Privacy Policy
This privacy policy ("Privacy Policy") applies to personal data that we collect from you as a customer ("you" or "your"). It provides information on what data we collect, why we collect the data, how it is used and the lawful basis on which your personal data is processed, and what your rights are under the applicable data protection and privacy laws, including the UK General Data Protection Regulation ("UK GDPR").
1. WHO ARE WE
We are Revaio, a trading name operated by Jamie Booth (sole trader), Plowright Place, Swaffham, PE37 7LQ. We are the data controller responsible for your personal data.
2. WHAT DO WE COLLECT
We collect and process the following information provided by you in the course of your enquiry and any subsequent engagement with our services:
Personal information: This includes your name, email address and phone number, as well as any additional information you elect to provide to us.
Business information: Details about your business that you provide when completing our enquiry form, including the volume of leads your business generates.
Other information: Personal details you choose to provide when corresponding with us by phone or email.
3. HOW WE USE YOUR PERSONAL INFORMATION
We use your personal information in the following ways:
To respond to your enquiry and provide you with information about our services. Such use is necessary to respond to or implement your request and for the performance of any contract between you and us.
As necessary for certain legitimate business interests, which include the following: Where we are asked to deal with any enquiries or complaints you make; To provide communications which we think will be of interest to you; If you ask us to delete your data or to be removed from our marketing lists and we are required to fulfil your request, to keep basic data to identify you and prevent further unwanted processing; and To (a) comply with legal obligations; (b) respond to requests from competent authorities; (c) protect our operations; (d) protect our rights, safety or property; and (e) enforce or defend legal rights, or prevent damage.
We may provide you with information about services, events and other promotions we feel may interest you. We will contact you by email or phone only where we have a legitimate interest in doing so or with your consent.
We may use your personal data for other reasons compatible with the purposes of the data processing outlined in this Privacy Policy. Where required, we will ask for your consent to any such further processing.
4. DISCLOSURE OF YOUR INFORMATION
We share your personal data with third parties in the following situations:
Service Providers: We engage selected third parties who act on our behalf to support our operations, including IT suppliers and data hosting providers as necessary to provide our services. In particular, your personal data may be stored and processed within GoHighLevel (GHL), a CRM platform. GoHighLevel is based in the United States and processes data under standard contractual clauses to ensure compliance with UK GDPR requirements. These parties may access, process or store your personal data solely in order to perform the services we have engaged them to provide.
Business Transfers: If we transfer or sell our business or assets to a third party, personal data held by us about our customers may be one of the transferred assets.
Administrative and Legal Reasons: If we need to disclose your personal data (i) to comply with a legal obligation and/or judicial or regulatory proceedings, a court order or other legal process; (ii) to enforce applicable contract terms; or (iii) to protect us or others against loss or damage.
5. DATA RETENTION
Personal data will not be held for longer than necessary with regard to the purposes of the data processing outlined in this Privacy Policy, subject to any retention periods provided by applicable laws and regulations. We retain your personal data for a period of 24 months following your last interaction with us, after which it will be securely deleted. Where you consent to receive marketing communications, we will keep your data until you unsubscribe or request deletion. Upon expiry of the applicable retention period we will securely destroy your personal data in accordance with applicable laws and regulations.
6. YOUR DATA PROTECTION RIGHTS
Applicable data protection laws give you specific rights in relation to your personal data. In particular, you have the following rights:
Right of access: If you ask us, we will confirm whether we are processing your personal data and, if so, provide you with a copy of that personal data along with certain other details.
Right to rectification: If your personal data is inaccurate or incomplete, you are entitled to ask that we correct or complete it. If we shared your personal data with others, we will tell them about the correction where possible.
Right to erasure: You may ask us to delete or remove your personal data, such as where our legal basis for processing is your consent and you withdraw that consent. We may continue processing personal data where this is necessary for a legitimate interest in doing so, as described in this Privacy Policy.
Right to restrict processing: You may ask us to restrict or block the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to us processing it. We will tell you before we lift any restriction on processing.
Right to data portability: You have the right to obtain your personal data from us that you consented to give us or that was provided to us as necessary in connection with our contract with you, in a structured, commonly used and machine-readable format.
Right to object: You may ask us at any time to stop processing your personal data on grounds relating to your particular situation, and we will do so if we are relying on a legitimate interest to process your personal data, unless we can demonstrate compelling legitimate grounds for the processing, or if we are processing your personal data for direct marketing purposes.
Right to withdraw consent: If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing that took place before we received notice of withdrawal.
Right to lodge a complaint: If you have a concern about our privacy practices, including the way we have handled your personal data, you can report it to the UK data protection authority (the Information Commissioner's Office) at https://ico.org.uk/make-a-complaint.
If you wish to exercise any of these rights please contact us as described in the Contact section below. We may need to ask you for further information to verify your identity before we can respond to any request.
7. CONTACT
Questions, comments or requests regarding this Privacy Policy should be addressed to Revaio via email at [email protected].
Last updated: June 2025