Privacy policy
What personal information we collect, why we use it, who we share it with and the rights you have.
Who we are
MediaExpansion is a trading name of Toby Scarfe, a sole trader based in the United Kingdom. In this policy, “we”, “us” and “our” mean Toby Scarfe. We are the controller of the personal information described here, which means we decide how and why it is used.
Contact: hello@mediaexpansion.co.uk
This policy covers this website and the MediaExpansion growth diagnostic application at media-expansion-revenue-diagnostic.replit.app.
The growth diagnostic
The diagnostic is an application form for businesses that want us to assess their social media and customer acquisition. When you complete it, we collect the details you enter, which may include your name, email address, business name, website and social media profiles, and your answers about your business, audience, marketing, goals and budget.
We use this information to:
- review your business and prepare our assessment and recommendations
- contact you about your diagnostic and, if you’re interested, about working together
- keep a record of applications so we can respond consistently
You don’t have to complete the diagnostic, but we can’t assess your business without the information it asks for. Please don’t include sensitive information, such as health details, or information about other people that you don’t have permission to share. We won’t add you to a marketing mailing list without asking first.
What we collect and why
| Situation | Information | Why we use it | Lawful basis |
|---|---|---|---|
| You complete the growth diagnostic | Name, email, business name and website, social profiles, and your answers about your business, goals and budget | To review your business, reply to you and recommend next steps | Steps taken at your request before a contract; legitimate interests in responding to enquiries |
| You email or message us | Your contact details and whatever you choose to tell us | To reply and keep a record of our conversation | Legitimate interests |
| You become a client | Contact and billing details, project information, access to accounts you share with us | To deliver the agreed services, invoice and keep records | Contract; legal obligation (tax and accounting records) |
| We contact you as a business prospect | Your name, role, business and professional contact details from public sources such as LinkedIn or your website | To introduce services relevant to your business | Legitimate interests. You can ask us to stop at any time and we will. |
| You visit this website | Technical data such as IP address, browser and pages requested | To deliver the site securely and prevent abuse | Legitimate interests |
| You accept optional cookies | How you use the site, and (if enabled) data shared with Meta to measure our advertising | To understand which pages and ads work | Consent, which you can withdraw at any time |
We don’t sell personal information, and we don’t make decisions about you using automated processing that has legal or similarly significant effects.
Who we share it with
We only share what each provider needs to do its job, under contracts that protect your information:
- Vercel Inc., which hosts this website
- Replit, Inc., which hosts the diagnostic application
- Zoho Corporation, which provides our email
- Our calendar, document and video call providers
- Analytics and advertising platforms (such as Vercel Web Analytics and Meta), only if you accept optional cookies
- Our accountant, bank and HMRC, for financial and tax records
- Professional advisers or authorities where the law requires it
International transfers
Some of these providers process information outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Addendum.
How long we keep it
- Diagnostic applications and enquiries that don’t lead to work: up to 12 months
- Client and financial records: six years after the end of the tax year they relate to
- Prospecting records: until you ask us to stop, or 24 months without a response
- Analytics data: as set out in our cookie policy
Your rights
You have the right to:
- ask for a copy of your personal information
- ask us to correct or complete it
- ask us to delete it
- ask us to restrict how we use it
- object to how we use it, including an absolute right to object to direct marketing
- ask for information you gave us to be transferred to you or another organisation
- withdraw consent where we rely on it, without affecting earlier use
To use any of these rights, email hello@mediaexpansion.co.uk. We will respond within one month.
Complaints
If you’re unhappy with how we’ve handled your information, please tell us first and we’ll try to put it right. We’ll acknowledge your complaint within 30 days. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Security
We use reputable providers, two-factor authentication on our accounts and limited access to client information. No system is perfectly secure; if a breach affecting you occurs, we will tell you and the ICO where the law requires it.
Children
Our services are for businesses. This site isn’t aimed at anyone under 18.
Changes to this policy
We’ll update this page when our practices change. The date at the top shows the latest version.