Infrastructure, granted.

Privacy Policy

Grantops Consulting Ltd — Last Updated: July 2026

1. Who We Are

Grantops Consulting Ltd (company number SC834128) is a web development and cloud infrastructure company registered in Scotland. Our registered office is at Clyde Offices, 48 West George Street, Glasgow, G2 1BP.

For any privacy-related queries, contact us at [email protected] or call 07459 934592.

2. What Data We Collect

We collect personal data only when you voluntarily provide it through our website. This includes:

  • Contact form submissions: Your name, email address, subject, and message content when you use our contact form.
  • Project brief submissions: Your name, email address, business name, and project details when you submit a project brief via our Start Project page.
  • Checkout and intake details: Your selected package, Stripe checkout session reference, contact details, business name, and project notes when you reserve a build slot and submit the post-payment intake form. If you enter your email on the checkout page before continuing to payment, we keep it so we can follow up if you don't complete. Payment card details are handled by Stripe and are not stored by us.
  • Free mockup requests: Your name, business name, email, an optional phone/WhatsApp number, and any link to your current website or social media page, when you ask for a free mockup.
  • Analytics and advertising measurement data: Browsing data collected via Google Analytics (through Google Tag Manager), Microsoft Clarity and Meta Pixel, including pages visited, time on site, referral source, device type, approximate location (city-level), ad interactions and — for Clarity — anonymised session recordings and heatmaps. These tools only run if you accept analytics and marketing cookies in our consent banner.
  • Cookie preferences: Your cookie consent choice, stored locally on your device.

3. How We Use Your Data

We use the data we collect for the following purposes:

  • To respond to enquiries and paid reservations: When you submit a contact form, project brief, checkout deposit, or intake form, we use your details to reply and discuss your project.
  • To improve our website and advertising: Analytics and advertising measurement data helps us understand how visitors use our site, measure campaign performance and improve content.
  • To provide services: If you become a client, we retain your contact details to manage the ongoing relationship and deliver our services.
  • To follow up on your enquiry (only if you contact us first): If you request a free mockup or enquire about our services, we may follow up by email, phone or WhatsApp about that enquiry and our website services. You can opt out at any time — just reply "stop" or tell us — and every marketing email includes an unsubscribe link.

We do not sell or rent your personal data. We share limited data only with the service providers and advertising partners listed in section 5 — for example, pseudonymised (irreversibly hashed) ad-measurement data with Meta — strictly to run and measure our website and advertising, and never with unrelated third parties for their own marketing.

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your data on the following legal bases:

  • Consent: For analytics cookies, advertising measurement cookies and marketing communications (where applicable).
  • Legitimate interest: For responding to contact form enquiries and improving our website.
  • Contract: For processing data necessary to deliver services you have purchased.

5. Third-Party Services

We use the following third-party services that may process your data:

  • Google Analytics (via Google Tag Manager): Web analytics service provided by Google LLC. Data is processed in accordance with Google's Privacy Policy. We have IP anonymisation enabled. Only loaded after you accept analytics cookies.
  • Microsoft Clarity: Behavioural analytics service provided by Microsoft Corporation. Captures anonymised session recordings and heatmaps to help us understand how visitors interact with the site. Data is processed in accordance with the Microsoft Privacy Statement. Only loaded after you accept analytics cookies.
  • Meta Pixel and Conversions API: Advertising measurement services provided by Meta Platforms Ireland Limited. The Meta Pixel runs in your browser to measure visits and enquiries from Facebook and Instagram ads. In addition, when you complete a purchase, our server may send a matching conversion event to Meta directly (the Conversions API) so that measurement is accurate even if your browser blocks the pixel. Where such an event includes contact details like your email address, they are irreversibly hashed (pseudonymised) before being sent, and Meta uses them to match the event to an ad interaction and for its own advertising-measurement purposes as described in its policy. Both the browser pixel and any server-side event run only if you accept analytics and marketing cookies — we send nothing for visitors who decline. For these purposes Meta acts as an independent controller; data is processed in accordance with Meta's Privacy Policy.
  • Google Fonts: Font delivery service provided by Google LLC. When you visit our site, your browser requests font files from Google's servers, which may log your IP address.
  • Cloudflare: CDN and security service that processes request data (IP addresses, headers) to deliver and protect our website.
  • Amazon Web Services (AWS): Our hosting infrastructure provider. Contact form submissions are processed via AWS Lambda.

Some of these providers process data outside the UK. Where they do, transfers are protected by UK "adequacy" regulations or by the ICO's International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses).

6. Data Retention

We retain your data for the following periods:

  • Contact form data: Retained for as long as necessary to respond to your enquiry and for up to 2 years thereafter for business records.
  • Client data: Retained for the duration of our business relationship and for 6 years after the end of the contract (in line with HMRC requirements).
  • Analytics and advertising measurement data: Google Analytics data is retained for 14 months. Microsoft Clarity data is retained for 13 months. Meta Pixel event data is retained according to Meta's own retention settings and policies.
  • Cookie consent: Your preference is stored for 1 year.

7. Your Rights

Under the UK GDPR, you have the following rights:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can ask us to correct inaccurate data.
  • Right to erasure: You can ask us to delete your personal data (subject to legal obligations).
  • Right to restrict processing: You can ask us to limit how we use your data.
  • Right to data portability: You can request your data in a structured, machine-readable format.
  • Right to object: You can object to processing based on legitimate interest.

To exercise any of these rights, contact us at [email protected] or call 07459 934592. We will respond within 30 days.

8. Cookies

For detailed information about the cookies we use, please see our Cookie Policy.

9. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

10. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):