1. Who We Are SMP MANAGEMENT LTD (trading as SMP MAN) is a digital marketing agency based in the UK. We provide services such as digital advertising, social media marketing, content creation, branding, and strategy development. Our commitment is to respect and protect your privacy under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect We collect the following personal data when you: Type of Data What We Collect Identity Data Name, business name, title, job role Contact Data Email address, phone number, postal address Technical Data IP address, browser type/version, device identifiers Usage Data Pages visited, time spent, referral sources Marketing Preferences Opt-in/opt-out information for communications Transactional Data Invoices, billing info, service history Communication Data Enquiries, support requests, or feedback

3. How We Use Your Data We process your data to: Deliver our services to you Respond to enquiries or requests Invoice and receive payments Improve website functionality and UX Send marketing (only if you’ve opted in) Comply with legal or regulatory obligations We do not sell your personal data to third parties. 4. Lawful Bases for Processing Under UK GDPR, we rely on the following lawful grounds: Consent – For sending newsletters or marketing emails Contract – To fulfil agreements or service obligations Legal Obligation – Where required by UK law Legitimate Interests – To run our business efficiently, unless overridden by your rights

5. Sharing Your Data We may share your data with: Cloud service providers (e.g. Google Workspace, analytics tools) Payment processors (e.g. Stripe, GoCardless) Our subcontractors (on a need-to-know basis) Legal authorities, where required by law All third-party processors are required to comply with data protection laws.

6. International Transfers Some tools we use may process data outside the UK. Where applicable, we ensure that appropriate safeguards (e.g. UK Addendum to Standard Contractual Clauses) are in place.

7. Cookies Our website uses cookies to: Analyse visitor behaviour (e.g. via Google Analytics) Enable core site functionality Remember user preferences You can adjust cookie settings through your browser or our website’s cookie banner.

8. Data Retention We retain personal data only as long as necessary for the purposes outlined or to comply with legal obligations (e.g. tax requirements = 6 years for invoicing records).

9. Your Rights Under UK GDPR, you have the right to: Access your data Request correction or deletion Restrict or object to processing Withdraw consent at any time Lodge a complaint with the ICO (Information Commissioner’s Office)