Legal
Privacy Policy
How we collect, use and protect your personal data, and the rights you have over it.
This policy explains how Telos B2B (Telos Marketing Group Ltd) uses personal data.
Last updated: 29 September 2026
We respect your privacy. This notice tells you what personal data we collect when you use telosb2b.com or deal with us, why we use it, who we share it with, how long we keep it and what rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018) and the Privacy and Electronic Communications Regulations (PECR).
Who we are
Telos B2B is a trading name of Telos Marketing Group Ltd, a company registered in England and Wales (company number 17486770). We are a B2B marketing agency providing SEO, PPC, paid social, AI search optimisation, digital PR and content services.
Telos Marketing Group Ltd is the controller of the personal data described in this notice. That means we decide how and why it is used and we are responsible for looking after it.
- Registered address: [REGISTERED ADDRESS TO CONFIRM]
- Email: [PRIVACY EMAIL TO CONFIRM]
- Phone: 0117 471 9137
- ICO registration number: [ICO NUMBER TO CONFIRM]
We are not required to appoint a Data Protection Officer. If you have any questions about this notice or how we handle your data, please contact us using the details above.
The personal data we collect
We only collect what we need. Depending on how you interact with us, this may include:
Contact form
Your name, email address, phone number, company name and the content of your message.
“Book a free strategy call” and proposal forms
Your first name, last name, email address, phone number, website, job title and the services you are interested in.
Newsletter sign-up
Your email address, plus basic records of when and how you signed up and whether you open or click our emails.
Free AI search visibility check
Your name, email address, company, website, the competitors you list and any notes you add.
Phone calls and emails
Your name, contact details and anything you choose to tell us when you call or email. We do not record phone calls.
Business contact data for prospecting
Your name, job title, employer, business email address, business phone number and professional profile information (for example from your company website or LinkedIn).
Website usage data
If you accept analytics cookies, information about how you use our website, such as pages visited, time on page, the site that referred you, your device and browser type and an approximate location (country or city). Our web server also keeps short-term technical logs, including IP addresses, to keep the site secure. See our Cookie Policy for details.
Client data
If you become a client, the names and contact details of your team, contract and billing records and correspondence about the work.
We do not intentionally collect special category data (such as health information) and ask you not to send it to us.
Where we get your data from
Most of the data we hold comes directly from you, when you fill in a form, sign up to our newsletter, call or email us, or use our website.
For B2B prospecting, we may collect business contact details from publicly available sources, such as company websites, professional networking sites like LinkedIn and Companies House, or from reputable business data providers. If we collect your data this way, we will give you this information when we first contact you, and within one month at the latest.
How we use your data and our lawful bases
We must have a lawful basis for every use of your personal data. The table below sets out what we do and why.
| What we use it for | Lawful basis |
|---|---|
| Replying to your enquiry through our contact form, by phone or by email | Legitimate interests (responding to people who contact us) |
| Arranging and holding a strategy call, preparing a proposal or carrying out your free AI search visibility check | Taking steps at your request before entering into a contract; legitimate interests where you are acting for your employer |
| Delivering our services, managing the client relationship and invoicing | Performance of a contract; legitimate interests (where the contract is with your employer) |
| Sending our email newsletter | Consent |
| Following up with enquirers and contacting business prospects about services that may be relevant to their company | Legitimate interests (growing our business through relevant B2B marketing) |
| Measuring how our website is used with Google Analytics | Consent (given through our cookie banner) |
| Keeping our website and systems secure and preventing spam and misuse | Legitimate interests (protecting our business and users) |
| Keeping accounting and tax records and meeting other legal duties | Legal obligation |
| Establishing, exercising or defending legal claims | Legitimate interests |
Where we rely on legitimate interests, we have balanced our interests against yours and are satisfied that the use is reasonable, expected and does not override your rights. You can ask us for more detail about this assessment.
You do not have to give us your personal data. However, if you do not provide the details marked as required on a form, we will not be able to respond to your enquiry, prepare a proposal or send you what you asked for.
We do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects on you.
Marketing and B2B prospecting
We market our services to businesses. When we contact people at companies, we rely on legitimate interests under the UK GDPR and follow PECR.
- Corporate subscribers: PECR allows us to send marketing emails to employees at limited companies, LLPs, partnerships in Scotland and government bodies without prior consent. We only do so where the message is relevant to your role, and every email identifies us and gives you a simple way to opt out.
- Individual subscribers: We will not send unsolicited marketing emails to sole traders or partners in English, Welsh or Northern Irish partnerships unless they have given consent or are an existing customer who has not opted out.
- Phone calls: We screen business numbers against the Telephone Preference Service (TPS) and Corporate Telephone Preference Service (CTPS) before making marketing calls, unless you have told us you are happy to receive calls from us.
- Newsletter: We only send our newsletter to people who have signed up. You can unsubscribe at any time using the link in every email.
You have an absolute right to object to direct marketing. If you tell us to stop, we will, and we will keep a minimal record of your details on a suppression list so that we do not contact you again.
Who we share your data with
We do not sell your personal data. We share it only with trusted service providers who process it on our behalf (processors) under written contracts that require them to keep it secure and use it only on our instructions. These are:
| Provider | What they do | Where data is processed |
|---|---|---|
| Hetzner Online GmbH | Hosts our WordPress website and the form submissions stored on it, on a dedicated server | Germany (EU) |
| Google (Google Analytics 4) | Website analytics, only if you accept analytics cookies | EU and US |
| Google (Search Console) | Reports on how our site appears in Google search results. This is aggregated data and does not identify individual visitors | EU and US |
| Kit (formerly ConvertKit) | Sends our email newsletter and manages subscriptions | US |
| Our email provider | Business email for sending and receiving messages | UK/EU |
| Thrive Leads and Elementor | WordPress plugins that power the forms on our website. Form data is stored on our own server | Germany (EU), via our host |
We may also share data with our professional advisers (such as accountants and lawyers), with HMRC and other authorities where the law requires it, and with a buyer or successor if our business is sold or restructured.
We self-host the fonts on our website, so your browser does not connect to Google Fonts when you visit.
International transfers
Some of our providers process data outside the UK. When this happens, we make sure your data is protected in one of the following ways:
- EU and EEA: The UK recognises the EU and EEA as providing adequate protection, so data can flow there freely. Our website host, Hetzner, is in Germany.
- United States: Transfers to Google and Kit are made either to organisations certified under the UK Extension to the EU-US Data Privacy Framework (the UK-US “Data Bridge”), or under the International Data Transfer Addendum to the EU Standard Contractual Clauses approved for UK use, with additional safeguards where needed.
Contact us if you would like more information about these safeguards.
How long we keep your data
We keep personal data only for as long as we need it for the purpose we collected it, then we delete or anonymise it.
| Type of data | How long we keep it |
|---|---|
| Enquiries, strategy call and proposal requests, AI visibility checks and prospect data | 24 months from our last contact with you, unless you become a client |
| Client records (contracts, correspondence and billing) | 6 years after the contract ends, to meet tax and legal requirements |
| Newsletter subscriptions | Until you unsubscribe |
| Google Analytics data | 14 months |
| Marketing suppression list | For as long as we carry out marketing, so we can respect your opt-out |
How we keep your data secure
We use appropriate technical and organisational measures to protect your data. These include encrypted (HTTPS) connections to our website, access controls and strong authentication on our systems, regular software updates and limiting access to people who need it. No system is completely secure, but if a data breach happens that is likely to put your rights at risk, we will tell you and the ICO as the law requires.
Your rights
Under UK data protection law you have the right to:
- Access: ask for a copy of the personal data we hold about you.
- Rectification: ask us to correct data that is inaccurate or complete data that is incomplete.
- Erasure: ask us to delete your data in certain circumstances.
- Restriction: ask us to limit how we use your data in certain circumstances.
- Objection: object to us using your data where we rely on legitimate interests. You can object to direct marketing at any time, and we will always stop.
- Portability: ask us to send the data you gave us to you or another organisation in a common, machine-readable format, where we process it by consent or contract and by automated means.
- Withdraw consent: where we rely on your consent (for the newsletter or analytics cookies), you can withdraw it at any time. This does not affect anything we did before you withdrew it.
To use any of these rights, email us at [PRIVACY EMAIL TO CONFIRM] or call 0117 471 9137. You do not usually need to pay a fee. We may need to confirm your identity before we act. We will respond within one month, although we may extend this by up to two further months for complex requests, in which case we will tell you why.
How to complain
If you are unhappy with how we have used your data, please contact us first at [PRIVACY EMAIL TO CONFIRM] and we will do our best to put things right.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator:
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
- Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Changes to this notice
We review this notice regularly and will update it if we change how we use personal data. The date at the top shows when it was last updated. If we make significant changes, we will make this clear on our website or tell you directly where appropriate.
