Privacy, Cookies & Terms

Last updated: 28 October 2026

This page is provided for transparency and general information. It is not a substitute for independent legal advice. If you rely on this page for compliance purposes, you should have it reviewed by a qualified UK solicitor.

Privacy Policy

Who we are

Sidebar Marketing is the trading name of Thomas Lennon, a sole trader in the United Kingdom. In this policy, "we", "us" and "our" refer to Thomas Lennon trading as Sidebar Marketing. We are the data controller for personal information we collect for our own business purposes. Our role for campaign enquiries is explained below and depends on the service and how the data is handled in practice. We provide advertising, website and automation services to businesses.

Business contact details: Ashby-de-la-Zouch, Leicestershire, United Kingdom; tom@sbmarketing.site; 07305 229589. ICO registration number: C2014364. We are not VAT registered.

What personal data we collect and when

We collect personal data in a few different ways:

When you fill in our "Apply to Work With Us" form: we collect your name, company name, the type of business you run and the services you offer, the area you cover, your average job value, your current monthly job capacity, whether you run Meta ads already, your estimated ad budget, your email address, your phone number, and anything you choose to write in the optional message box. You provide this voluntarily when you want to enquire about working with us.
When you fill in our website enquiry form: if you enquire about a website, landing page or client system rather than an ad campaign, we collect your name, company name, what you're looking for, whether you already have a website, what you want the site to achieve, your rough budget, your timeline, how you'd like the site hosted, your email address, your phone number, and anything you choose to write in the optional message box.
When you use the SB Engine client portal: if you become a client, we hold your account details, login credentials, the enquiry records generated by your campaigns, commission and invoicing records, any documents or job photos you upload to the portal, and any messages you send us through it. Lawful basis: performance of a contract.
When you visit our website (with your consent): Google Analytics 4 uses cookies to collect pseudonymous usage and device information, such as pages viewed and session activity. We have configured the tag to disable Google Signals and advertising personalisation. See the Cookie Policy section below.
When you join our newsletter: you give us your email address in the form at the bottom of a page. The form is forwarded to Netlify Forms, which processes the submission for us.

Why we collect it and our lawful basis

To respond to your enquiry and arrange a discovery call. Lawful basis: legitimate interests (you contacted us first to find out more about our services).
To assess whether we can take you on as a client: we review your answers to decide whether you're a good fit for what we offer. Lawful basis: legitimate interests / pre-contractual steps at your request.
To manage an ongoing client relationship: if you become a client, we use your contact details and business information to manage your campaigns and our agreement. Lawful basis: performance of a contract.
To understand how people use our website: if you accept analytics cookies, we use Google Analytics usage data to improve the site. Lawful basis: consent. You can withdraw consent at any time using Cookie Settings in the footer.
To send you our newsletter: occasional emails about Sidebar Marketing and advertising advice, only if you signed up. Lawful basis: consent. You can unsubscribe at any time by replying to any email or contacting us, and we will stop.
To meet legal or accounting obligations. Lawful basis: legal obligation.

We do not use your enquiry details for unsolicited marketing and we do not sell or rent your personal data to anyone.

Who we share your data with

We keep your data to ourselves as much as possible. The only third parties who may receive it are:

Website and form providers: Cloudflare hosts the public website and processes requests. Netlify Forms receives and stores application and newsletter submissions for us.
Google Analytics: if you accept cookies, pseudonymous usage and device data is sent to Google. See Google's privacy policy at policies.google.com/privacy.
Meta Platforms, Inc.: if you become a Meta ads client, we access and manage advertising accounts on Meta's platforms (Facebook and Instagram) on your behalf. Meta's own privacy and data policies govern what Meta does with that data.
Google LLC (Google Ads): if you become a Google ads client, we access and manage advertising accounts on Google's platform on your behalf. Google's own privacy and data policies govern what Google does with that data.
Client portal provider: Supabase provides the database and login services used by the SB Engine client portal. If you become a client, relevant account and portal information is stored there.
Communication providers: email and SMS delivery providers may process contact details and message contents to deliver messages connected with our services.
Other service providers: we may use tools such as email or scheduling software. Any provider we use is only allowed to process your data to deliver their service to us, not for their own purposes.

Enquiries generated through our clients' ad campaigns

Separately from our own website, we run advertising campaigns for clients. People who respond may provide their name, contact details and details of the work they need.

Who is responsible for that data

The business featured in the advert is the contact point for the enquiry. Our data protection role depends on the service and how the data is handled in practice. The relevant written client agreement should set out each party's responsibilities.

What we do with it

We pass the enquiry to our client and record that it happened, so that both sides can see what the campaign produced and calculate any commission due.

Where a campaign service includes an automated acknowledgement, a message may be sent in response to the enquiry. The service and message content should be explained when the person submits their details.

Beyond that, we do not market to enquirers, and we do not sell, rent or share their details with anyone other than the client whose campaign they responded to.

How long we keep it

We keep campaign enquiry records for the period set out in the relevant client agreement and delete or return them when that period ends, subject to any legal retention requirement.

Where the data is collected

Where an enquiry is submitted through a Meta lead form, Meta Platforms, Inc. collects it first, and Meta's own privacy policy applies to that step. Where it is submitted through a landing page we built, it is collected directly.

Tracking on our clients' own websites

Tracking tools may be used on a client's website as part of a campaign. The client and we should agree who is responsible for each tool, the information shown to visitors, and any consent controls before tracking is enabled. This site uses Google Analytics only after consent and does not use Meta advertising pixels.

If you made an enquiry and want your data removed, contact the business you enquired with, since they are the controller. You can also contact us at the email address above and we will pass your request straight to them.

Where your data is stored

The public website is hosted on Cloudflare Pages. Website forms are forwarded to Netlify Forms, which processes and stores submissions. Google Analytics receives usage information only after consent. Client portal data is stored using Supabase. Email and SMS delivery providers may also process relevant contact details and message contents.

Some providers may process personal data outside the UK. The applicable transfer arrangements depend on the provider, service and account configuration. We will provide details of the relevant transfer safeguards on request.

The typefaces used on this site are served from our own domain rather than from an outside font service, so no font provider receives your IP address or any other information about you when a page loads.

How long we keep your data

Enquiries that don't lead to a client relationship: we keep your form submission long enough to respond and follow up. If nothing comes of it, we delete it within 6 months.
Newsletter subscribers: we keep your email address until you unsubscribe, then delete it.
Client data: we keep your contact details and relevant business records for the duration of our working relationship and for 6 years afterwards, to meet our legal and accounting obligations.
Analytics data: user-level and event-level data is retained for the period configured in our Google Analytics property. Aggregated report data may be retained separately.

Your rights under UK GDPR

You have the right to:

Access: ask what personal data we hold about you and receive a copy
Rectification: ask us to correct inaccurate or incomplete data
Erasure: ask us to delete your data (subject to certain legal exceptions)
Restriction: ask us to limit how we use your data in certain circumstances
Objection: object to processing based on legitimate interests
Portability: receive your data in a portable format where applicable
Withdraw consent: at any time where processing is based on consent (e.g. analytics cookies)

To exercise any of these rights, email us at tom@sbmarketing.site. We'll respond within one month. If you're unhappy with how we've handled your data, you can complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or on 0303 123 1113.

Cookie Policy

What cookies are

Cookies are small text files placed on your device by websites you visit. They're used to remember your preferences or to collect information about how you use a site. UK law (the Privacy and Electronic Communications Regulations, PECR) requires us to get your consent before setting non-essential cookies.

What cookies this site uses

We use two types of cookie:

1. Essential cookie (always active, no consent needed)

Name	Purpose	Expires
`sb_cookie_consent`	Remembers whether you accepted or declined analytics cookies, so we don't ask you every time you visit.	365 days

This cookie is set by us (sidebarmarketing.site) and doesn't track you. It only records your Yes or No preference.

2. Analytics cookies (only if you click "Allow all")

Name	Set by	Purpose	Expires
`_ga`	Google Analytics	Distinguishes unique visitors by assigning a randomly generated ID. No personally identifiable information is stored in this cookie.	2 years by default; browsers may shorten this
`_ga_97NKLKHRFM`	Google Analytics	Keeps track of the current session state (pages visited, time on site, etc.) for our GA4 property.	2 years by default; browsers may shorten this

These cookies assign pseudonymous identifiers and record usage and session information. Google Analytics 4 does not log or store full IP addresses. We have disabled Google Signals and advertising personalisation. The actual cookie expiry can be shorter because of browser limits.

What we do NOT use cookies for

We do not run retargeting or advertising cookies on this site
We do not use Facebook Pixel or any Meta tracking on this website. (We do install conversion tracking on our clients' own websites when we run their ads. That is their site and their own cookie notice, not this one.)
We do not use any cookies to serve you personalised ads
We do not share cookie data with third parties for their own marketing

How to manage or withdraw your consent

When you first visit the site, a banner appears at the bottom of the screen. You can click Allow all or Reject all. Your choice is saved for 365 days.

To change your mind at any time, use the Cookie settings link in the footer of any page. That clears your saved answer and brings the banner back, so withdrawing consent is as easy as giving it. Analytics stops loading from your next page view onwards. You can also opt out of Google Analytics tracking across all websites using Google's opt-out browser add-on, or clear cookies in your browser settings.

You can manage or delete all cookies through your browser at any time:

Terms of Use

These Terms of Use govern your use of the sidebarmarketing.site website. They are separate from, and do not form, any contract for advertising or marketing services. If you become a client, that engagement is governed by a separate written agreement discussed and agreed with you individually.

What this site is for

sidebarmarketing.site is a marketing website for Sidebar Marketing, a UK-based agency that runs Meta and Google ad campaigns for UK businesses and builds websites, landing pages and client systems. The content here is for information purposes only. It describes our services, our approach, and how to get in touch.

No guarantee of results

Any figures, example results, or case studies shown on this site are illustrative. They are not a promise or guarantee of any specific number of leads, enquiries, jobs won, or return on ad spend. Advertising performance depends on many factors outside our control, including your market, your pricing, how quickly you follow up with leads, and the advertising platforms themselves.

Applying to work with us

Submitting the "Apply to Work With Us" form does not create a contract between you and Sidebar Marketing. It is an expression of interest only. We review all applications and will contact you if we think there's a good fit. We reserve the right to decline any application without giving a reason.

The SB Engine client portal

The SB Engine is provided to clients as part of an existing services agreement. Access is personal to your business. You are responsible for keeping your login details secure and for anything done under your account. We may suspend access if an agreement ends or if we reasonably believe an account is being misused. Use of the portal is governed by your services agreement, not by these Terms of Use.

Intellectual property

The design, layout, copy, branding, and logo of this website belong to Sidebar Marketing. You may not copy, reproduce, republish, or distribute any part of it without our written permission.

Third-party platforms and services

This site references Meta, Facebook and Instagram, owned by Meta Platforms, Inc., and Google Ads, Google Analytics and Google Search, provided by Google. We are independent and are not affiliated with or endorsed by Meta or Google. Their platforms are governed by their own terms and policies. Website forms use Netlify Forms.

External links

This site may link to third-party websites for reference. We are not responsible for the content, privacy practices, or availability of those sites.

Availability

We aim to keep this website available and accurate, but we cannot guarantee it will be error-free or uninterrupted. We may update, change, or take down content at any time without notice.

Liability

To the extent permitted by law, Sidebar Marketing accepts no liability for any indirect, consequential, or incidental loss arising from your use of, or inability to use, this website.

Changes to these policies

We may update this page from time to time, for example if we add new tools or change how we handle data. The "Last updated" date at the top always reflects the most recent version. Continued use of the site after a change does not constitute acceptance of that change where consent is required. In those cases, we will re-ask.

Governing law

These terms and all policies on this page are governed by the laws of England and Wales. Any disputes will be subject to the exclusive jurisdiction of the courts of England and Wales.

Refund Policy

Ad campaigns

Advertising fees are shown on the packages page and confirmed in a separate written agreement before work begins. The current Starter package has a £200 one-off setup fee and 10% commission on jobs up to £100,000, then 8% on jobs over £100,000. The Growth package is £750 per month plus 4% commission per job. Any custom package, commission trigger, attribution rules, invoicing and cancellation arrangements will be set out in the agreement. Ad spend is paid directly from your own Meta or Google account. We do not guarantee a particular result. Refunds and corrections are handled under the written agreement and applicable law.

AI and automation packages

These are monthly services, not one-off projects, so they work differently from our ad campaigns.

What you pay. Each package has a monthly price, and each part of a package has its own monthly price, both shown on the AI and automation page. You can take a whole package or only the parts you want. There is no setup fee on these packages. The price you sign up at is the price you keep until we tell you otherwise, and we will give you at least 30 days' notice in writing before any monthly price changes. We are not registered for VAT, so there is nothing to add.

Billing. Monthly in advance, starting the day the service goes live rather than the day you apply. If we are still building when the month starts, we do not start billing until it is switched on.

Messages, minutes and other usage. Text messages, WhatsApp messages and phone minutes are charged by the networks and the platforms that carry them, not by us. We pass these on at cost, with no markup, and show them separately from our fee. We will tell you the rates before we start, and you can ask to see the usage behind any charge at any time. Usage goes up and down with how busy you are, so this part of the bill varies month to month.

Cancelling. There is no minimum term. Either of us can stop the service with 30 days' notice in writing. You will not be charged again after the notice period ends. A month already paid for is not refunded, and the service keeps running until the end of it. Usage already incurred is still payable.

What happens to what we built. Your contacts and your data are yours, and you can ask for an export at any time, which we will send within 14 days. Anything we build inside accounts you own, for example your own calendar, inbox, website or Airtable base, stays with you and keeps working. Anything built inside a platform we licence on your behalf, for example GoHighLevel, stops working when the service stops, because the licence is ours and the build cannot be handed over. We will say which of the two applies before you sign up. We do not keep using your data after you leave, beyond what the law requires us to retain.

Your own accounts. Where a service needs an account in your name, for example a phone number, a Meta or Google account, or a payment provider, that account stays yours throughout.

What we cannot promise. These services depend on platforms we do not control, so we cannot promise they will never go down or that a message will always be delivered. An AI receptionist can mishear a caller, so it is not suitable as the only way to reach you in an emergency, and we do not present it as an emergency or out-of-hours safety line. We do not promise a particular number of leads, bookings or sales, and we do not quote a no-show or conversion figure at you, because we have no evidence from your business until we have run it. Where we have measured something for you, we will report the real number.

Refunds on these packages. Because there is no setup fee and billing is monthly in advance, the refund position is simple: if we have not switched a service on, you get the month back in full. If something we built stops working through our fault and we cannot fix it within a reasonable time, we will refund that month for the part affected. Beyond that, monthly fees for a service that has been running are not refundable.

Website and landing page builds

These are custom projects billed as agreed with you before work starts. If you cancel before we've started building, you'll get a full refund. If you cancel partway through, you'll be refunded for any part of the work not yet completed, minus a fair amount for the work already done. Once a site has been fully built, reviewed by you and handed over, it's not refundable, though we'll always fix anything that isn't right first rather than leave you stuck with it.

Hosting

Monthly hosting can be cancelled at any time. You won't be charged again after cancelling, but the current month already paid for isn't refunded. Yearly hosting can also be cancelled at any time, and you'll get a refund for any full months you haven't used yet.

How to request a refund

Email tom@sbmarketing.site with what you'd like refunded and why. We'll come back to you within a few working days, and process anything owed within 14 days of agreeing it.