Privacy Policy

1. Who we are

This website (one-man.marketing) is operated by Kirill Pavlov, trading as "Agency of One" ("we", "I", "us"). For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, we are the data controller for personal data processed through this site.

Registered entity, address and jurisdiction: [legal entity / address / country — to be completed]

Contact for any privacy matter: hello@one-man.marketing

2. What personal data we collect

Data you give us

• Contact & enquiry data — your name, company, email and anything you write when you email us or complete the project brief (site link, goals, budget range, timeline, notes).
• Client data — if we work together, information needed to deliver the service, governed by a separate written agreement.

Data collected automatically

• Server & security logs — our hosting provider records technical data such as IP address, browser type, pages requested and timestamps to keep the site running and secure.
• Local storage — we store your language choice and cookie-consent choice in your browser. See the Cookie Policy.
• We do not run advertising or analytics tracking by default. Any optional analytics load only after you accept them.

3. How we use your data

• To respond to your enquiry and prepare for a strategy call.
• To provide, manage and improve services you engage us for.
• To keep the website secure, available and working correctly.
• To meet legal, accounting and tax obligations.

We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects.

4. Legal bases for processing

Under Article 6 GDPR we rely on:

• Consent — for optional cookies/analytics; you can withdraw it at any time.
• Legitimate interests — to respond to enquiries, secure the site and run our business, balanced against your rights.
• Contract — to take steps at your request and to deliver services you engage us for.
• Legal obligation — where the law requires us to keep or disclose data.

5. Who we share data with

We share personal data only with service providers (processors) who help us run the site and business, under appropriate agreements:

We may also disclose data if required by law, or to protect our rights and safety. [Confirm your actual processors and add any analytics/booking tools you enable.]

6. International transfers

Some providers may process data outside your country, including outside the EEA. Where that happens, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

7. How long we keep data

We keep enquiry data only as long as needed to respond and, if relevant, to start working together — and no longer than 24 months after our last contact unless a client relationship or a legal obligation requires longer. Server logs are kept for a short period by the host for security.

8. Your rights

Subject to the GDPR, you have the right to:

• access a copy of your data;
• have inaccurate data corrected;
• have your data erased ("right to be forgotten");
• restrict or object to processing;
• data portability;
• withdraw consent at any time;
• lodge a complaint with your data protection authority.

To exercise any right, email hello@one-man.marketing. We respond within one month.

9. Security

The site is served over HTTPS. We use reasonable technical and organisational measures to protect personal data. No method of transmission or storage is 100% secure, but we work to protect your information and review our practices regularly.

10. Changes & contact

We may update this policy from time to time; the "last updated" date shows the current version. For any question about this policy or your data, contact hello@one-man.marketing.