Short version: We collect only what we need to run our services. We don't sell your data. Our websites use privacy-first analytics with no cookies. Contact form data goes to Formspree. You can ask us to delete everything at any time.

1. Who We Are

Cardiff Media Ltd is the data controller for personal data collected through www.repgro.co.uk and associated pages. We are registered in England and Wales with company number 11922695.

Contact: chris@cardiffmedia.co.uk  ·  +44 29 2277 2353  ·  Newport, Wales

2. What Data We Collect and Why

Contact Forms

When you submit a contact form on our website, we collect your name, email address, and the content of your message. This data is processed by Formspree (a third-party form service) and emailed to us. We use this to respond to your enquiry. Legal basis: Legitimate interest.

RepGro Subscriptions

When you sign up for RepGro, we collect your name, email address, and payment information (processed by Stripe — we never store card details ourselves). We use this to provide and bill for the service. Legal basis: Contract performance.

Website Analytics

Our Bulletproof Website pages use Cloudflare Web Analytics — a privacy-first, cookieless analytics tool. It collects no personal data, sets no cookies, and requires no consent banner. We see only aggregated traffic data such as page views and visit counts.

GoAffPro Affiliate Tracking

Our affiliate programme uses GoAffPro, which sets a tracking cookie when you arrive via an affiliate referral link. This cookie lasts 30 days and is used solely to attribute any resulting enquiry or sale to the correct affiliate. Legal basis: Legitimate interest.

Data We Do Not Collect

We do not use Google Analytics, Facebook Pixel, or any third-party advertising trackers on our own pages. We do not sell, rent, or share your personal data with any third party for marketing purposes.

3. Third-Party Services

We use the following third-party services, each of which has its own privacy policy:

When you click the booking link for a discovery call, you are directed to Google Calendar, which is governed by Google's own privacy policy.

4. How Long We Keep Your Data

5. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of AccessRequest a copy of the data we hold about you
Right to RectificationAsk us to correct inaccurate data
Right to ErasureAsk us to delete your data ("right to be forgotten")
Right to RestrictionAsk us to limit how we use your data
Right to PortabilityReceive your data in a portable format
Right to ObjectObject to processing based on legitimate interest

To exercise any of these rights, email chris@cardiffmedia.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

6. Data Security

Our websites are hosted on enterprise-grade infrastructure with DDoS protection, SSL encryption in transit, and no server-side storage of payment data. Access to client data is restricted to Cardiff Media staff only.

No method of transmission over the internet is 100% secure. We take commercially reasonable steps to protect your data but cannot guarantee absolute security.

7. Cookies

Our own Bulletproof Website pages use no tracking cookies. The GoAffPro affiliate tracking cookie is set only when you arrive via an affiliate referral link, and expires after 30 days.

For full details, see our Cookie Policy.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted here with an updated date. For material changes, active clients will be notified by email.

Questions about how we handle your data? We'll always give you a straight answer.

📧 chris@cardiffmedia.co.uk

+44 29 2277 2353  ·  Cardiff Media Ltd, Newport, Wales  ·  UK Company 11922695