Privacy policy

This website is run by Daniel Iliev, a sole trader based in the United Kingdom who designs, builds and looks after websites and local marketing for small businesses. For the purposes of UK data protection law I am the controller of the personal information described in this policy.

• Address: 6 Wise Court, Swift Lane, London SE13 5FU
• Email: hello@danieliliev.com
• ICO registration number: ZC290608

I am registered as a data controller with the Information Commissioner’s Office (ICO), the UK’s data protection regulator, and pay the data protection fee. My registration number is ZC290608 and you can check it on the ICO register of fee payers.

I do not have a data protection officer because the law does not require one for a business of my size. Any privacy question can come straight to me at the email above.

You may be reading this because I contacted your business by email to offer my website or local marketing services. Here is what that involves.

Where I got your details

From information your business has made public: your website, your Google Business Profile or Google Maps listing, business directories, Companies House or your business social media pages. Occasionally it comes from someone who recommended you to me.

What I hold

Your name and role (where shown), business name, business email address and phone number, business address, website and social media links, a short note on why I thought my services might help, and a record of any emails between us.

Why, and my lawful basis

I rely on my legitimate interests in telling local businesses about services that could help them. I only contact business addresses, keep my emails relevant to your business and include a simple way to opt out in every email. Under the Privacy and Electronic Communications Regulations (PECR) I send unsolicited marketing emails only to companies and other corporate bodies (such as limited companies and LLPs). I do not send them to sole traders or partnerships unless they have agreed to hear from me.

How to opt out

You have an absolute right to object to direct marketing. Use the opt-out link in my email signature or go to danieliliev.com/opt-out, or simply reply “unsubscribe” to any email or write to hello@danieliliev.com. I will stop straight away and add your email address to my “do not email” list so you are not contacted again. You can also ask me to delete your details altogether.

How long I keep it

If you don’t reply, I delete your details within 12 months of my last email. If you opt out, I keep only your email address, the date and any note you left on my “do not email” list for as long as I run my business, so I never contact you by mistake.

When you book a meeting

The “Book a meeting” buttons open my Google Calendar booking page. When you book, Google collects your name, email address, the time you chose and anything you type in the notes, and passes it to me. Google then sends us both a calendar invite with a Google Meet link.

When you contact me

If you email, phone or message me, I receive your contact details and whatever you tell me about your business and what you need.

When we work together

To deliver a project I hold your name, business name, contact details, billing details, the content you send me (text, photos, logos), records of what we agreed and payment records. If you give me access to accounts such as your hosting, domain, Google Business Profile or social media pages, I use that access only to do the work you asked for.

When you use the opt-out page

If you use the opt-out page, I receive the email address you enter, the date and time, and any note you choose to add. A copy is sent to my own email inbox straight away so I can make sure you are not contacted again. Nothing else is collected and no cookies are set.

When you visit this website

Like every website, the servers that deliver these pages briefly process technical information such as your IP address, browser type and the pages requested. My hosting provider uses this to deliver the site and protect it from abuse. I do not use analytics, advertising pixels or any other tracking on this site, and fonts are served from this website rather than from a third party.

I do not ask for, and do not want, any special category information (such as health, religion or ethnicity) and I do not collect information about criminal convictions.

UK GDPR says I must have a lawful basis for each thing I do with your information:

Where I rely on legitimate interests I have weighed them against your rights and only use the minimum information needed. I never sell your information and I do not make decisions about you using automated decision-making or profiling.

I only share personal information with people who help me run my business:

• Google — calendar booking, Google Meet video calls and email (Google’s privacy policy).
• My website hosting and database provider — to serve this website and the websites I host for clients, and to store my “do not email” list.
• Payment, banking and accounting providers — to send invoices and take payments.
• My accountant and HMRC — for tax and legal reasons.
• Professional advisers, insurers, the police or courts — only if the law requires it or to protect my legal rights.

These providers act on my instructions or under their own privacy policies and must keep your information secure.

Some of my providers, including Google, may store or process information outside the UK, for example in the European Economic Area or the United States. When that happens the transfer is protected by UK “adequacy” regulations (including the UK Extension to the EU-US Data Privacy Framework) or by approved contract clauses such as the UK International Data Transfer Agreement or Addendum.

• Enquiries and meeting bookings that don’t lead to work: up to 12 months, then deleted.
• Businesses I’ve emailed that don’t reply: deleted within 12 months of my last email.
• Client records (contracts, invoices, project files): for the length of our work together and then six years from the end of the tax year they relate to, as HMRC requires.
• Access to your accounts: removed or handed back when our work ends.
• Marketing preferences: until you unsubscribe. After that I keep only your email address, the date and any note you left on my “do not email” list, so I don’t contact you again.

Under UK data protection law you have the right to:

• ask for a copy of the information I hold about you;
• ask me to correct anything that is wrong or incomplete;
• ask me to delete your information;
• ask me to restrict how I use it;
• object to my use of it, including any direct marketing (you can always stop that);
• ask for your information in a portable format;
• withdraw your consent at any time where I rely on consent.

Some rights only apply in certain situations. To use any of them, email hello@danieliliev.com. It’s free, and I’ll reply within one month (I’ll tell you if a complex request needs longer). I may need to check your identity first.

If you’re unhappy with how I’ve handled your information, please tell me first at hello@danieliliev.com. I’ll acknowledge your complaint within 30 days, look into it properly and let you know the outcome without undue delay.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator: ico.org.uk/make-a-complaint or 0303 123 1113.

When I build or run things for a client — such as their website contact form, review requests to their customers, or their Google Business Profile and social media — I act as a processor on their behalf, under a written agreement. If you are a customer of one of my clients, their own privacy policy explains how your information is used, and you should contact them first about your rights.

I protect information with strong unique passwords, two-factor authentication, encrypted devices and by limiting access to what each task needs. This website is served over HTTPS.

This website and my services are aimed at businesses, not at children under 18.

This site links to other websites, including my Google Calendar booking page and sites I have built for clients. Once you leave this site, their own privacy policies apply.

I’ll update this page if the way I use personal information changes, and change the date at the top. This version was last updated on 4 November 2026. Booking link used on this site: Google Calendar.