Privacy Policy

What We Collect

• Contact info (name, email)

• Device info (IP, browser, location)

• Usage data (page visits, clicks)

• Marketing activity

How We Use It

• Run the website

• Improve user experience

• Send marketing (only if opted-in)

• Meet legal obligations

Data Sharing

• Hosting, email, analytics, and marketing tools

• Only under strict contract with privacy rules

GDPR Rights

You can request access, updates, deletion, or withdrawal of consent.

CCPA Rights (California)

You can request deletion, limit sensitive data use, or opt out of data sharing.

Marketing Communications

By submitting a form on our website, Facebook/Instagram (Meta) lead ads, or other opt-in points, you agree to receive marketing communications from CT.Marketing (a trading name of Chaminda Tennakoon Ltd) at the contact details you provide. These communications include:

• Phone calls (including calls placed using automated technology, artificial-intelligence-generated voice, and prerecorded voice)

• Text messages (SMS and MMS, including automated messages)

• Emails (marketing and transactional)

• WhatsApp messages

We use these channels to book strategy calls, send appointment confirmations and reminders, share relevant content, and follow up on your enquiries.

Your consent, your control.

• Text messages: Reply STOP to any message to opt out immediately. Reply HELP for assistance.

• Calls: Ask to be removed during any call, or email [email protected].

• Emails: Click the unsubscribe link at the bottom of any email.

• All channels: Email us at any time to be fully removed from all marketing lists.

Message and data rates may apply. Consent to receive marketing communications is not a condition of purchasing any product or service.

For US recipients: Our calling and messaging practices comply with the Telephone Consumer Protection Act (TCPA), state-level AI-disclosure laws (including California AB 2905, Utah HB 366, and Louisiana Act 187), and the CAN-SPAM Act. When you interact with our AI voice assistant "Sarah," she will identify herself as AI at the start of every call.

For UK/EU recipients: We operate under UK GDPR and PECR. We hold your consent as our legal basis for marketing communications, and you can withdraw consent at any time by contacting us. You also have the right to object, request access, correction, or erasure — see the "GDPR rights" section above.

We do not sell or share your data with third parties for their own marketing purposes.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to run our website, understand how visitors use it, and improve your experience.

Types of cookies we use:

• Essential cookies — required for the website to function (login sessions, security, form submissions)

• Analytics cookies — help us understand how visitors interact with our site (Google Analytics, Meta Pixel)

• Marketing cookies — used to show relevant ads on Meta (Facebook, Instagram) and other platforms based on your interests

• Preference cookies — remember your settings and choices

You can control cookies through your browser settings. Blocking cookies may affect how the website functions. For UK/EU visitors, we display a cookie consent banner on first visit that lets you accept or reject non-essential cookies.

Third-party services we use that may set cookies: Google (Analytics, Ads), Meta (Facebook Pixel), GoHighLevel (our CRM and forms platform), Calendly (booking).

Data Security Practices

We take the security of your personal information seriously and use industry-standard safeguards to protect it.

Measures we take:

• Data is transmitted over encrypted HTTPS/TLS connections

• Access to personal data is restricted to authorised personnel who need it to do their jobs

• Passwords and sensitive credentials are stored in encrypted form

• Our CRM and marketing platforms (GoHighLevel, Meta) meet industry security standards

• We regularly review our security practices and update them as needed

While no online transmission or storage system is 100% secure, we work to protect your information using reasonable technical and organisational measures. If we ever become aware of a data breach affecting your personal data, we will notify you and the relevant authorities as required by UK GDPR (within 72 hours) and any applicable US state laws.

SMS Consent and Data Sharing

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Your phone number and SMS consent are used exclusively by CT.marketing (Chaminda Tennakoon Ltd) to send you the marketing communications, appointment reminders, and follow-up messages you signed up for. We do not sell, rent, or share your phone number or SMS opt-in status with data brokers, advertising networks, affiliate marketers, or any third party for their own marketing purposes.

We may share your phone number only with the following service providers strictly for delivering the messages you consented to:

• Twilio / GoHighLevel — our SMS delivery platform

• Our internal team members responsible for customer communications

These providers are contractually bound to use your information only for the purpose of delivering our messages to you, and cannot use or share it for their own marketing.

Contact

Email: [email protected]

Address: CT.Marketing Ltd, 4th Floor, 5-7 Market Square, Durham, DH1 3NJ, United Kingdom