Privacy Policy

Last updated: 26 October 2026

Welcome to Content Colin. Your privacy is important to us. This policy explains how we collect, use and protect your personal information when you use our website and services.

This website and its services are operated by Content Colin Ltd (“Content Colin”, “we”, “us”), registered in England and Wales under company number 14642040, with its registered office at Richard House, 9 Winckley Square, Preston, Lancashire, PR1 3HP. We are the data controller responsible for your personal information. If you have any questions about this policy, contact us at colin@contentcolin.com.

1. Information We Collect

• Contact and account information: your name, email address, phone or WhatsApp number, business name and details, and billing information. Card payments are handled by Stripe; we don’t store your full card details.
• Website information: the website address you give us, and publicly available content from that website, which we read to learn about your business and create your content. If you’ve given us your website address without signing up, we may use it to create a sample of content for you.
• Connected account data: when you connect a social media, Google or website account, we receive access tokens and the account information needed to publish on your behalf, such as page or profile names and IDs.
• Content you provide or approve: briefs, ideas, links, images, logos and posts you create, upload, edit or schedule, including any photos of yourself or your team you choose to upload.
• Support communications: messages you send us by email, WhatsApp or our contact form.
• Usage and device data: your IP address, browser type, device information, pages visited, and how you arrived at our site, including advertising click identifiers.

2. How We Use Your Information and Our Legal Basis

We process your personal information on the following legal bases under UK GDPR:

• To provide and manage our services, including creating and publishing your content: performance of our contract with you.
• To communicate with you about your account, billing and support: performance of our contract.
• To create sample content from a website address you’ve given us and tell you about it: our legitimate interests in showing you what our service can do.
• To improve our website and services and keep them secure: our legitimate interests.
• To measure and improve our advertising: your consent, given through our cookie banner.
• To send marketing emails: your consent, or our legitimate interests where you’re an existing customer. You can unsubscribe at any time.
• To comply with legal obligations, including tax and accounting: legal obligation.

3. Sharing Your Information

We do not sell your personal information. We share it only as necessary:

• Service providers who help us run our website and deliver our services, bound by appropriate data protection terms. These include:
  • Payments: Stripe
  • Cloud hosting and data storage providers, including Amazon Web Services
  • Workflow automation and customer portal providers
  • Content and image generation providers, which process your business information and briefs to create your content
  • Customer management and email: HubSpot, Mailchimp
  • Support messaging: WhatsApp (Meta)
• Advertising and analytics partners, including Google, Meta (Facebook and Instagram) and OpenAI, where you’ve consented to advertising cookies. We may also share limited sign-up and purchase events with these partners to measure our advertising. They may process this data as independent controllers for their own purposes.
• Platforms you connect, such as Facebook, Instagram, LinkedIn, X, Google Business Profile, WordPress, Wix and Shopify, to publish or schedule content at your direction.
• When required by law, or to establish, exercise or defend our legal rights.

4. Google User Data

When you connect your Google Business Profile, we access only the data needed to publish posts to your profile on your behalf. Content Colin’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve or train generalised models, and we do not sell it or use it for advertising.

5. International Transfers

Some of our service providers are located outside the UK, including in the United States. Where personal information is transferred outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses).

6. Data Retention

We keep your personal information only for as long as necessary for the purposes in this policy. In general:

• Account data and content: for the duration of your subscription and up to 12 months afterwards, so you can return without starting again.
• Sample content created from a website address you gave us: up to 12 months unless you sign up.
• Financial and transaction records: at least 6 years, to meet HMRC and accounting requirements.

When data is no longer needed, we securely delete or anonymise it.

7. Cookies

Our website uses cookies and similar technologies to operate the site, understand how it’s used and measure our advertising.

• Strictly necessary cookies: required for the website to work. These don’t require consent.
• Analytics cookies: set by Google Analytics to help us understand how visitors use our site. Only set with your consent.
• Advertising cookies: set by Google Ads, the Meta (Facebook) pixel and the OpenAI Ads pixel to measure ad performance and show you relevant ads. Only set with your consent.

You can change or withdraw your consent at any time using our cookie banner, and control cookies through your browser settings.

8. Data Security

We use reasonable technical and organisational measures to protect your personal information, including encryption in transit and restricted access to connected account tokens. No system is completely secure, and we cannot guarantee absolute security.

9. Your Rights

Under UK data protection law, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Have your personal information deleted.
• Restrict or object to our processing.
• Receive your information in a portable format.
• Withdraw consent at any time, where we rely on consent.

To exercise any of these rights, contact us at colin@contentcolin.com. You can also complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk, though we’d appreciate the chance to resolve your concerns first.

10. Disconnecting Accounts and Deleting Your Data

You can disconnect any social media, Google or website account from your Content Colin account at any time, and you can also remove our access from within each platform’s own settings. When you disconnect an account, we delete its access tokens.

To delete your Content Colin account and associated data, email colin@contentcolin.com from the address on your account. We’ll confirm once your data has been deleted, usually within 30 days. Records we must keep by law, such as invoices, will be retained for the required period.

11. Changes to This Policy

We may update this policy from time to time. We’ll post the new version here and update the date at the top. For significant changes, we’ll let customers know by email.

12. Contact Us

If you have any questions about this privacy policy, contact us at colin@contentcolin.com.