Privacy policy

This policy explains what personal information Foxy Friar collects, why, who it is shared with, how long it is kept and the rights you have. It is written to be read, so if anything is unclear, email me and I will explain.

Who we are

Foxy Friar is a marketing business run by Craig Ennis, a sole trader based in Waterford, Ireland. Craig Ennis, trading as Foxy Friar, is the data controller for the information described here.

For anything to do with your information, email craig@foxyfriar.com.

What we collect

When you get in touch

Through the contact form: your name, email address, phone number, business name, what you want help with, your timeline, your message and which page you contacted us from. If you email, phone or message us, we keep what you send.

When you order an audit

• The Start form: your name, email address, mobile number, business name, country and which audit you chose.
• Payment: handled by Stripe. You pay on Stripe’s own page, not on this website. We see that you paid, how much and any discount code used. We never see your full card details.
• The questionnaire: your answers about your business, your customers, your goals and your marketing, plus any files you upload, such as your logo, photos or figures you download from your accounts.
• Account access (Growth Audit): if you give us view-only access to accounts such as Google Analytics, Search Console or your ad accounts, we can see the figures in them for the audit. We never ask for passwords. We remove our access when your report is delivered.
• The test enquiry (Growth Audit, only if you agree): we send an enquiry through your website and ring your business number to see how quickly a new customer hears back.

When you use this website

Basic technical information needed to run the site securely, such as your IP address, kept in server logs. If you agree to it in the cookie banner, we also collect information about how you use the site through analytics and advertising tools. The cookie policy explains these.

When you become a client

The details needed to do the work, send quotes and invoices and keep records, including the access you give us to your accounts.

Before work starts we send you a getting-started form for the service you have bought. It asks about your business, what you need and how you want it to look. You can also upload files such as your logo, photos, wording and artwork. The link is private to you and your answers save as you go. We never ask for passwords in it: where we need access to an account, we send you the steps to add us. You can remove us at any time.

Your private page

Each client gets a private page on this website, at a link only they are sent. It shows what we need from you, your quote, where your project stands and our messages. When you accept a quote there, we record the name you type, the date and time, and your internet (IP) address, as the record that you accepted. Files you send through the page are kept in the same private folder as questionnaire uploads. If you save the page to your phone and turn on notifications, we keep the address your phone’s notification service gives us, so we can tell you when something is ready. Turning notifications off, or removing the app, ends this.

Your website and your ads

If we look after your website, a small helper on it sends us your site’s software version numbers and whether updates are waiting. It sends nothing about your visitors. If we run your ads, we read your ad accounts’ figures, such as spend and results, using the access you give us.

Why we use it, and our legal basis

• To reply to you and discuss your enquiry: our legitimate interest in answering people who contact us.
• To deliver an audit or a service you have bought: to perform our contract with you.
• To send reminders about an order you started or a questionnaire you have not finished: our legitimate interest in completing what you asked for. They come by email, two at most for each order, and then they stop.
• To send occasional tips and offers: only with your consent, which you can withdraw at any time.
• To use your feedback or testimonial: only with your permission, as agreed when you give it.
• To keep invoices and payment records: to meet our legal obligations under Irish tax law.
• Analytics and advertising cookies: only with your consent, given in the cookie banner.

How your audit is prepared

Audits use automated checks and tools, including AI tools, to gather public information about your business and your competitors and to draft parts of your report. Craig reviews every report, adds his own recommendations and approves it before it is sent. No decision with legal or similarly significant effects is made about you by automated means alone.

Who we share it with

We never sell your information and we never publish your audit answers or report. We share information only with the services that help us run the business, and only as much as each one needs:

• Stripe: card payments.
• Firecrawl: reads the public pages of your website for your audit. It receives your website’s address, nothing about you.
• Zoho Invoice: invoices and payment records. It receives your name, business name and email address.
• Hostinger: hosting for this website and the files stored on it.
• AI tools: help analyse findings and draft parts of your report.
• Google services: business listing, search and website speed information used in audits, and Google Analytics if you accept analytics cookies.
• Meta and other advertising platforms: only if you accept marketing cookies, and to run ads for clients who ask us to.
• Google Workspace: our email, and a private backup copy of the files you send us.
• Your phone’s notification service (Google or Apple): only if you turn on notifications, to deliver them. Each notification is encrypted, so they cannot read it.
• Professional advisers such as an accountant, and authorities where the law requires it.

Some of these providers are based outside the European Economic Area, mainly in the United States. Where that happens, your information is protected by the EU-US Data Privacy Framework or by the European Commission’s standard contractual clauses.

How long we keep it

• Audit questionnaire answers and uploaded files: deleted 90 days after your report is delivered. If you pay but never send the questionnaire, including if you are refunded, they are deleted 12 months after you paid.
• Getting-started form answers and uploaded files: deleted 12 months after your project is finished, so we can support and update your work in the meantime.
• Getting-started forms that are started but never sent: deleted after 90 days.
• Audit orders that were started but never paid for: deleted after 90 days.
• Waiting list sign-ups for an audit that is paused: deleted 12 months after you join, or sooner if you ask.
• Enquiries from people who do not become clients: deleted after 2 years.
• Your audit report and contact details: kept while you are a lead or a client, so we can follow up and honour your credit.
• Client work: kept for the length of our work together, then for 6 years.
• Files you send through your private page: deleted 90 days after your project goes live or closes, whichever comes first, unless you ask us to keep them longer. Please keep your own copies. A note of what you sent, such as file names, stays with your client work.
• A record of a quote you accepted: kept with your client work, for 6 years.
• Notification sign-ups: deleted as soon as your phone stops accepting them, or 90 days after you stop being a client.
• Invoices and payment records: kept for 6 years, as Irish tax law requires.
• Backup copies of files you send: taken once a week. When a file is deleted under the times above, its backup copy is deleted within 10 weeks.

Your rights

You have the right to:

• ask for a copy of the information we hold about you;
• ask us to correct anything that is wrong;
• ask us to delete your information, where we do not need to keep it by law;
• ask us to limit how we use it, or object to how we use it;
• ask for your information in a form you can take elsewhere;
• withdraw your consent at any time, for example to marketing emails or cookies.

Email craig@foxyfriar.com and we will reply within one month. If you are not happy with how we handle your information, you can complain to the Data Protection Commission at dataprotection.ie.

Keeping it safe

This website is served securely. Files you send us, with your questionnaire or through your private page, are stored in a private folder that is not reachable from the web, with a weekly private backup in our Google Workspace account. Only Craig can open them. Access to your accounts is view-only wherever the platform allows it and is removed when your report is delivered.

Children

Our services are for businesses. We do not knowingly collect information from anyone under 18.

Changes to this policy

If we change how we use your information, we will update this page and the date at the top. If a change affects you directly, we will tell you.