Privacy Policy
Last updated: 10 May 2026
1. Who we are
Company name: Suburbia Limited (trading as PositionWorks)
Company number: 10713013
Country of registration: England and Wales
Registered office: 39 Lilestone Street, London, NW8 8SS
Contact: [email protected]
This privacy policy applies to the website positionworks.co.uk operated by PositionWorks (“we”, “us”, “our”). PositionWorks is a UK-based Google Ads agency providing paid search management services to UK businesses.
For privacy-related questions, contact us at [email protected].
2. What data we collect
We collect the following personal data when you interact with our site:
- Lead form submissions: name, email address, website URL, and business status (e.g. running ads, planning to start, etc).
- Contact submissions: any details you choose to share via email, WhatsApp, or our contact form.
- Analytics data: pages visited, time on page, referrer, device type, anonymised IP address, and approximate location (country/region only). Collected via Google Analytics where consent has been given.
- Cookies: we use essential cookies for site functionality and analytics cookies (only with your consent). See section 8 below.
3. Why we collect it and the legal basis
We process your personal data on the following legal bases:
- Legitimate interest: to respond to enquiries you’ve sent us, to deliver requested audits or proposals, and to keep records of business communications.
- Consent: for analytics cookies, marketing cookies, and any future marketing emails (you’ll always be able to opt out).
- Contractual necessity: to deliver Google Ads management services if you become a client.
4. How long we keep your data
- Lead form enquiries that don’t convert: deleted after 12 months unless you opt to stay in touch.
- Active client records: kept for the duration of our working relationship plus 7 years for tax and accounting compliance.
- Analytics data: retained per Google Analytics defaults (currently 14 months for user-level data).
5. Who we share data with
We share data only with the following third parties, all of whom are bound by their own data protection obligations:
- Google Ireland Ltd — for Google Analytics and Google Ads (where consent given for analytics).
- Cloudflare Inc — for site security, performance, and traffic management.
- IONOS — our website hosting provider.
- Email service providers — to deliver and store business communications.
We do not sell, rent, or trade your personal data to any third party for marketing purposes.
6. Your rights under UK GDPR
You have the following rights regarding your personal data:
- Right of access: request a copy of the data we hold about you.
- Right to rectification: ask us to correct inaccurate data.
- Right to erasure: ask us to delete your data (“right to be forgotten”).
- Right to restrict processing: ask us to limit how we use your data.
- Right to data portability: request your data in a portable format.
- Right to object: object to certain types of processing, including direct marketing.
- Right to withdraw consent: at any time where we relied on consent.
To exercise any of these rights, email [email protected]. We’ll respond within 30 days.
7. Right to complain
If you’re unhappy with how we’ve handled your data, you have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk or by phone on 0303 123 1113.
8. Cookies
We use cookies to make the site work and to understand how visitors use it. Categories:
- Essential cookies: required for the site to function (session, security, form submission). Always on.
- Analytics cookies: Google Analytics tracking. Loaded only after you give consent via our cookie banner.
You can change your cookie preferences at any time using the cookie settings link in the footer.
9. Data security
We protect your data with:
- HTTPS encryption across the entire site.
- Cloudflare edge security and DDoS protection.
- WordPress security plugins (Wordfence) with regular malware scans.
- Daily automated backups stored off-site.
- Restricted admin access with two-factor authentication.
10. International transfers
Some of our service providers (Google, Cloudflare) are headquartered outside the UK. Where data is transferred outside the UK, we rely on the UK extension to the EU Standard Contractual Clauses or equivalent safeguards.
11. Children
Our services are aimed at UK businesses and we do not knowingly collect data from anyone under 18. If you believe we have collected data from a minor, please contact us so we can delete it.
12. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top of this page reflects when the most recent change was made. Material changes will be highlighted on the homepage.
13. Contact
Questions about this policy or how we handle your data:
- Email: [email protected]
- WhatsApp: +44 7537 182072
- Web: positionworks.co.uk