Privacy, Cookies & Terms

Last updated: 19 September 2026

This page is provided for transparency and general information. It is not a substitute for independent legal advice. If you rely on this page for compliance purposes, you should have it reviewed by a qualified UK solicitor.

Business information

Sidebar Marketing is the name used on this website by Thomas Lennon, a sole trader established in the United Kingdom, trading as SB Marketing.

Address for correspondence and service of documents: [BUSINESS ADDRESS TO BE ADDED]

Email: tom@sbmarketing.site
Phone: 07305 229589

Information Commissioner's Office registration number: C2014364

We are not currently registered for VAT.

Privacy Policy

Who we are

Sidebar Marketing ("we", "us", "our") is the data controller for the personal information described in this policy. We are a UK-based agency providing Meta (Facebook and Instagram) and Google advertising services to UK businesses. We also build websites, landing pages and client systems, and offer optional hosting for the sites we build.

What personal data we collect and when

We collect personal data in a few different ways:

When you fill in our "Apply to Work With Us" form: we collect your name, company name, the type of business you run and the services you offer, the area you cover, your average job value, your current monthly job capacity, whether you run Meta ads already, your estimated ad budget, your email address, your phone number, and anything you choose to write in the optional message box. You provide this voluntarily when you want to enquire about working with us.
When you fill in our website enquiry form: if you enquire about a website, landing page or client system rather than an ad campaign, we collect your name, company name, what you're looking for, whether you already have a website, what you want the site to achieve, your rough budget, your timeline, how you'd like the site hosted, your email address, your phone number, and anything you choose to write in the optional message box.
When you use the SB Engine client portal: if you become a client, we hold your account details, login credentials, the enquiry records generated by your campaigns, commission and invoicing records, any documents or job photos you upload to the portal, and any messages you send us through it. Lawful basis: performance of a contract.
When you visit our website (with your consent): if you accept cookies, Google Analytics 4 collects anonymised data about how you use our site, including which pages you view, how long you stay, and broadly where in the UK you're visiting from. It does not collect your name, email, or any information that directly identifies you. See the Cookie Policy section below for full details.
When you join our newsletter: you give us your email address in the form at the bottom of any page. Netlify, our website host, receives and stores it on our behalf.

Why we collect it and our lawful basis

To respond to your enquiry and arrange a discovery call. Lawful basis: legitimate interests (you contacted us first to find out more about our services).
To assess whether we can take you on as a client: we review your answers to decide whether you're a good fit for what we offer. Lawful basis: legitimate interests / pre-contractual steps at your request.
To manage an ongoing client relationship: if you become a client, we use your contact details and business information to manage your campaigns and our agreement. Lawful basis: performance of a contract.
To understand how people use our website: if you accept analytics cookies, we use aggregated, anonymised data from Google Analytics to improve the site. Lawful basis: consent (you can withdraw at any time by clearing your cookies or declining on your next visit).
To send you our newsletter: occasional emails about Sidebar Marketing and advertising advice, only if you signed up. Lawful basis: consent. You can unsubscribe at any time by replying to any email or contacting us, and we will stop.
To meet legal or accounting obligations. Lawful basis: legal obligation.

We do not use your enquiry details for unsolicited marketing and we do not sell or rent your personal data to anyone.

Who we share your data with

We keep your data to ourselves as much as possible. The only third parties who may receive it are:

Netlify: our website host, which receives and stores form submissions on our behalf. Netlify processes data in the United States under appropriate safeguards.
Google Analytics: if you accept cookies, anonymised usage data is sent to Google LLC. Google may process this data in the United States. See Google's privacy policy at policies.google.com/privacy.
Meta Platforms, Inc.: if you become a Meta ads client, we access and manage advertising accounts on Meta's platforms (Facebook and Instagram) on your behalf. Meta's own privacy and data policies govern what Meta does with that data.
Google LLC (Google Ads): if you become a Google ads client, we access and manage advertising accounts on Google's platform on your behalf. Google's own privacy and data policies govern what Google does with that data.
Our own outreach tracker: when you submit an enquiry or application form, a copy is sent to our internal lead tracking tool, so we can follow it up promptly. The tool itself is operated by us, for us, not by an outside company, though it runs on Cloudflare Pages, so Cloudflare, Inc. hosts it and handles the request on our behalf.
Supabase: the database and login system behind the SB Engine client portal. If you become a client, your account details, the enquiry records generated by your campaigns, commission records and portal messages are stored there on our behalf.
Our SMS provider: [TOM TO SUPPLY: SMS provider name] delivers the automated text message described under "Enquiries generated through our clients' ad campaigns" below. It receives the recipient's phone number and the contents of that message in order to send it.
Our email delivery provider: [TOM TO SUPPLY: email delivery provider name] sends transactional email, such as client portal notifications and the weekly summary. It processes the recipient address and the contents of that email in order to deliver it.
Other service providers: we may use tools such as email or scheduling software. Any provider we use is only allowed to process your data to deliver their service to us, not for their own purposes.

Enquiries generated through our clients' ad campaigns

Separately from our own website, we run advertising campaigns on behalf of our clients. When a member of the public responds to one of those ads, they may provide their name, contact details and a description of the work they want done.

Who is responsible for that data

Our client is the data controller for those enquiries. They decide what happens to them and they are the business the enquirer will end up dealing with. Sidebar Marketing acts as a processor on our client's behalf, under a written agreement, for the limited purpose of receiving each enquiry, holding it in our client portal, sending the automated acknowledgement described below, and passing it to the client.

What we do with it

We pass the enquiry to our client and record that it happened, so that both sides can see what the campaign produced and calculate any commission due.

On our client's instruction, we also send an automated text message to the enquirer shortly after they get in touch, on that client's behalf. It acknowledges the enquiry and lets them know the business will be in contact. It is a service message about the enquiry the person has just made, not marketing, and it does not promote anything else. Anyone who would rather not receive it can tell us so in a reply, or contact either us or the business directly, and we will stop.

Beyond that, we do not market to enquirers, and we do not sell, rent or share their details with anyone other than the client whose campaign they responded to.

How long we keep it

Enquiry records are held in our client portal for the duration of our agreement with that client and for 6 years afterwards, to meet legal and accounting obligations. A client can ask us to delete an individual enquiry record at any time.

Where the data is collected

Where an enquiry is submitted through a Meta lead form, Meta Platforms, Inc. collects it first, and Meta's own privacy policy applies to that step. Where it is submitted through a landing page we built, it is collected directly.

Tracking on our clients' own websites

Where we run ads for a client, we normally install the Meta pixel, or the equivalent conversion tracking, on that client's own website, so that enquiries and conversions can be attributed to the campaign that produced them. That website belongs to the client: they remain the data controller for it, and they are responsible for the cookie banner and privacy notice on it. None of this applies to sidebarmarketing.site itself, which carries no advertising or tracking pixels at all.

If you made an enquiry and want your data removed, contact the business you enquired with, since they are the controller. You can also contact us at the email address above and we will pass your request straight to them.

Where your data is stored

Our website is hosted by Netlify, whose infrastructure is based in the United States. Form submissions are stored on Netlify's servers, and a copy is also sent to our own outreach tracker, which runs on Cloudflare's infrastructure. Google Analytics data is also processed by Google in the United States. Both companies rely on Standard Contractual Clauses as the legal mechanism for transferring data outside the UK/EEA.

Client portal data, including enquiry records generated by campaigns, is stored in our Supabase database. Transactional email and automated text messages are sent through the providers named above. Where any of those providers processes data outside the UK or EEA, that transfer relies on Standard Contractual Clauses.

The typefaces used on this site are served from our own domain rather than from an outside font service, so no font provider receives your IP address or any other information about you when a page loads.

How long we keep your data

Enquiries that don't lead to a client relationship: we keep your form submission long enough to respond and follow up. If nothing comes of it, we delete it within 6 months.
Newsletter subscribers: we keep your email address until you unsubscribe, then delete it.
Client data: we keep your contact details and relevant business records for the duration of our working relationship and for 6 years afterwards, to meet our legal and accounting obligations.
Analytics data: Google Analytics retains anonymised event data for 14 months by default, after which it is automatically deleted.

Your rights under UK GDPR

You have the right to:

Access: ask what personal data we hold about you and receive a copy
Rectification: ask us to correct inaccurate or incomplete data
Erasure: ask us to delete your data (subject to certain legal exceptions)
Restriction: ask us to limit how we use your data in certain circumstances
Objection: object to processing based on legitimate interests
Portability: receive your data in a portable format where applicable
Withdraw consent: at any time where processing is based on consent (e.g. analytics cookies)

To exercise any of these rights, email us at tom@sbmarketing.site. We'll respond within one month. If you're unhappy with how we've handled your data, you can complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or on 0303 123 1113.

Cookie Policy

What cookies are

Cookies are small text files placed on your device by websites you visit. They're used to remember your preferences or to collect information about how you use a site. UK law (the Privacy and Electronic Communications Regulations, PECR) requires us to get your consent before setting non-essential cookies.

What cookies this site uses

We use two types of cookie:

1. Essential cookie (always active, no consent needed)

Name	Purpose	Expires
`sb_cookie_consent`	Remembers whether you accepted or declined analytics cookies, so we don't ask you every time you visit.	365 days

This cookie is set by us (sidebarmarketing.site) and doesn't track you. It only records your Yes or No preference.

2. Analytics cookies (only if you click "Allow all")

Name	Set by	Purpose	Expires
`_ga`	Google Analytics	Distinguishes unique visitors by assigning a randomly generated ID. No personally identifiable information is stored in this cookie.	400 days
`_ga_97NKLKHRFM`	Google Analytics	Keeps track of the current session state (pages visited, time on site, etc.) for our GA4 property.	400 days

These cookies send anonymised data to Google LLC in the United States. Google Analytics 4 does not store full IP addresses. IP anonymisation is applied automatically by Google and cannot be switched off. The data tells us things like which pages are most visited, how long people spend on the site, and broadly where visitors are coming from. It does not tell us who you are.

What we do NOT use cookies for

We do not run retargeting or advertising cookies on this site
We do not use Facebook Pixel or any Meta tracking on this website. (We do install conversion tracking on our clients' own websites when we run their ads. That is their site and their own cookie notice, not this one.)
We do not use any cookies to serve you personalised ads
We do not share cookie data with third parties for their own marketing

How to manage or withdraw your consent

When you first visit the site, a banner appears at the bottom of the screen. You can click Allow all or Reject all. Your choice is saved for 365 days.

To change your mind at any time, use the Cookie settings link in the footer of any page. That clears your saved answer and brings the banner back, so withdrawing consent is as easy as giving it. Analytics stops loading from your next page view onwards. You can also opt out of Google Analytics tracking across all websites using Google's opt-out browser add-on, or clear cookies in your browser settings.

You can manage or delete all cookies through your browser at any time:

Terms of Use

These Terms of Use govern your use of the sidebarmarketing.site website. They are separate from, and do not form, any contract for advertising or marketing services. If you become a client, that engagement is governed by a separate written agreement discussed and agreed with you individually.

What this site is for

sidebarmarketing.site is a marketing website for Sidebar Marketing, a UK-based agency that runs Meta and Google ad campaigns for UK businesses and builds websites, landing pages and client systems. The content here is for information purposes only. It describes our services, our approach, and how to get in touch.

No guarantee of results

Any figures, example results, or case studies shown on this site are illustrative. They are not a promise or guarantee of any specific number of leads, enquiries, jobs won, or return on ad spend. Advertising performance depends on many factors outside our control, including your market, your pricing, how quickly you follow up with leads, and the advertising platforms themselves.

Applying to work with us

Submitting the "Apply to Work With Us" form does not create a contract between you and Sidebar Marketing. It is an expression of interest only. We review all applications and will contact you if we think there's a good fit. We reserve the right to decline any application without giving a reason.

The SB Engine client portal

The SB Engine is provided to clients as part of an existing services agreement. Access is personal to your business. You are responsible for keeping your login details secure and for anything done under your account. We may suspend access if an agreement ends or if we reasonably believe an account is being misused. Use of the portal is governed by your services agreement, not by these Terms of Use.

Intellectual property

The design, layout, copy, branding, and logo of this website belong to Sidebar Marketing. You may not copy, reproduce, republish, or distribute any part of it without our written permission.

Third-party platforms and services

This site references Meta, Facebook, and Instagram, which are owned by Meta Platforms, Inc., and Google Ads, Google Analytics and Google Search, which are owned by Google LLC. We are an independent agency. We are not affiliated with, endorsed by, or a partner of Meta or Google. Use of their platforms is governed entirely by their own terms and policies. We also reference Netlify, Inc., which is governed by its own terms.

External links

This site may link to third-party websites for reference. We are not responsible for the content, privacy practices, or availability of those sites.

Availability

We aim to keep this website available and accurate, but we cannot guarantee it will be error-free or uninterrupted. We may update, change, or take down content at any time without notice.

Liability

To the extent permitted by law, Sidebar Marketing accepts no liability for any indirect, consequential, or incidental loss arising from your use of, or inability to use, this website.

Changes to these policies

We may update this page from time to time, for example if we add new tools or change how we handle data. The "Last updated" date at the top always reflects the most recent version. Continued use of the site after a change does not constitute acceptance of that change where consent is required. In those cases, we will re-ask.

Governing law

These terms and all policies on this page are governed by the laws of England and Wales. Any disputes will be subject to the exclusive jurisdiction of the courts of England and Wales.

Refund Policy

Ad campaigns

There's a one-off setup fee when you sign up, which depends on the package you choose, and no retainer. If we haven't got you results within your first month, we'll refund the setup fee in full. Beyond that, our commission is only ever charged after a lead we generated has turned into a job, sale or contract for you. For B2B clients on recurring contracts, commission runs monthly for twelve months from the first invoice, as set out in the packages section of our homepage. If you believe a fee was charged by mistake, for example the job didn't actually go ahead, contact us and we'll look into it and refund it if an error was made.

Website and landing page builds

These are custom projects billed as agreed with you before work starts. If you cancel before we've started building, you'll get a full refund. If you cancel partway through, you'll be refunded for any part of the work not yet completed, minus a fair amount for the work already done. Once a site has been fully built, reviewed by you and handed over, it's not refundable, though we'll always fix anything that isn't right first rather than leave you stuck with it.

Hosting

Monthly hosting can be cancelled at any time. You won't be charged again after cancelling, but the current month already paid for isn't refunded. Yearly hosting can also be cancelled at any time, and you'll get a refund for any full months you haven't used yet.

How to request a refund

Email tom@sbmarketing.site with what you'd like refunded and why. We'll come back to you within a few working days, and process anything owed within 14 days of agreeing it.