Legal

Privacy policy

Last updated 19 June 2026

This policy explains what personal data RevenueLadder collects, why we collect it, and how we protect it. We keep things plain and do not hide anything in the small print.

Who we are

RevenueLadder Ltd (company number 14528221) is the data controller for personal data collected through this website and in connection with our services. We are registered at Studio 4, The Foundry, Bangor, Gwynedd LL57.

Data enquiries: hello@revenueladder.co.uk

Data we collect

We collect personal data in the following situations:

When you contact us or book a call

Name, email address, phone number
Company name and website URL
Details of your business needs, as shared by you

When you become a client

Contact and billing details
Information about your systems, accounts, and workflows necessary to deliver the agreed services
Communications sent between us during the engagement

When you visit our website

Our website does not use tracking cookies or behavioural analytics. Our hosting provider (Vercel) may log basic technical data -- such as IP address and browser type -- for security and infrastructure purposes. We do not store or analyse this data ourselves.

How we use it

To respond to your enquiries and quote for work
To deliver, manage, and invoice for services you have engaged us for
To send service-related updates and information relevant to your engagement
To comply with our legal and financial obligations
To improve how we work and communicate (using aggregated, non-identifiable insights only)

We do not send unsolicited marketing emails. If you opt in to receive updates from us, you can unsubscribe at any time.

Legal basis for processing

Under UK GDPR, we rely on the following legal bases:

Contract

Processing is necessary to perform the contract you have entered into with us, or to take steps at your request before entering a contract.

Legitimate interests

We process enquiry and contact data on the basis of our legitimate interest in responding to potential clients. We have assessed that this interest is not outweighed by your rights and freedoms.

Legal obligation

We retain financial and invoicing records to comply with HMRC requirements and applicable UK tax law.

Consent

Where we send you marketing communications, we will ask for your explicit consent beforehand. You may withdraw that consent at any time by emailing us.

We do not sell your data. We share it only where necessary, with:

Supabase -- our database and authentication provider, operating on EU infrastructure
Calendly -- used for appointment scheduling when you book a call
Vercel -- our hosting and infrastructure provider
HMRC and our accountants -- where required for tax compliance
Professional advisers (solicitors, accountants) -- bound by confidentiality obligations

Where data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR.

Retention

Enquiry data from contacts who do not become clients: deleted after 12 months of no further contact.
Client project data and communications: retained for 6 years from project completion, in accordance with UK tax law.
Financial records and invoices: retained for 6 years as required by HMRC.

You may request earlier deletion of your data where we have no legal obligation to retain it.

Your rights

Under UK GDPR, you have the following rights:

Access -- request a copy of the personal data we hold about you
Rectification -- ask us to correct inaccurate or incomplete data
Erasure -- request deletion of your data where we have no legal basis to retain it
Restriction -- ask us to limit how we process your data in certain circumstances
Portability -- receive your data in a structured, machine-readable format
Objection -- object to processing based on legitimate interests
Withdraw consent -- at any time, where processing is based on consent

To exercise any of these rights, email hello@revenueladder.co.uk. We will respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

Our public website does not use tracking cookies, advertising cookies, or behavioural profiling. We do not run third-party analytics such as Google Analytics.

The dashboard area of the site (accessible only to authenticated RevenueLadder team members) uses strictly necessary session cookies to maintain your logged-in state. These are not shared with third parties and are deleted when you log out or close your browser.

Third-party services

The following services are used as part of our website and operations. Each has its own privacy policy governing how they handle data:

Supabase -- database infrastructure and authentication
Calendly-- appointment scheduling (activated when you click "Book a call")
Vercel -- website hosting, CDN, and deployment

We encourage you to review each provider's privacy policy if you have concerns about how they process your data.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Where changes are material, we will notify active clients by email.

Contact