Privacy Policy

1. Who We Are

Henley Media (“we”, “us”, “our”) operates the website at henley.media and provides digital advertising and analytics services to restaurant businesses. We are committed to protecting the personal data we process and being transparent about how we use it.

For data protection purposes, Henley Media is the data controller. You can reach us at hello@henley.media.

2. What Data We Collect

We collect and process the following categories of personal data:

• —Contact information: Name, email address, phone number, and business name provided when you contact us or sign up for our platform.
• —Account data: Login credentials, account preferences, and usage data associated with your client dashboard.
• —Customer transaction data: On behalf of our restaurant clients, we process data about end customers including purchase history, order values, and transaction timestamps for conversion tracking purposes.
• —Analytics data: Website behaviour, session data, traffic sources, and device information collected via Google Analytics 4 and Google Tag Manager on our clients' websites.
• —Advertising data: Campaign performance metrics, click data, impression data, and conversion events collected via Google Ads.
• —Technical data: IP addresses, browser type, operating system, and cookie identifiers collected when you visit our website.

3. How We Use Your Data

We use personal data for the following purposes:

• —To provide and manage our advertising and analytics services to clients
• —To set up and maintain Google Tag Manager, Google Analytics 4, and Google Ads accounts on behalf of clients
• —To track conversions and measure advertising performance across client locations
• —To generate performance reports and analytics dashboards for client use
• —To communicate with clients about their accounts, campaigns, and service updates
• —To comply with legal obligations and resolve disputes
• —To improve our platform and services based on usage patterns

4. Legal Basis for Processing

We process personal data under the following legal bases:

• —Contract: Processing necessary to deliver services under our client agreements.
• —Legitimate interests: Analytics, fraud prevention, service improvement, and direct marketing to existing clients.
• —Consent: Where we rely on consent (e.g. marketing communications), you may withdraw it at any time.
• —Legal obligation: Where we are required to process data to comply with applicable law.

5. Cookies

Our website and our clients' websites use cookies and similar tracking technologies. These include:

• —Essential cookies: Required for the platform to function. Cannot be disabled.
• —Analytics cookies: Google Analytics 4 cookies that help us understand how visitors use websites. These collect anonymised data about pages visited, session duration, and traffic sources.
• —Advertising cookies: Google Ads conversion tracking cookies that measure whether ad clicks result in purchases or other desired actions.
• —Tag Manager cookies: Cookies deployed via Google Tag Manager on behalf of our clients to support conversion tracking and remarketing.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality.

6. Data Sharing

We share data with the following third parties:

• —Google LLC: We use Google Analytics 4, Google Tag Manager, and Google Ads to deliver our core services. Google processes data in accordance with its own privacy policies.
• —Supabase: Our database infrastructure provider, used to store account and campaign data securely.
• —Vercel: Our hosting provider, which processes data in connection with serving our platform.

We do not sell personal data to third parties. We do not share data with advertisers beyond what is necessary to operate campaigns on behalf of our clients.

7. Data Retention

We retain personal data for as long as necessary to provide our services and comply with legal obligations. Client account data is retained for the duration of the client relationship and for up to 7 years after termination for legal and financial record-keeping purposes. Analytics and campaign data may be retained for up to 26 months in line with Google Analytics defaults.

8. Your Rights

Depending on your location, you may have the following rights:

• —The right to access the personal data we hold about you
• —The right to correct inaccurate or incomplete data
• —The right to erasure (“right to be forgotten”) in certain circumstances
• —The right to restrict or object to certain processing
• —The right to data portability
• —The right to withdraw consent where processing is based on consent
• —The right to lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at hello@henley.media. We will respond within 30 days.

9. International Transfers

Some of our third-party providers, including Google and Vercel, may process data outside your country of residence. Where data is transferred internationally, we ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant data protection authorities.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active clients of material changes via email. The date at the top of this page reflects when the policy was last revised. Continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or to exercise your rights, contact us at: hello@henley.media