Plain language. What we collect, why we collect it, who we share it with, and how to control it. Last updated April 29, 2026.
Timpson Marketing ("Timpson Marketing," "we," "us," or "our") is a digital marketing agency based in St. George, Utah, owned and operated by Joseph Timpson. We provide SEO, AI marketing (GEO/LLM optimization), paid ads, paid media, and related growth services to small and mid-sized businesses across the United States.
This Privacy Policy explains how we handle personal information collected through timpsonmarketing.com (the "Site") and through our client services. By using the Site or engaging us, you agree to this policy.
We collect only what we need to operate the Site, deliver our services, and communicate with you.
If you connect Google Analytics, Google Search Console, Google Ads, Google Business Profile, or Meta accounts to us as part of an audit or engagement, we receive performance data from those platforms. We do not buy contact lists.
We do not sell your personal information. We do not share your personal information with advertisers or data brokers for them to market to you.
If you are in the European Economic Area or the United Kingdom, we process your personal information under the following legal bases:
The Site uses cookies and similar technologies for three purposes:
You can control cookies through your browser settings, opt out of GA4 with the Google Analytics Opt-out Browser Add-on, opt out of Meta ads in your Meta ad preferences, and opt out of personalized Google ads in your Google Ad Settings.
We rely on a limited set of vendors to operate. Each one processes data only for the purpose described and is bound by their own terms and privacy policies.
We share personal information only in these limited situations:
We keep personal information only as long as it is needed for the purposes described in this policy. Inquiry data is retained for up to 24 months from your last interaction. Client engagement data is retained for the duration of the engagement and up to seven years afterward to comply with tax, accounting, and legal obligations. Marketing email lists are retained until you unsubscribe. You can ask us to delete your information sooner (see Section 9).
Depending on where you live, you may have the right to:
California residents (CCPA/CPRA): you have the right to know what personal information we collect, the right to delete it, the right to correct it, and the right to opt out of the sale or sharing of personal information. We do not sell personal information.
To exercise any of these rights, email joseph@timpsonmarketing.com. We respond within 30 days. We will not discriminate against you for exercising your rights.
We use reasonable administrative, technical, and physical safeguards to protect personal information, including TLS encryption in transit, access controls, multi-factor authentication on internal accounts, and the principle of least privilege when sharing client access. No method of transmission or storage is perfectly secure. If we ever experience a breach affecting your personal information, we will notify you and the appropriate authorities as required by law.
The Site and our services are intended for businesses and adults. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA/UK). If you believe a child has provided us personal information, contact us and we will delete it.
Timpson Marketing operates from the United States, and our infrastructure and vendors are primarily U.S.-based. If you access the Site or engage us from outside the United States, your information will be transferred to and processed in the United States. By using the Site, you consent to this transfer.
Some browsers transmit "Do Not Track" signals. Because there is no industry consensus on how to interpret these signals, the Site does not respond to them. You can still control tracking through the cookie controls described in Section 5.
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated through the Site or, where appropriate, by email. Continued use of the Site after a change constitutes acceptance of the updated policy.
We engage in business-to-business email outreach as part of our marketing activities. This section explains how it works and your rights.
Why we contact you. If you receive an email from us, it is because we identified your business as a potential fit for our marketing services. We obtain contact information from publicly available sources (your business website, professional directories, business publications) or licensed B2B data providers. We do not purchase consumer lists.
Lawful basis for processing (GDPR / EEA recipients). We rely on legitimate interest under Article 6(1)(f) GDPR. Our legitimate interest is the promotion of our marketing services to businesses whose public marketing presence indicates they may benefit. We have conducted a balancing test and concluded that the limited, professional, and easily reversible nature of our outreach does not override the rights and freedoms of the recipient.
California recipients (CCPA). Business contact information used for B2B outreach is excluded from CCPA's definition of "personal information" while you are acting in your professional capacity. You retain the right to request deletion of any information we have about you at any time.
Sender identification. Cold emails are sent by Joseph Timpson, owner of Timpson Marketing. The sender name and email address shown are accurate and reachable. We do not use false header information, deceptive subject lines, or spoofed identities.
Unsubscribe. Every email we send includes a one-click unsubscribe link, honored within 10 business days per CAN-SPAM Section 5(a)(4). Once unsubscribed, your contact information is removed from active campaigns and added to a permanent suppression list to prevent future contact.
How to opt out manually. Reply to any email with "unsubscribe" or "remove" in the subject line or body. Or email privacy@timpsonmarketing.com directly. Or use the unsubscribe link in the email footer.
Data retention. Outreach contact data is retained for up to 24 months from the last sent email, after which it is deleted unless you have engaged with us (replied, booked a call, or become a client). Suppression-list entries are retained indefinitely to prevent re-contact.
Data processors. We use the following third-party platforms for email outreach, each bound by data processing agreements where applicable:
Postal contact address (CAN-SPAM Section 5(a)(5) compliance).
Timpson Marketing
2505 South River Road, Ste 2, PMB 1027
St. George, UT 84790
Questions, requests, or complaints about this policy or your personal information go to:
Joseph Timpson, Owner
Timpson Marketing
2505 South River Road, Ste 2, PMB 1027
St. George, UT 84790
Email (general): joseph@timpsonmarketing.com
Email (privacy): privacy@timpsonmarketing.com
Web: timpsonmarketing.com/contact
