Privacy policy.
On this page (9 sections)
Last updated: September 2026. Written for the UK GDPR as amended by the Data (Use and Access) Act 2025.
1. Who I am
This notice explains how I, Martial Chaput, trading as MARS, collect and use your personal data when you visit marswebsites.co.uk, get in touch, book a workshop or work with me.
I’m the data controller for your personal data, which means I decide how it’s used and I’m responsible for looking after it.
| Trading name | MARS |
| Legal entity | Martial Chaput, sole trader |
| Website | marswebsites.co.uk |
| hello@marswebsites.co.uk | |
| Phone | 07307 687790 |
| Address | 78 The Beacon, Eastbourne BN21 3NW |
This notice covers website visitors, people who contact me, workshop attendees, prospective clients and clients.
2. The data I collect, and why
| What | Examples | Why I use it | Lawful basis |
|---|---|---|---|
| Enquiries | Your name, email, phone, business name, website address and message, sent through my contact or audit forms, by email, by phone or on social media | To reply, prepare your audit or proposal, and keep a record of our conversation | Legitimate interests: answering the people who contact me |
| Client data | Names, contact details, business details, account access you share with me, and records of the work I do | To deliver the services we’ve agreed and keep proper business records | Contract, and legal obligation for accounting records |
| Workshop bookings | Your name, email and the answers you give when booking (such as your website address and email platform) | To run the session and tailor it to the people attending | Contract |
| Mailing list | Your name and email address, if you join my list | To send occasional marketing emails | Consent, which you can withdraw at any time using the link in every email |
| Appointments | Your name, email and meeting details, if you book a call through a scheduling link | To arrange and hold the call | Contract, or steps before entering one |
| Website visits | Anonymous, aggregated statistics such as pages viewed and the type of device used, plus the technical data every website needs to deliver pages securely, such as IP addresses in short-term security logs | To keep the website secure and understand which pages are useful | Legitimate interests: running a secure, useful website |
3. Cookies and website statistics
This website uses privacy-friendly statistics that work without cookies and without identifying you, so there’s nothing to accept or decline when you arrive. Any cookies that are strictly necessary for the site to work securely are listed in my cookie policy.
4. Who I share data with
I keep your personal data private and share it only with the trusted services below, each of which handles it on my behalf and under a written agreement.
| Service | What it does for me | Where it’s based |
|---|---|---|
| Cloudflare | Website hosting, security and anonymous website statistics | United States, with servers worldwide |
| Resend | Delivers the messages you send through my website forms to my inbox | United States |
| Google Workspace | My business email | United States, with servers worldwide |
| Eventbrite | Workshop bookings and payments. Eventbrite also acts as a controller for your Eventbrite account, under its own privacy policy | United States |
| Mailchimp | My mailing list, if you join it | United States |
| Calendly | Appointment booking, where I send you a scheduling link | United States |
I also share information with my accountant and professional advisers where needed, and with authorities where the law requires it.
5. International transfers
Some of the services above are based outside the UK. Where your data travels abroad, it’s protected by a UK adequacy decision (including the UK Extension to the EU-US Data Privacy Framework, the “UK-US data bridge”, for certified US companies) or by the UK International Data Transfer Addendum to standard contractual clauses.
6. How long I keep your data
| Data | How long |
|---|---|
| Client records | Six years from the end of our work together, for tax and legal purposes |
| Enquiries that don’t lead to work | Twelve months from our last contact |
| Workshop bookings | Twelve months after the session |
| Mailing list | Until you unsubscribe or ask me to delete it |
| Appointment details | Twelve months from the appointment |
| Website security logs | A few days, as set by Cloudflare |
7. Your rights
You have the right to:
- see the personal data I hold about you (a subject access request)
- have inaccurate data corrected
- have your data deleted, in certain circumstances
- restrict or object to how I use your data, including objecting to marketing at any time
- receive your data in a portable format, where I use it based on consent or a contract
- withdraw your consent at any time, where I rely on consent
To use any of these rights, email hello@marswebsites.co.uk. I’ll reply within one month. For complex requests I may extend that by up to two further months, and I’ll tell you within the first month if so. If I need more information to find your data, I’ll ask, and the timescale starts once I have it. My searches will be reasonable and proportionate, as the law allows.
Every decision about you is made by me personally. I use no automated decision-making or profiling that affects you.
8. How to make a complaint
If you’re unhappy with how I’ve handled your personal data, please tell me first so I can put it right. Email hello@marswebsites.co.uk with the subject “Data protection complaint”, or write to MARS, 78 The Beacon, Eastbourne BN21 3NW. I’ll acknowledge your complaint within 30 days, look into it properly, and let you know the outcome without undue delay. The full process is in my data protection complaints policy.
You can also contact the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113. If you live in the EU, you can contact your local data protection authority.
9. Changes to this notice
I review this notice whenever my services or tools change. The date at the top shows when it was last updated.