, individuals may choose to disclose special category personal data voluntarily. Where this occurs, we will only process such information where a valid condition under Article 9 of the UK GDPR applies, including where:

the individual has given explicit consent;
the processing is necessary for the establishment, exercise or defence of legal claims; or
another lawful condition permitted by data protection law applies.

We request that individuals do not provide special category personal data unless it is reasonably necessary for the provision of our services.

We apply appropriate technical and organisational measures to protect any special category personal data that we process.

Changes of Purpose

We will not use personal information for purposes that are incompatible with those described in this Privacy Policy unless we establish an appropriate lawful basis for the new processing activity and, where required by law, provide additional information to the individuals concerned.

5. Marketing communications

Add Salt may contact you with relevant information about our services, marketing insights, events, workshops, freelance advice and other business-related content.

Where consent is legally required, we will obtain it before sending marketing communications.

For certain business-to-business communications, we may rely on legitimate interests where permitted under UK GDPR and the Privacy and Electronic Communications Regulations (PECR).

The rules differ depending on the type of recipient. For example, marketing to contacts at limited companies may be treated differently from marketing to sole traders and certain partnerships.

You can unsubscribe from our marketing communications at any time by using the unsubscribe link in an email or contacting bev@addsalt.co.uk.

You have an absolute right to object to the use of your personal information for direct marketing at any time.

If you object or unsubscribe, we will stop using your information for the relevant marketing purposes. We may retain limited information on a suppression list to ensure your preferences are respected.

6. Customer relationship management and HubSpot

We use HubSpot as our customer relationship management (CRM) platform.

HubSpot helps us manage business contacts, enquiries, client relationships, marketing communications and associated business activities.

Personal information stored in HubSpot may include names, business contact details, company information, communication preferences, correspondence and records of relevant business interactions.

HubSpot may incorporate artificial intelligence, automation and analytics functionality within its services. Where enabled and used, these features may process relevant information to help organise data, support workflows, analyse information or assist with business communications.

We remain responsible for determining how personal information is used within our CRM and for ensuring that our use of HubSpot complies with applicable data protection legislation.

HubSpot's processing of customer personal information is governed by its applicable contractual terms and data processing arrangements.

Further information can be found at:

https://legal.hubspot.com/privacy-policy

7. Artificial intelligence (AI)

Add Salt may use artificial intelligence and AI-assisted software as part of our business operations and delivery of marketing services.

This may include:

Supporting research, brainstorming and content development.
Assisting with marketing planning, analysis and reporting.
Improving administrative tasks and business workflows.
Supporting data organisation and CRM functionality.
Assisting with the preparation and refinement of marketing materials.

We aim to use AI responsibly and apply appropriate human judgement and oversight to AI-assisted work.

Where AI-enabled services process personal information, we take reasonable steps to ensure that such processing is necessary, proportionate and consistent with applicable data protection legislation.

We seek to minimise the sharing of unnecessary personal information with AI tools, particularly where information is confidential or relates to clients or other individuals.

Add Salt does not use AI to make solely automated decisions about individuals that produce legal or similarly significant effects.

We will provide additional information where a particular use of AI gives rise to specific legal transparency requirements.

8. Website analytics and tracking technologies

Our website is hosted using Wix and uses analytics and tracking technologies to help us understand website performance, improve visitor experience and evaluate our marketing activities.

These services include:

Google Analytics

We use Google Analytics to understand how visitors find and interact with our website. This may include information about visitor numbers, traffic sources, pages viewed, engagement and technical information about devices and browsers.

Google Search Console

We use Google Search Console to monitor our website's performance in Google Search, including search visibility, search queries, indexing and technical performance.

Search Console primarily provides website performance and search reporting rather than operating as a conventional visitor-tracking cookie service.

Wix Analytics

We use Wix's built-in analytics tools to understand website traffic, visitor behaviour, traffic sources and overall website performance.

LinkedIn Insight Tag

Our website uses the LinkedIn Insight Tag to help assess the effectiveness of LinkedIn marketing and advertising activity.

Depending on the features enabled, LinkedIn may use information collected through this technology to provide conversion measurement, website audience insights and advertising-related functionality.

The LinkedIn Insight Tag may use cookies or similar technologies.

Cookies and consent

Cookies are small files or similar technologies used to store or access information on your device.

Our website may use the following categories:

Essential cookies: Necessary for the website to function, maintain security and remember relevant settings.
Analytics cookies: Help us understand how visitors use the website and identify opportunities for improvement.
Marketing cookies: Support advertising measurement and other marketing-related tracking activities.

We seek consent before using non-essential tracking technologies where consent is legally required.

Certain technologies used solely for qualifying statistical or website improvement purposes may be permitted without consent under applicable UK legislation, subject to strict conditions, including providing information and an appropriate means to object.

Marketing and advertising tracking, including the LinkedIn Insight Tag, is subject to the relevant consent requirements.

Where consent is required, visitors should be able to accept, reject or manage their preferences through our website's cookie consent controls.

You can also manage cookies through your browser settings. Disabling some cookies may affect certain website features.

Further information about our technology providers is available through their respective privacy policies:

Google: https://policies.google.com/privacy
LinkedIn: https://www.linkedin.com/legal/privacy-policy
Wix: https://www.wix.com/about/privacy

9. Sharing personal information with third parties

We do not sell personal information to third parties.

We may share personal information with trusted service providers where reasonably necessary to operate our business or deliver our services.

These may include:

HubSpot, for CRM and related business activities.
Wix, for website hosting and associated functionality.
Google, for website analytics and search performance reporting.
LinkedIn, for advertising measurement and associated tracking functionality.
Email, cloud storage, communications, accounting and administrative service providers.
Professional advisers or subcontractors where necessary for legitimate business purposes.
Relevant authorities where disclosure is required by law.

Depending on the service and activity, third parties may process information on our behalf or act as independent data controllers.

Where providers process personal information on our behalf, we seek to ensure appropriate contractual and security arrangements apply.

We may also disclose information where necessary to establish, exercise or defend legal claims, protect legal rights or comply with statutory obligations.

10. International data transfers

Some of the third-party technology services used by Add Salt operate internationally. This means personal information may be accessed, stored or processed outside the United Kingdom.

Where personal information is transferred internationally, we seek to ensure that appropriate protection is in place in accordance with applicable UK data protection legislation.

Depending on the destination and provider, safeguards may include:

UK adequacy regulations, including applicable recognised arrangements with other countries.
The UK Extension to the EU–US Data Privacy Framework, where the relevant organisation and transfer are covered.
The UK International Data Transfer Agreement or UK Addendum to approved standard contractual clauses.
Other lawful transfer mechanisms where applicable.

You may contact us if you would like further information about the safeguards relevant to the processing of your personal information.

11. How we protect your information

We take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, misuse, alteration or disclosure.

These measures may include:

Access controls and account security.
Appropriate use of passwords and authentication.
Secure third-party technology and cloud services.
Limiting access to information to those who need it for legitimate business purposes.
Reviewing the personal information we hold and the services we use.

Although we take appropriate precautions, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

We will respond to any personal data breaches in accordance with applicable legal obligations, including notifying the Information Commissioner's Office (ICO) and affected individuals where required.

12. How long we keep your information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including meeting contractual, accounting, legal and regulatory obligations.

Retention depends on the type of information and its purpose.

Enquiries and prospective client records: Retained while an enquiry or potential business relationship remains relevant, subject to periodic review.
Client and project records: Retained for the duration of the business relationship and afterwards where reasonably necessary for legal, contractual, record-keeping or legitimate business purposes.
Marketing contact information: Retained while there is an appropriate lawful basis for communicating with you, unless you unsubscribe, object or the information is no longer required.
Financial and accounting records: Retained for the period required by applicable tax and financial record-keeping legislation.
Website analytics and tracking information: Retained according to the relevant configuration, purpose and retention controls of the services used.
Suppression records: Limited information may be retained where necessary to ensure marketing objections and opt-outs continue to be respected.

We periodically review the information we hold and delete, anonymise or securely dispose of personal information when it is no longer required.

13. Your data protection rights

Under UK data protection legislation, you have rights relating to your personal information. These include:

Right of access: To request a copy of the personal information we hold about you.
Right to rectification: To request correction of inaccurate or incomplete information.
Right to erasure: To request deletion of your information in certain circumstances.
Right to restrict processing: To request that we limit how your information is used in certain circumstances.
Right to object: To object to processing based on legitimate interests and, at any time, to direct marketing.
Right to data portability: To request certain information in a portable format or have it transferred to another organisation, where applicable.
Rights relating to automated decision-making: To receive applicable safeguards and exercise relevant rights where significant automated decisions are made.
Right to withdraw consent: Where processing relies on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

These rights are subject to relevant legal conditions and exemptions.

To exercise your rights, please email bev@addsalt.co.uk.

We will normally respond to valid requests within one month, subject to any permitted extensions. There is usually no charge for exercising your rights.

14. Complaints

If you have concerns about how Add Salt collects, uses or protects your personal information, please contact us.

Email: bev@addsalt.co.uk
Telephone: +44 (0)7799 767810

We will acknowledge data protection complaints within 30 days and investigate them appropriately, keeping you informed of the outcome or progress as required by law.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Information Commissioner's Office
Website: https://ico.org.uk
Telephone: 0303 123 1113

We would welcome the opportunity to address your concerns directly, although you are not required to contact us before approaching the ICO.

15. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, technology, business practices or applicable legislation.

The latest version will be published on www.addsalt.co.uk, together with the date it was last updated.

If we make significant changes affecting how we process personal information, we will provide additional information or notifications where legally required.