Privacy Policy

Last Updated: 20th October 2026

Clarity Is Key ("we", "us", and "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website at https://clarityiskey.co.uk (the "Website"), buy our Website Clarity Audit, or subscribe to our communications. We operate in strict compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and the Data Use and Access Act 2025.

1. Important Information and Who We Are

For the purposes of UK data protection law, Roaring Forties Limited (trading as Clarity Is Key) is the Data Controller responsible for your personal data.

If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact our Data Privacy Lead using the details below:

  • Full Name of Legal Entity: Roaring Forties Limited (company number 17218092)
  • Email Address: info@clarityiskey.co.uk
  • Postal Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ

2. The Data We Collect About You

Personal data means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:

  • Identity Data: Includes first name, last name, and the name of your business.
  • Contact Data: Includes email address, telephone number, billing address and the address of the website you ask us to review.
  • Financial Data: Includes details of how you paid us. (Note: We do not store your card numbers on our servers. Any card payment is processed securely by a third-party payment provider.)
  • Transaction Data: Includes details about payments to and from you, and details of the Audit and report you have purchased from us.
  • Technical Data: Includes internet protocol (IP) address, browser type and version, time zone setting and location, operating system, and platform.
  • Usage Data: Includes information about how you use our Website, products, and services.
  • Marketing and Communications Data: Includes your preferences in receiving marketing from us and your communication preferences.

We do not collect any Special Categories of Personal Data about you (such as race, religious beliefs, political opinions, or health data).

3. How Your Personal Data Is Collected

We use different methods to collect data from and about you, including:

  • Direct Interactions: You provide your Identity, Contact, Financial, and Transaction Data by completing our contact form, ordering an Audit, or communicating with us by email. When you submit the contact form, we also record that you ticked the consent box and the time you did so.
  • Automated Technologies: As you interact with our Website, we may automatically collect Technical Data about your equipment and browsing patterns via cookies and pixels (please see our Cookie Policy for details).
  • Third Parties: We receive technical transaction status updates from our payment processors and analytics data from providers like Google Analytics.

4. How We Use Your Personal Data (Lawful Bases)

We only use your personal data when the law allows us to. We use your data for the following core purposes:

  • To respond to your enquiry and deliver your Audit: Reviewing the website you submit, managing payments, fees, and charges, and emailing you a link to download your PDF report.
    Lawful Basis: Performance of a contract with you and Legitimate Interests (to recover debts due to us).
  • To deliver marketing communications: To send you newsletters, promotional offers, or updates via email where you have explicitly opted in (or where a "soft opt-in" applies under PECR rules for existing customers).
    Lawful Basis: Consent or Legitimate Interests (to grow our business and market our products).
  • To manage our relationship with you: Notifying you about changes to our terms, services, or privacy policies.
    Lawful Basis: Performance of a contract with you and Necessary to comply with a legal obligation.

5. Disclosures of Your Personal Data

We share your personal data with trusted external service providers who act as Data Processors to manage transactions and handle outbound marketing securely:

  • Payment Providers: If you pay by card, your payment is handled by a third-party payment provider (such as Stripe) that collects your financial data directly and is governed by its own privacy policy. Where we arrange payment by another method, such as bank transfer, we only receive the payment details needed to match your payment to your order.
  • Email Service Provider: We use a third-party email service provider to manage our subscriber list and send marketing emails, and to send you your download link. Every marketing email we send includes a single-click "Unsubscribe" link in the footer, so you can opt out at any time.

6. International Transfers

If we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by implementing specific UK-approved Standard Contractual Clauses (SCCs) or the International Data Transfer Agreement (IDTA) with our global sub-processors.

7. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. In line with the Data Use and Access Act 2025 framework, we maintain robust data handling logs and structural security measures. We have procedures to deal with any suspected personal data breach and will notify you and the Information Commissioner's Office (ICO) where we are legally required to do so.

8. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements (typically 6 years for transaction and tax logs in the UK).

9. Your Legal Rights

Under UK data protection laws, you have the right to request access to your personal data, request correction of inaccuracies, request erasure ("right to be forgotten"), object to processing (especially direct marketing), request restriction of processing, and request data portability. If you wish to exercise any of these rights, please contact us at info@clarityiskey.co.uk.

10. How to Complain

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).