Privacy Policy

1. Who We Are

StructuredAF is operated by Martingale Marketing Ltd, a company registered in Scotland (SC560322).

2. Personal Data We Collect

Data Collection Methods

We collect personal data when you:

• Complete forms on our website (structuredaf.com)
• Use our tools (StructuredAF)
• Subscribe to our email list via Bento
• Purchase products through LemonSqueezy
• Download free resources or guides
• Contact us via email or our contact form

Types of Data We Collect

Basic Contact Information

• Email address
• First name and last name
• Business name and industry

Website and Business Analysis Data

• Domain information and technical analysis
• Structured data audit results
• AI visibility scores and assessments

Application Usage Data

• Form responses and business information entered
• Generated code and structured data
• Tool usage patterns and preferences
• Progress through our applications

Technical Data

• IP address and location
• Browser type and device information
• Cookies and tracking data
• Page views and user behaviour analytics

3. How We Use Your Data

Primary Purposes

Service Delivery

• Generate structured data through StructuredAF
• Deliver your schema to your website (via our WordPress plugin and CDN for WordPress users, or via a code snippet you install on other platforms)
• Deliver email communications
• Process and fulfil your requests

Business Operations

• Manage customer accounts and subscriptions
• Provide customer support and guidance
• Send transactional emails related to our services
• Maintain and improve our applications

Marketing and Communication

• Send newsletters and educational content
• Notify you of new tools and services
• Share industry insights and best practices
• Provide ongoing value through our email list

Analytics and Improvement

• Understand how our tools are being used
• Improve user experience and functionality
• Identify popular features and content
• Optimise our services based on usage patterns

Legal Basis for Processing

• Contract performance: When providing services you've purchased
• Consent: For marketing emails and analytics cookies
• Legitimate interest: For business operations and service improvement
• Legal obligation: For compliance and record-keeping

4. Data Storage and Retention

Where Your Data Is Stored

Supabase Database (Primary Storage)

• Account information (name, email, login credentials)
• All business data you enter into StructuredAF, including your business name, description, services, courses, credentials, expertise, and any other information you provide to generate your schema
• Generated structured data and schema markup
• Usage analytics and application state
• Hosted on Supabase cloud infrastructure (EU)

Bento (Email Marketing and On-Site Tracking)

• Email addresses and subscriber preferences
• Custom fields for segmentation
• Email engagement data (opens, clicks)
• On-site behavioural tracking (pages visited, links clicked) via Bento's tracking script
• Unsubscribe preferences

Hosting Infrastructure

• Kinsta (managed WordPress hosting for structuredaf.com)
• Sevalla (application hosting for the StructuredAF app)
• Google Cloud Platform (CDN delivery of your generated schema markup for WordPress plugin users, plus general hosting infrastructure)

Third-Party Service Providers

• LemonSqueezy (payment processing - we don't store financial data)
• Google Analytics + Bing (anonymised website analytics)
• Meta, Google, Bing (advertising cookies)

Data Retention Policy

Active Users

• Data retained while you actively use our services
• Business information kept for ongoing service provision
• Generated content (schemas, reports) stored indefinitely for app functionality

Inactive Users

• Email data: Retained until you unsubscribe from Bento
• Application data: No automatic deletion (required for app functionality)
• Analytics data: Retained for business intelligence purposes

5. Data Sharing and Third Parties

Service Providers We Work With

Bento (Email Marketing and On-Site Tracking)

• Manages email subscriptions and newsletters
• Processes form submissions and lead magnets
• Tracks on-site behaviour (pages visited, links clicked) to personalise email communication
• Handles unsubscribe requests automatically

LemonSqueezy (Payment Processing)

• Processes payments for our products
• We receive purchase confirmations but not financial details
• Handles refunds and subscription management

Kinsta and Sevalla (Hosting)

• Kinsta hosts the structuredaf.com website (managed WordPress hosting)
• Sevalla hosts the StructuredAF application
• Both operate on Google Cloud Platform infrastructure

Google Cloud Platform (CDN and Hosting)

• Delivers your generated schema markup to AI crawlers and search engines (for WordPress plugin users via CDN)
• Provides hosting infrastructure for Kinsta and Sevalla

Analytics and Advertising

• Google Analytics: Website usage analytics (anonymised)
• Meta Pixel: Advertising and retargeting (if you consent to cookies)
• Google Ads: Advertising measurement
• Bing: Website usage analytics (anonymised)

Customer Support

All customer support is handled directly via email by a real human. We do not use third-party helpdesk software or AI chatbots. You can reach us via our contact form or at support@structuredaf.com. Support correspondence (name, email, and message content) is stored in our email system and retained for as long as necessary to resolve your enquiry.

Data Processing Agreements

All service providers are bound by data processing agreements that ensure your data is used only for specified purposes, appropriate security measures are in place, data is not shared with other parties, and deletion rights are respected where technically feasible.

We Never Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Your Rights and Control

Data Subject Rights (UK GDPR)

• Right to Access: Request a copy of all personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (with limitations noted below)
• Right to Restrict Processing: Request we limit how we use your data
• Right to Data Portability: Request your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing or cookies at any time

How to Exercise Your Rights

Email Management

• Unsubscribe from emails using the link in any newsletter
• Update preferences in Bento directly
• Contact us or email support@structuredaf.com for specific requests

Application Data

• Contact us at dpo@structuredaf.com for data access or deletion requests
• Deleting StructuredAF data will prevent the application from functioning
• We can provide data exports before deletion if requested

Cookie Preferences

• Use our cookie consent manager to update preferences
• Clear cookies through your browser settings
• Opt out of advertising cookies through platform preference centres

Important Limitations

Some data cannot be deleted without breaking application functionality. StructuredAF requires your business data to run the script. We'll explain any limitations before processing deletion requests.

7. Cookies and Tracking

A summary of the cookies we use and how to manage them is provided below.

Types of Cookies We Use

Essential Cookies

Required for website and application functionality. Cannot be disabled without breaking core features.

Analytics Cookies

Google Analytics for website usage insights. Bento tracking script for on-site behavioural data to personalise email communication. These help us improve user experience and content.

Marketing Cookies (Consent Required)

• Meta Pixel for Facebook/Instagram advertising
• Google Ads for search advertising retargeting
• Bing Ads for Microsoft advertising network

Managing Your Cookie Preferences

• Use our cookie consent banner to set preferences
• Change settings at any time through our cookie management tool
• Clear cookies through your browser settings
• Disabling essential cookies may affect site functionality

8. Data Security

Security Measures

• Secure cloud hosting with encryption at rest and in transit
• Regular security updates and vulnerability assessments
• Access controls and authentication for all systems
• Secure API endpoints for data transmission

Data Breach Procedures

• Immediate containment and assessment procedures
• Notification to authorities within 72 hours if required
• User notification for high-risk breaches
• Full incident investigation and remediation

Third-Party Security

All service providers maintain appropriate security certifications and regularly undergo security audits.

9. International Data Transfers

Some of our service providers may process data outside the UK:

• United States: LemonSqueezy (payments), Bento (email marketing and tracking) - adequate protection measures in place
• European Union: Supabase (primary database - GDPR compliant)
• Google Cloud Platform: Kinsta, Sevalla, and CDN infrastructure - data centre region depends on service configuration

All transfers are protected by appropriate safeguards including Standard Contractual Clauses, adequacy decisions where applicable, and additional security measures as required.

10. Children's Privacy

We do not knowingly collect personal information from children under 16. Our services are designed for business owners and entrepreneurs. If you believe we have collected information from a child under 16, please contact us immediately.

11. Changes to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. We will notify users of significant changes via email, update the "Last Modified" date at the top of this policy, and provide a summary of major changes when appropriate.

12. Contact Us

For any privacy-related questions, concerns, or requests, you can reach us via our contact form or directly by email:

If you're not satisfied with our response, you can contact the Information Commissioner's Office (ICO) in the UK.