Privacy Policy

Edderton Scott
Last updated: 5 March 2026

1. Who We Are

Edderton Scott is a business systems and operations consultancy based in Scotland, UK. We help business owners put the right processes, tools, and systems in place so their businesses run without relying on them for everything.

Company name: Edderton Scott
Website: eddertonscott.com
Contact email: hello@eddertonscott.com
Registered address: 1 Glendoune Road, G76 7TT, Glasgow, United Kingdom

We are the data controller for the personal data we collect and process. This means we decide how and why your data is used, and we are responsible for keeping it safe.

2. What Data We Collect

We may collect the following types of personal data:

Contact and identity information

Full name
Email address
Phone number
Job title
Company name and size

Enquiry and qualification information

Your answers to questions on our forms (e.g. “What is your main challenge right now?”)
Notes from discovery calls or consultations
Details about your business situation shared during any engagement with us

Technical and usage data

IP address
Browser type and version
Pages visited on our website and time spent on them
Referring URL (the page or ad that brought you to us)

LinkedIn data

When you submit a LinkedIn Lead Gen Form as part of one of our advertising campaigns, LinkedIn shares with us the details you provided in that form. This typically includes your name, email address, job title, company name, and any answers to questions we included in the form.
We also receive basic campaign metadata such as the form name and ad campaign associated with your submission.

3. How We Collect Your Data

We collect personal data through the following channels:

Our website contact and enquiry forms (including our Discovery Form and AI Chat Form)
LinkedIn Lead Gen Forms attached to our paid advertising campaigns on LinkedIn
Direct email or telephone enquiries you send to us
Discovery calls and consultations where you share information about your business
Our website via cookies and analytics tools (see Section 9)
Referrals from existing clients or partners who share your contact details with your knowledge

4. Why We Use Your Data and Our Legal Basis

We only process your personal data where we have a clear legal reason to do so. The table below explains what we use your data for and why we are legally allowed to do so.

Purpose	Legal Basis
Responding to your enquiry or request for information	Performance of a contract / Pre-contractual steps
Following up after you submit a LinkedIn Lead Gen Form or website form	Legitimate interests (following up on a direct expression of interest)
Sending you relevant service information, case studies, or invitations to speak with us	Legitimate interests / Consent where required
Managing your contact record in our CRM system	Legitimate interests
Sending automated email sequences following your enquiry	Legitimate interests / Consent where required
Scheduling and managing discovery calls or project work	Performance of a contract
Improving our website and marketing	Legitimate interests
Complying with legal obligations	Legal obligation

A note on legitimate interests: Where we rely on legitimate interests, we have balanced our interests against yours and are satisfied that our use of your data is proportionate, that you would reasonably expect it, and that it does not override your rights. You can object to processing based on legitimate interests at any time (see Section 7).

5. How We Store and Sync Your Data

When you submit an enquiry — whether through our website or a LinkedIn Lead Gen Form — your details are:

Received and securely stored in our CRM system, hosted on our website at eddertonscott.com
Tagged with the source of your enquiry (e.g. LinkedIn, website, referral) so we can track how you found us and what you were looking for
Used to trigger a relevant automated email sequence via our internal email automation system (ES Mailer), which sends you follow-up information appropriate to your enquiry
Reviewed by a member of our team to determine whether and how we can help you

We do not sell your data to any third party. We do not share your data with advertising platforms beyond what is necessary to operate our campaigns (e.g. LinkedIn receiving conversion signals).

6. How Long We Keep Your Data

We keep your personal data only for as long as necessary for the purpose it was collected.

Situation	Retention period
Enquiry that did not result in a project	24 months from last contact
Active client relationship	Duration of engagement + 6 years
Former client (for legal/contractual purposes)	6 years from end of engagement
Marketing contact (subscribed to updates)	Until you unsubscribe or ask us to delete
LinkedIn Lead Gen Form submission	24 months from submission, unless a client relationship follows

After the relevant period, we will securely delete or anonymise your data.

7. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right to access — You can ask us for a copy of the personal data we hold about you.
Right to rectification — You can ask us to correct any data that is inaccurate or incomplete.
Right to erasure — You can ask us to delete your data where there is no longer a legitimate reason for us to hold it.
Right to restrict processing — You can ask us to pause how we use your data in certain circumstances.
Right to data portability — You can ask us to provide your data in a structured, machine-readable format.
Right to object — You can object to us processing your data on the basis of legitimate interests, including for direct marketing. We will stop unless we can demonstrate compelling grounds to continue.
Right to withdraw consent — Where we rely on your consent (e.g. for marketing emails), you can withdraw it at any time by clicking the unsubscribe link in any email or contacting us directly.

To exercise any of these rights, contact us at: hello@eddertonscott.com

We will respond within 30 days. We will not charge you for reasonable requests.

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner’s Office (ICO):
Website: ico.org.uk
Phone: 0303 123 1113

We only share your personal data with trusted third parties where necessary to operate our business. All third parties we work with are required to handle your data securely and in accordance with UK GDPR.

Third party	Purpose	Location
LinkedIn (Microsoft)	Operating Lead Gen Form ad campaigns	USA (Standard Contractual Clauses apply)
Our hosting provider (Namecheap)	Hosting our website and CRM	UK/EU
Email delivery infrastructure	Sending automated and manual emails	UK/EU
Google Analytics (if active)	Website usage analytics	USA (Standard Contractual Clauses apply)

We do not use Zapier, Salesforce, HubSpot, or other third-party CRM or marketing platforms. All lead and contact data is stored and processed within our own hosted systems.

9. Cookies

Our website uses cookies to help it function and to understand how visitors use it.

Essential cookies are required for the website to work and cannot be switched off.

Analytics cookies help us understand which pages are visited and where traffic comes from. We use this to improve our content and campaigns.

Marketing cookies may be set by LinkedIn or other advertising platforms when you arrive at our website via an ad. These help us measure the effectiveness of our campaigns.

When you first visit our website, you will be asked to accept or decline non-essential cookies. You can update your preferences at any time via the cookie settings on our website, or by adjusting your browser settings.

10. Data Security

We take the security of your personal data seriously. We use the following measures to protect it:

SSL/HTTPS encryption across our website
Access controls limiting who within our team can view CRM data
Secure, regularly updated website hosting environment
Internal data handling procedures for our team

In the unlikely event of a data breach that poses a risk to your rights, we will notify the ICO within 72 hours and inform affected individuals without undue delay.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in our services, systems, or legal obligations. When we do, we will update the “Last updated” date at the top of this page. We encourage you to check this page periodically.

12. Contact Us

If you have any questions about this policy or how we handle your personal data, please contact us:

Edderton Scott
Email: hello@eddertonscott.com
Address: 1 Glendoune Road, G76 7TT, Glasgow, United Kingdom
Website: eddertonscott.com