Privacy Policy

Molo Agency is a trading name of Novamier Limited, a company registered in England and Wales (company number 13198965; VAT number 490969829). Our registered address is 1st Floor Woodgate Studios, 2-8 Games Road, Cockfosters, Hertfordshire, United Kingdom, EN4 9HN.

For the purposes of UK GDPR and the Data Protection Act 2018, Novamier Limited is the data controller for personal information collected through this website. You can reach us at info@molo.agency.

We only collect information that helps us do the work you’ve asked us to do, run our business, and improve the site. In practice that means:

• Contact details — name, email, phone number, company name, job title — when you submit a form, request an audit, book a call, or email us.
• Project context — budget range, timeline, project type, message content, and anything else you share when describing your enquiry.
• Calculator and audit inputs — selections you make in the website cost calculator, SEO audit, growth plan, or AI automation tools.
• Account-style data from services you connect — for paying clients only, this can include access we’re granted to your Google Analytics, Search Console, Ads, or similar accounts. We process this strictly under our contract with you.
• Technical information — IP address, browser type, device type, referring page, time of visit, pages viewed — collected automatically as part of running a website (logs, analytics).
• Marketing preferences — whether you’ve opted in to our newsletter and which categories of message you’d like to receive.

We collect information when you:

• Fill in any contact, audit, calculator, or enquiry form on the site;
• Subscribe to our newsletter or downloadable guides;
• Email or call us directly;
• Register for a webinar, workshop, or event we host;
• Engage with us as a client (we’ll cover that in a separate Services Agreement);
• Simply browse the site — we collect anonymous and cookie-based data through analytics and tracking tools (see the Cookie Policy for the full list).

We use the information you give us to:

• Reply to your enquiry and follow up with the work you’ve asked us about;
• Send proposals, audits, calculator results, and other materials you’ve requested;
• Deliver services we’re engaged for (only if you become a client);
• Send you newsletters and marketing emails, where you’ve opted in;
• Understand how the site is used so we can improve it (analytics);
• Run paid campaigns to reach similar people (where you’ve consented to marketing cookies);
• Comply with our legal, tax, and accounting obligations;
• Detect and prevent abuse, spam, or fraudulent use of the site.

We will not sell your personal data, ever. We don’t use your information for automated decision-making that produces a legal effect on you.

Under UK GDPR we rely on the following lawful bases:

• Consent — when you tick a marketing-opt-in box, accept analytics or marketing cookies, or sign up to our newsletter. You can withdraw consent at any time.
• Legitimate interests — to respond to your enquiries, follow up on quotes, secure and improve the site, and run our business. We’ve assessed these against your rights and reasonable expectations.
• Contract — for clients, processing is necessary to provide the services you’ve engaged us for and fulfil our agreement.
• Legal obligation — where we’re required to keep records or share information (e.g. tax, accounting, court orders).

We use the following analytics and tracking services to understand how the site is performing. Each one runs only after you’ve given consent through our cookie banner — you can change your choice anytime via the Cookie preferences link in our footer.

• Google Analytics 4 — pageviews, sessions, conversion events, audience demographics. Helps us improve content and user flow.
• Google Tag Manager — a container that loads other tags only when consented to.
• Meta Pixel (Facebook / Instagram) — measures ad campaign performance, builds audiences for retargeting.
• LinkedIn Insight Tag — measures LinkedIn ad campaigns and builds professional audiences.
• Vercel Analytics / Speed Insights — anonymous performance and Core Web Vitals data so we can keep the site fast.

Where these tools collect personal data, the relevant provider acts as a data processor or independent controller. See the Cookie Policy for the per-cookie detail.

Our cookie banner asks for your consent before any non-essential cookies are loaded. We classify cookies into three categories — Necessary, Analytics, and Marketing — and you can accept all, reject all, or pick per category. Full detail is in our Cookie Policy.

Every form on the site (contact, SEO audit, website audit, PPC audit, growth plan, AI automation finder, cost calculator) sends your submission to our secure inbox via Resend, our transactional email provider. We may also push the submission to our CRM (currently HubSpot, when connected) for follow-up.

We retain form submissions for as long as needed to respond and close the conversation, plus a reasonable period afterwards in case the lead is revisited (see How long we keep data below).

We do not sell, share, or rent form data to third parties for their own marketing. We may share it with sub-processors we use to run our business (e.g. email hosting, CRM, cloud storage) — all listed in Service providers and third parties.

If you subscribe to our newsletter or download a guide, we send you marketing emails about our work, insights, services, and occasional events. Every email contains a one-click unsubscribe link in the footer, and unsubscribing is processed immediately.

We send these emails via Mailchimp, who acts as our processor for newsletter delivery. Open and click data is collected to measure engagement.

You can also email us at info@molo.agency to opt out at any time, or update your marketing preferences using the Manage Preferences link in any email we’ve sent.

When you register for a webinar, workshop, roundtable, or event we host, we collect the registration details (name, email, company) so we can confirm your place, send joining instructions, and follow up afterwards. We may use a third-party event platform (e.g. Zoom, Streamyard, Riverside) — those providers act as our processor and handle the live session and recording infrastructure.

Event recordings may be repurposed as content. We’ll always tell you in advance and give you the option to attend with camera and audio off.

When you submit an enquiry about our AI agents, automation, or AI-enhanced marketing services, we handle the request like any other lead. We do not use the content of your enquiry to train public AI models.

For paying clients we may use AI tools (e.g. OpenAI, Anthropic, Google) to deliver services — the specifics are covered in your Services Agreement, including which providers process your data and on what terms.

We rely on a small set of trusted providers to run the website and our business. Each is bound by data-protection terms and only processes data on our behalf.

• Vercel — hosts the website and serves it globally. Stores access logs and edge cache data.
• Sanity — our content management system; stores published content and editor metadata.
• Resend — transactional email provider used for form submissions and account notifications.
• Mailchimp — newsletter and broadcast email provider.
• HubSpot — CRM where qualified leads are tracked through to closure.
• Google — Analytics (GA4), Tag Manager, Search Console, Google Workspace for email.
• Meta — Meta Pixel for ad measurement; only loaded with marketing consent.
• LinkedIn — Insight Tag for ad measurement; only loaded with marketing consent.
• Calendly — booking platform when you schedule a call with us.

Some of our providers are based outside the UK and EEA (notably in the United States). Where personal data is transferred outside the UK, we rely on the UK’s adequacy decisions, the EU’s Standard Contractual Clauses with UK addendum, or equivalent safeguards approved by the Information Commissioner’s Office.

We don’t keep personal data for longer than we genuinely need it. As a general rule:

• Contact and enquiry data — up to 24 months after our last interaction, then deleted unless the lead converted to a client.
• Newsletter subscribers — until you unsubscribe, plus a short suppression-list period to honour the opt-out.
• Client records — for the duration of the engagement plus 6 years (statutory tax / accounting retention).
• Analytics and cookies — see the Cookie Policy for per-cookie expiry.
• Server logs — typically 30 days unless needed for incident investigation.

We protect your information with industry-standard safeguards: HTTPS encryption in transit, access controls on our hosting and CRM, server-side validation on forms, and a small number of named staff with access to lead data. Our providers are SOC 2 / ISO 27001 certified where available.

No system is perfectly secure. If we ever become aware of a breach affecting your personal data, we’ll notify the ICO within 72 hours and contact affected individuals where required by law.

Under UK GDPR you have the following rights:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure — ask us to delete your data, subject to legitimate exceptions (e.g. accounting records).
• Right to restrict processing — ask us to pause certain uses of your data.
• Right to object — particularly to direct marketing and processing based on legitimate interests.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to withdraw consent — at any time, where consent was the basis for processing.
• Right to lodge a complaint — with the UK Information Commissioner’s Office (ico.org.uk) if you believe we’re mishandling your data. We’d rather you came to us first so we can put it right.

To exercise any of these rights, email us at info@molo.agency. We’ll respond within one month, free of charge.

Our services are aimed at businesses, not children. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has submitted personal data through our site, please contact us and we’ll delete it.

We’ll update this policy from time to time as the way we work or the rules around it change. The Last updated date at the top of the page shows the latest revision. Material changes will be flagged on the site and, where required, communicated directly. Continued use of the site after an update means you accept the revised policy.

If you have questions about this policy or your data:

• Email: info@molo.agency
• Post: Novamier Limited, 1st Floor Woodgate Studios, 2-8 Games Road, Cockfosters, Hertfordshire, United Kingdom, EN4 9HN
• Company number: 13198965 (registered in England and Wales)