Privacy policy.
What we collect, why, who else touches it, and how to make us stop. Written to be read, not skimmed past.
Last updated: July 2026
Who we are
EraLean is a growth agency based in Aylesbury, United Kingdom. For the purposes of UK data protection law, EraLean is the controller of the personal data described on this page — the one responsible for looking after it.
Anything privacy-related, email asaf@eralean.com. You'll get a reply from a person, not a form letter.
What we collect
We only collect what you give us or what the site needs to work:
- Enquiry and audit-form data. When you request a free audit or get in touch — by form, email, or WhatsApp — we receive what you share: your email address, your website address if you give it, your name and contact details, and whatever you tell us about your business. The audit form itself asks only for your email and (optionally) your website, plus a note of which service you were looking at.
- Booking data. Calls are booked through Calendly, which collects your name, email, and the time you pick, and passes those to us so the call can happen.
- Usage analytics. Only if you accept cookies (next section): which pages get visited, roughly where visitors come from, and whether ads we run led to an enquiry.
- Performance data. Our host, Vercel, measures how fast pages load. This is cookieless and doesn't identify you.
We don't sell personal data. Ever.
Cookies and analytics
On your first visit, a banner asks whether we can use measurement cookies. Nothing loads until you answer. If you press Accept, three tools start running: Google Analytics (how the site is used), Google Ads conversion tracking, and the Meta Pixel (whether our ads on those platforms actually work). If you press Decline, none of them load — and the site works exactly the same.
The site sets two small cookies of its own, neither used for tracking:
el_consent— remembers your accept/decline choice for 180 days, so the banner doesn't nag you on every visit.el_audit_seen— remembers that you've already seen the audit pop-up, so it doesn't reappear for 30 days.
To withdraw consent, clear this site's cookies in your browser settings. The banner will reappear on your next visit and you can decline — the measurement tools won't load again.
Who else handles your data
We use a small number of well-known services to run the site and respond to you. Each processes data under its own privacy policy:
- Google — Google Analytics and Google Ads measurement, only after you accept cookies. The site's fonts are also served from Google Fonts, so your browser requests font files from Google's servers when a page loads.
- Meta — the Meta Pixel for ad measurement, only after you accept cookies. If you choose to message us on WhatsApp (a Meta service), that conversation is covered by WhatsApp's own terms and privacy policy.
- Calendly — handles call bookings and the details you enter to book.
- MailerLite — stores audit-form submissions (your email and website address) and sends the audit and any follow-up emails. Every email includes an unsubscribe link that works.
- Vercel — hosts the site and provides the cookieless page-speed measurement mentioned above.
Why we're allowed to use it
UK GDPR requires a lawful basis for each use. Ours are:
- Consent — for the measurement cookies (Google Analytics, Google Ads, Meta Pixel) and for marketing emails. You can withdraw either at any time: clear the site's cookies, or hit unsubscribe.
- Legitimate interest and steps toward a contract — for replying when you enquire, preparing the audit or proposal you asked for, and keeping the site secure and working.
How long we keep it
Only as long as it's useful to you or us — in plain terms:
- Enquiry and audit data: while we're talking, and for a reasonable period afterwards so we have context if you come back. If nothing comes of it, it gets deleted.
- Email list: until you unsubscribe or ask us to remove you — then you're removed.
- The consent cookie expires after 180 days, at which point the banner asks you again.
- Client records connected to paid work: as long as UK tax and accounting rules require.
Your rights
Under UK GDPR you can ask us, at any time, to:
- show you the personal data we hold about you (access);
- correct anything that's wrong (rectification);
- delete it (erasure);
- limit what we do with it (restriction);
- stop using it for a particular purpose (objection);
- hand it over in a portable format (portability);
- withdraw any consent you've given — without affecting what happened before.
Email asaf@eralean.com and we'll respond within a month. If you're not happy with how we handle it, you can complain to the UK's Information Commissioner's Office at ico.org.uk.
Changes to this policy
If our practices change, this page changes with them, along with the date at the top. Significant changes get flagged more visibly than a quiet edit. This version is effective from July 2026.