Privacy Policy
Last updated: 11/08/2026
1. Who We Are
ClientFoundry ("we", "us", "our") provides automated Google review and reputation management services to small businesses in the UK. ClientFoundry is a trading name of Ivan Ihtyarov, operating as a sole trader.
This policy explains what personal data we collect, how we use it, and what rights you have.
Contact:
Email: [email protected]
Phone: 07576539101
Address: 34 Vulcan close, London, E65NY
2. What Data We Collect
If you contact us or book a call: Your name, email address, phone number, business name, and anything you tell us in your message.
If you become a client: The above, plus your business details, payment information (processed by our payment provider — we don't store full card details), and access credentials you choose to share with us, such as your Google Business Profile connection.
Your customers' data (handled on your behalf): If you're a client, you may provide us with your customers' names, phone numbers, and email addresses so we can send review requests on your behalf.
If you visit our website: Basic analytics data — pages visited, approximate location, device and browser type — collected via cookies.
3. How We Use Your Data
We use personal data to:
Respond to your enquiries and deliver the services you've signed up for
Send review requests to your customers, as instructed by you
Process payments and maintain accounting records
Send you service updates about your account
Send marketing communications, only if you've opted in — you can withdraw consent at any time
Improve our website and services
Meet our legal and tax obligations
We never sell your data, or your customers' data, to anyone.
4. Controller or Processor?
This distinction matters legally, so to be clear:
For your own business and account information, ClientFoundry is the data controller.
For your customers' personal data, you remain the data controller and ClientFoundry acts as your data processor — we only use that data to carry out the review requests you've instructed us to send, never for our own purposes.
Your responsibility as a client: you must have a lawful basis to share your customers' contact details with us and to contact them, in line with UK GDPR and PECR.
5. Legal Basis for Processing
We rely on:
Contract — to deliver the services you've signed up for
Legitimate interests — to respond to enquiries, run and improve our business
Consent — for marketing communications
Legal obligation — for tax and accounting record-keeping
6. Who We Share Data With
GoHighLevel — the platform we use to deliver our services (our main sub-processor)
Google — where review requests direct your customers
Payment processors — Stripe to handle payments
Our accountant — for bookkeeping and tax purposes
Legal or regulatory authorities — where required by law
Some providers may process data outside the UK. Where that happens, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or adequacy regulations.
7. How Long We Keep Data
Enquiries that don't become clients: 12 months, then deleted
Client records: for the duration of our working relationship, then 6 years after it ends, to meet HMRC record-keeping requirements
Customer contact data processed for clients: deleted within 90 days of the client relationship ending, or sooner on request
8. Your Rights
Under UK GDPR, you have the right to:
Access the personal data we hold about you
Correct anything inaccurate
Delete your data ("right to erasure")
Restrict or object to how we process it
Portability — receive your data in a transferable format
Withdraw consent at any time, where processing is based on consent
To exercise any of these, email [your business email]. We'll respond within one month.
9. Marketing Communications
We only send marketing messages if you've opted in. Every marketing email includes an unsubscribe link, and you can reply STOP to any marketing SMS. Opting out of marketing won't affect service messages about your account.
10. Cookies
Our website uses cookies for basic functionality and analytics. You can control or block cookies through your browser settings — note that blocking some cookies may affect how the site works.
11. Data Security
We use appropriate technical and organisational measures to protect personal data, including secured accounts, restricted access, and reputable service providers. No system is completely secure, but we take this seriously and will notify you and the ICO where legally required if a breach occurs.
12. Complaints
If you're unhappy with how we've handled your data, please contact us first at [your business email] — we'd like the chance to put it right.
You also have the right to complain to the Information Commissioner's Office:
Website: ico.org.uk
Helpline: 0303 123 1113
13. Changes to This Policy
We may update this policy from time to time. The "last updated" date at the top will always reflect the most recent version.
