Privacy policy

Who this policy is for

Unbury ("Unbury", "we", "our", "us") is an email deliverability service operated by Mohamed Bashir, based in the United Kingdom. This policy applies to visitors to unbury.co and to individuals who engage Unbury for an audit, campaign, or retainer.

For the purpose of the UK GDPR, the EU GDPR, and any equivalent data protection legislation, Unbury is the data controller of the personal information described below.

What we collect

Site usage

• Anonymised analytics via Google Analytics 4 — only if you accept analytics cookies via the consent banner.
• Standard server logs recorded by our hosting provider (IP address, browser type, referring URL, timestamp) retained for up to thirty days for security and abuse-prevention purposes.
• Self-hosted first-party visitor analytics that record referrer and approximate geographic region. This does not use cookies and does not identify individual visitors.

Information you submit

When you request an audit, book a call, submit the scorecard, or otherwise contact us, we collect the information you provide directly. That typically includes:

• Your name and email address
• Your business name and sending domain
• Your email service provider and approximate list size
• Any campaign content, screenshots, or context you share so we can respond

How we use your information

• To respond to your enquiry, deliver the service you have requested, and communicate about that work.
• To send transactional email related to your engagement (audit delivery, campaign approvals, invoices).
• To improve the site using aggregated, anonymised usage data.

We do not sell, rent, or otherwise share your personal information with third parties for their marketing purposes. We do not build advertising profiles about you.

Cookies and tracking

We use Google Analytics 4 in Consent Mode v2. The analytics cookies (_ga, _ga_*) are set only after you affirmatively accept them via the consent banner. Advertising, remarketing, and personalisation cookies are never set — those consent categories are hard-coded to "denied".

You may withdraw or change your consent at any time by clicking the Cookie settings link in the footer of any page. Rejecting the analytics cookie does not affect the functionality of the site.

Third-party processors

Your information may be handled on our behalf by the following processors, each of whom has appropriate data-protection safeguards in place:

• Hostinger — website and database hosting (EU).
• Google Analytics — anonymised analytics (Ireland, subject to your consent).
• Brevo — transactional email delivery (France).
• Cal.com — call booking widget on book.unbury.co.

Data retention

• Enquiries and client records — retained for the duration of the engagement and for three years thereafter, unless you ask us to delete them earlier.
• Analytics data — retained by Google Analytics for twenty-six months.
• Server logs — up to thirty days.

Your rights

Under the UK GDPR, the EU GDPR, and comparable legislation, you have the right to:

• Access the personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Request deletion of your personal information ("the right to be forgotten"), subject to legitimate exceptions.
• Object to the processing of your information or ask us to restrict it.
• Withdraw consent for analytics cookies at any time.
• Receive a portable copy of the information you have provided directly.

To exercise any of these rights, email mb@unbury.co. We will respond within thirty days.

You also have the right to lodge a complaint with your local data-protection supervisory authority — for UK residents, the Information Commissioner's Office at ico.org.uk.

Data security

We take reasonable technical and organisational measures to protect your personal information — encrypted transport (HTTPS), access controls on our admin systems, and hosting with providers that maintain industry-standard security certifications. In the event of a personal data breach that is likely to result in a risk to your rights, we will notify affected individuals and the relevant supervisory authority within seventy-two hours, as required by GDPR.

Chrome extension

Our Chrome extension runs entirely on your device: it collects no personal data, stores its settings locally in your browser only, and sends nothing to our servers or to any third party.

Children

Unbury's services are not directed at persons under the age of sixteen. We do not knowingly collect personal information from children. If you believe a child has provided information to us, please contact mb@unbury.co and we will delete it promptly.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices, the services we use, or applicable law. Material changes will be indicated by updating the effective date at the top of this page. Continued use of the site after a change constitutes acceptance of the updated terms.