Privacy Policy.
We respect your privacy and process personal data strictly in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
1. Data Controller
The data controller responsible for your personal information is More Than Normal, founded and operated by Alex Harvey:
Lullingstone House, Lullingstone Court
St Johns Lane, Canterbury, Kent, CT1 2NX
Direct Email: alex@morethannormal.co.uk
2. Information We Collect and How We Use It
We collect only the personal information strictly necessary to deliver our search engineering services, respond to enquiries, schedule consultations, and maintain website security:
A. Consultation Bookings (Google Calendar API & Google Meet)
When you book a free 20-minute video consultation via our booking interface, we collect your name, work email address, website URL, and selected appointment time.
- Purpose: Checking calendar availability, reserving the appointment slot, generating a secure Google Meet video conference link, and sending automated calendar invitations.
- Lawful Basis: UK GDPR Article 6(1)(b) (Performance of a contract / taking steps at your request prior to entering into a contract).
- Third-Party Processor: Google LLC (Google Calendar / Google Meet) under Google Workspace Data Processing Terms.
B. Audit & General Enquiries (Web Forms & Email)
When you submit our diagnostic audit enquiry form or general contact form, we collect your name, email address, website URL, and project description or search challenges.
- Purpose: Evaluating your website, preparing diagnostic audit proposals, issuing invoices, and communicating about potential or active search projects.
- Lawful Basis: UK GDPR Article 6(1)(b) (Pre-contractual assessment) and Article 6(1)(f) (Legitimate interests in conducting direct business correspondence).
- Third-Party Processor: Google LLC (Google Workspace Email / Gmail API).
D. Web Server & Security Logs
Our hosting infrastructure automatically records technical access logs (visitor IP address, browser user-agent, request timestamp, and requested URL).
- Purpose: Protecting web infrastructure against DDoS attacks, detecting security threats, and troubleshooting technical errors.
- Lawful Basis: UK GDPR Article 6(1)(f) (Legitimate interests in maintaining network resilience and security).
3. Third-Party Service Providers (Data Processors)
We do not sell, rent, or trade your personal data to marketing companies or data brokers. We share data only with trusted technical service providers who process information strictly on our instructions:
- Google LLC (Google Workspace, Calendar, Meet, GA4): Direct email delivery, calendar consultation scheduling, secure video meetings, and aggregate website analytics (subject to prior consent).
- Hosting & Edge Infrastructure: Static hosting and edge CDN distribution for high-performance delivery and network security.
Where personal data is transferred outside the United Kingdom or European Economic Area, transfers are safeguarded under UK International Data Transfer Agreements (IDTA) or Standard Contractual Clauses (SCCs).
4. Data Retention Periods
- Client Enquiries & Audit Data: Retained for the duration of the enquiry and project engagement. For paying clients, transactional and invoicing records are retained for 6 years to satisfy UK HMRC tax and statutory accounting obligations.
- Calendar Bookings: Retained until the consultation is completed, after which booking records are archived or deleted.
- Google Analytics Data: Set to Google's standard 14-month user and event data retention window before automated deletion.
- Web Server Logs: Automatically rotated and discarded within 14 to 30 days.
5. Your Legal Rights Under UK GDPR
Under UK data protection legislation, you have specific rights regarding your personal data:
- Right of Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request correction of inaccurate or incomplete personal information.
- Right to Erasure: You can request that we delete your personal data when it is no longer required for its original purpose.
- Right to Restrict or Object: You can object to or request restriction of our processing of your personal data under certain conditions.
- Right to Data Portability: You can request transfer of your data to another service provider where applicable.
To exercise any of these rights, please email us directly at alex@morethannormal.co.uk. We respond to all verified requests within one calendar month at no charge.
If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the UK supervisory authority:Information Commissioner's Office (ICO) at ico.org.uk or by telephone at 0303 123 1113.
6. Changes to this Policy
We review and update this policy periodically to reflect changes in our technical integrations or legal requirements. This policy was last updated on 12 August 2026.
Ready to make your business findable?
Start with a £450 Diagnostic Audit, or book a free 20-minute video consultation to review your search presence live.