This policy explains how we collect, use, store and protect personal data when you use our website or engage our services.
Who We Are
GHL Experts is a trading division of XCONS Solutions Ltd, a company registered in England and Wales.
- Company: XCONS Solutions Ltd
- Company number: 16117496
- Registered address: Peregrine Road, Hainault, Ilford, Essex, England, IG6 3SZ
- Email: info@ghlexperts.co.uk
- Telephone: +44 7848 474687
XCONS Solutions Ltd is the data controller for personal data collected through this website.
What Data We Collect
Information you give us
When you complete an enquiry form, book a consultation or contact us:
- Name
- Email address
- Telephone number
- Company name and website
- Your current CRM or GoHighLevel status
- Details of the project or problem you describe
- Any information you choose to include in messages to us
Information collected automatically
- IP address and approximate location
- Browser type, device type and operating system
- Pages viewed, time on page and referring source
- Interaction data captured by analytics and session-recording tools
Information from client engagements
Where you engage us to work on your systems, we may process business contact data, CRM configuration data and system access credentials. This is covered in more detail in our Data Processing Information page.
We do not knowingly collect special category data. Please do not include health, biometric, political, religious or similar sensitive information in enquiry forms.
Why We Use It and Our Lawful Basis
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry | Legitimate interests — replying to a request you made |
| Preparing quotes and proposals | Steps prior to entering a contract |
| Delivering contracted services | Performance of a contract |
| Sending service and project updates | Performance of a contract |
| Marketing emails | Consent, or soft opt-in for existing clients |
| Website analytics and performance | Consent, via the cookie banner |
| Invoicing, accounting and tax records | Legal obligation |
| Security, fraud prevention and dispute defence | Legitimate interests |
You can withdraw consent at any time. Withdrawing consent does not affect processing carried out before withdrawal.
How Long We Keep It
| Data | Retention |
|---|---|
| Enquiries that do not become clients | 24 months from last contact |
| Client project records | 6 years from end of engagement |
| Accounting and tax records | 6 years, as required by UK law |
| Marketing contacts | Until you unsubscribe, or 24 months of inactivity |
| Website analytics | 14 months |
| Session recordings | 30 days |
| System access credentials | Removed on project completion |
Who We Share It With
We do not sell personal data.
We share data with service providers who help us operate:
| Provider | Purpose | Location |
|---|---|---|
| HighLevel (HighLevel Inc.) | CRM, email, SMS, forms, calendars | United States |
| Google (Analytics, Ads, Workspace) | Analytics, advertising, email | United States / EU |
| Microsoft (Clarity) | Website behaviour analytics | United States |
| Meta (WhatsApp Business) | Messaging | United States / Ireland |
| Stripe | Payment processing | United States / Ireland |
| Slack | Internal notifications | United States |
| Vercel | Website hosting | United States / global edge network |
We may also disclose data where required by law, regulation, court order or to establish or defend legal claims.
International Transfers
Several of the platforms we use — including GoHighLevel — are based in the United States. This means your personal data may be transferred outside the UK.
Where that happens, we rely on one or more of:
- The UK Extension to the EU-US Data Privacy Framework, where the recipient is certified
- The UK International Data Transfer Agreement (IDTA)
- The UK Addendum to the EU Standard Contractual Clauses
You can request details of the specific safeguards applied to any transfer by emailing us.
Cookies
We use cookies and similar technologies. Non-essential cookies are only set after you consent through our cookie banner. See our Cookie Policy for the full list and how to change your preferences.
Your Rights
Under UK GDPR you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — have inaccurate data corrected
- Erasure — request deletion, where no overriding obligation applies
- Restriction — limit how we use your data
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interests, including direct marketing
- Withdraw consent — at any time, where consent is the basis
- Complain — to the supervisory authority
To exercise any right, email info@ghlexperts.co.uk. We respond within one month. There is no charge unless a request is manifestly unfounded or excessive.
If you are unhappy with our response you can complain to the Information Commissioner's Office:
Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Helpline: 0303 123 1113 ico.org.uk
Security
We apply technical and organisational measures appropriate to the risk, including encrypted transmission, access controls, multi-factor authentication on business systems, restricted credential handling and staff confidentiality obligations.
No system is completely secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform you where required.
Automated Decision-Making
We do not make decisions producing legal or similarly significant effects based solely on automated processing.
Children
Our services are for businesses. We do not knowingly collect data from anyone under 18.
Changes
We may update this policy. Material changes will be notified on this page with a revised date. Please review it periodically.