Who we are
Second Impression helps UK small businesses improve how they appear online, with website design and upkeep, Google Business Profile management, and help with reviews and reputation.
Second Impression is the trading name of Second Impression LTD, a limited company. For the personal information described in this policy, Second Impression LTD is the controller. That means we decide how and why it is used, and we are responsible for looking after it.
Second Impression LTD is registered in Scotland with company number SC899642. Our registered office is 2 Fogo Smithy Cottage, Duns, Berwickshire, TD11 3RE, United Kingdom.
You can contact us about anything in this policy at hello@secondimpression.co.uk, or by post at our registered office.
What this policy covers
This policy explains how we handle personal information when you visit secondimpression.co.uk, send us an enquiry or ask us to call you through the website, or email us. It does not cover other websites we link to, such as Google Maps.
Information we collect
When you send an enquiry
Our enquiry form asks for:
- your business name and town;
- your website or Google listing address, if you give it (optional);
- your name;
- your email address;
- which service you are interested in, if you choose one; and
- anything you tell us about what isn’t working for you (optional).
The form also contains a hidden field that people never see. It exists only to help filter out automated spam.
When you ask us to call you
Our call request form asks for:
- your name;
- your phone number;
- the day and time you’d like us to call; and
- anything you’d like us to know before we call (optional).
Like the enquiry form, it also has a hidden field that only helps filter out automated spam.
When you email us
If you email us directly, we receive your email address, your name if it is included, and whatever you choose to write.
When you visit the website
Like any website, ours cannot be delivered without some technical information. When you visit, our hosting provider, Cloudflare, processes your IP address and details of the request, such as the page requested and your browser type, to deliver the page and protect the site from abuse. Our hosting set-up also keeps technical request logs, which we use to keep the site working.
We do not use analytics, advertising or tracking tools, and we do not build profiles about visitors. Our fonts are stored on our own site, so loading a page does not send your details to a font provider.
When we prepare your free audit
If you ask for an audit, we review publicly available information about your business online, such as your website, your Google Business Profile and how your business appears in local search results.
How we use it, and our lawful basis
We use your information to:
- reply to your enquiry and answer your questions;
- call you on the day and at the time you asked for;
- carry out the preliminary audit you asked for and send you a proposal; and
- keep the website running securely.
Under UK data protection law we need a lawful basis for each use. When you ask us for an audit, a proposal or a call, we use your information to take steps at your request before you decide whether to work with us. Replying to general enquiries and keeping the website secure are in our legitimate interests, and we only use the information that is needed for those purposes.
International transfers
Our service providers may process your information outside the UK, including in the United States. Where they do, they rely on safeguards recognised under UK data protection law:
- Cloudflare relies on its certification under the UK Extension to the EU–US Data Privacy Framework, with standard contractual clauses and the UK International Data Transfer Addendum in its data processing terms as an additional safeguard.
- Google relies on standard contractual clauses, together with the UK International Data Transfer Addendum, in its data processing terms for Google Workspace.
- Formspree uses infrastructure in the United States. Its privacy policy states that it transfers personal information only where permitted by law and takes steps to keep it appropriately protected.
How long we keep it
We keep personal information only for as long as we need it:
- Enquiries, call requests and related emails: if you do not go on to work with us, we delete them within 12 months of our last contact with you.
- If you become a client: we keep your correspondence for as long as we work together, and afterwards for as long as we need it for legal, accounting or tax purposes, usually up to six years.
- Our Formspree account: copies of form submissions are kept there for up to 30 days.
- Hosting logs: technical request logs are kept for up to 7 days.
You can ask us to delete your information sooner; see “Your rights” below.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- ask us to restrict how we use your information;
- object to how we use your information where we rely on legitimate interests; and
- ask for information you gave us to be transferred to you or another organisation, where this applies.
To use any of these rights, email hello@secondimpression.co.uk. Some rights only apply in certain circumstances. We will respond within one month, as the law requires.
If you are unhappy with how we have handled your information, please tell us so we can try to put it right. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint (opens in a new tab).
Keeping it secure
The website is served over an encrypted connection (HTTPS), and enquiries and call requests are sent from your browser to Formspree over an encrypted connection. They are then held in our Formspree and Google Workspace accounts, which are protected by the security measures those providers apply.
Changes to this policy
We will update this policy if the way we handle personal information changes. The date at the top of the page shows when it was last updated.