Privacy Policy

1. Who is responsible

socialX, a growX company, is the controller of the personal data described here. You can reach us at hi@socialx.studio about anything on this page, including a request to see, correct or delete your data. Registered entity details are available on request.

2. What we collect, and why

When you browse the site

Pages are served with the usual request data: IP address, browser and device type, the page you asked for and the page you came from. Our host needs this to serve the site and to stop abuse. Analytics beyond that only run if you accept analytics cookies, which are off until you do. See section 5.

When you give us your email

The newsletter field, the waitlist and the exit prompt all collect one thing: an email address, plus a note of which form it came from. We use it to send what you asked for and, where you have not opted out, occasional emails about socialX. Every email has an unsubscribe link.

When you book a call

The scheduler collects your name, email, and whatever else you type into the booking form, along with the time you picked. We use it to hold the call and to follow up on it.

When you buy a plan

Checkout collects your name, email, billing details and company details. Card details go directly to our payment processor and never reach our servers. We keep the record of what you bought and what you paid, because we are required to.

When we deliver the service

To produce your posts we hold your brand assets, your intake form answers and the content we make for you. To schedule them we hold restricted content manager access to the HighLevel sub-account where your own social profiles are connected. We use that access to publish and schedule, and for nothing else. We do not request access to the sub-accounts you run for your clients, and if you grant it anyway we will ask you to remove it.

3. The legal basis

• To perform our contract with you: everything needed to deliver a plan you bought.
• Your consent: analytics and advertising cookies, and marketing email where consent is required. You can withdraw it at any time.
• Our legitimate interests: keeping the site up and secure, and replying when you contact us.
• Legal obligation: keeping billing and tax records.

4. Who else sees it

We do not sell personal data and we do not share it for anyone else's marketing. We use the following categories of processor to run the business, and they only act on our instructions.

Some of these operate outside your country, including in the United States. Where data leaves the UK or the European Economic Area we rely on the transfer safeguards those processors have in place. We will name the specific processors on request.

We will also disclose data where the law requires it, and to a buyer if the business is sold, in which case this policy continues to apply until you are told otherwise.

5. Cookies and tracking

The site sets a small number of cookies and similar storage, in two groups.

• Necessary. Needed for the site to work, including remembering your theme choice and your answer to the cookie banner. These are always on and do not track you across sites.
• Analytics and advertising. Loaded through Google Tag Manager to tell us how the site is found and used. These are off by default. Nothing in this group loads until you press Accept on the banner, and consent mode keeps storage denied until then.

You can change your mind whenever you like.

Your browser can also block or clear cookies directly. Blocking the necessary group may stop parts of the site working.

6. How long we keep it

• Marketing email addresses: until you unsubscribe or ask us to delete them.
• Enquiries and booking records: up to 24 months after our last contact.
• Customer records and the content we made for you: for the life of your plan and 12 months after it ends, so you can still ask us for the files.
• Billing and tax records: as long as the law requires, usually six years.

7. Your rights

Depending on where you live, you can ask us for a copy of your data, ask us to correct or delete it, ask us to restrict or stop a particular use, object to marketing, or ask for your data in a portable form. Withdrawing consent does not undo anything we did before you withdrew it.

Write to hi@socialx.studio and we will respond within 30 days. If you are in the UK or the European Economic Area and you are not satisfied with our response, you can complain to your local data protection authority.

8. Security

Access to customer data is limited to the people who need it to do the work. Platform access is granted at the narrowest role that works, and is removed when an engagement ends. We will tell you without undue delay if a breach affects your data.

9. Children

This is a business to business service. It is not directed at children and we do not knowingly collect data from anyone under 16.

10. Changes

We will update this page as the business changes. The date at the top is when this version took effect. If a change materially affects how we use data we already hold about you, we will tell you by email.