Privacy Policy
This policy explains how Mike Croft, trading as MGGA, collects and uses personal information when you visit this website, watch a video, complete an application, book a call, contact us, or become a client.
Last updated: 12 August 2026Who is responsible for your data?
Mike Croft, trading as MGGA, is the data controller for the processing described in this policy. Contact: mike@mgga.agency.
1. Who this policy covers
This policy covers website visitors, prospective clients, people who submit an application or book a call, business contacts, and current or former clients. Our services are intended for businesses and their authorised representatives, not children.
2. Information we collect
Information you provide
- Contact and identity information, such as your name, business email address, telephone number, role, company, store name and website URL.
- Application information, including monthly store revenue band, ecommerce status, Google Ads spend band, current advertising challenge and decision-making authority.
- Booking information, call details, correspondence, notes and any information you choose to share during an audit or consultation.
- If you become a client, contract, billing, invoicing, account-access and service-delivery information.
Information collected automatically
- IP address, approximate location, browser, device, operating system, referring page, pages viewed, timestamps and interaction events.
- Video engagement, application-start and qualification events, call-booking events, advertising identifiers, cookies and similar technologies.
- Security, diagnostic and hosting logs needed to operate and protect the website.
Information used while providing services
Where a client authorises access, we may process advertising, Merchant Center, analytics, ecommerce, product-feed, attribution, landing-page, creative and performance information. The client remains responsible for ensuring it has authority to provide access and instruct us to process that information.
3. How and why we use information
| Purpose | Typical information | Lawful basis |
|---|---|---|
| Responding to enquiries, assessing fit and arranging calls | Contact, company and application information | Legitimate interests in operating our business, and steps requested before entering a contract |
| Providing audits, consulting and Google Ads services | Contact, contract, account-access and performance information | Performance of a contract and legitimate interests |
| Website operation, security and fraud prevention | Device, log and security information | Legitimate interests and, where applicable, legal obligations |
| Analytics, attribution and advertising measurement | Cookie identifiers, visits, events and advertising data | Consent where required, otherwise legitimate interests where permitted by law |
| Business communications and relevant marketing | Contact details, relationship and communication preferences | Consent or legitimate interests, subject to applicable direct-marketing rules |
| Accounting, legal claims and compliance | Contracts, invoices, communications and transaction records | Legal obligations and legitimate interests |
4. Application routing and profiling
The website uses your answers about revenue and ecommerce status to route you to an appropriate next step. This is a limited qualification process. It does not make a decision that has legal or similarly significant effects. You may contact us if you want a person to review the outcome.
5. Cookies and tracking technologies
The website may use the following categories of technologies:
- Essential technologies needed for security, page delivery and booking functionality.
- Analytics and advertising technologies from Google and Meta to measure visits, applications and advertising performance.
- Video technologies from Vidalytics to deliver the VSL and measure video interaction.
- Booking technologies from GoHighLevel or LeadConnector to display the calendar and process bookings.
Where the law requires consent, non-essential technologies should only be used after that consent. You can also restrict cookies through your browser settings, although parts of the site may not function as intended.
6. Who we share information with
We do not sell personal information. We may disclose it to service providers and professional advisers where needed for the purposes above, including:
- GoHighLevel, LeadConnector and related calendar, CRM, email and communication providers.
- Google, including Google Ads and related measurement services.
- Meta, including Meta Pixel and Conversions API services.
- Vidalytics for video hosting and engagement measurement.
- Vercel and other website hosting, content-delivery, security and technical providers.
- Payment, invoicing, contract, bookkeeping and professional-advice providers when relevant.
- Authorities, courts, regulators, buyers or advisers where required by law or reasonably necessary to protect rights, complete a business reorganisation or handle a legal claim.
7. International transfers
Some providers may process information outside the United Kingdom. Where required, we rely on an adequacy regulation, approved contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum, or another lawful transfer mechanism. You may contact us for more information about the safeguards relevant to your data.
8. How long we retain information
- Application and enquiry records are normally retained for up to 24 months after the latest meaningful contact, unless a longer period is reasonably required.
- Client, contract, financial and service records are normally retained for the relationship and up to six years afterwards for tax, accounting and legal purposes.
- Marketing information is retained until you unsubscribe or object. We may keep minimal suppression information so that we honour that request.
- Technical, cookie and platform data follows the configured retention periods of the relevant provider and is reviewed against business and legal needs.
We may keep information longer where necessary for a dispute, fraud prevention, legal obligation or enforcement of an agreement.
9. Security
We use proportionate technical and organisational measures designed to protect personal information. No online service is completely secure, so we cannot guarantee absolute security.
10. Your rights
Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase, restrict or port your information, and to object to certain processing. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.
You have an explicit right to object to direct marketing at any time. Email mike@mgga.agency or use the unsubscribe method in a marketing message.
11. Complaints
Please contact us first so we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner's Office. Visit ico.org.uk/make-a-complaint or call 0303 123 1113.
12. Other websites and changes
Links to third-party websites are governed by their own privacy policies. We may update this policy when our services, providers or legal obligations change. The latest version will appear here with a revised date.
13. Contact
Privacy questions or rights requests can be sent to:
Mike Croft, trading as MGGA
mike@mgga.agency