Privacy Policy
Last updated: 21 April 2026. Review schedule: annually.
This Privacy Policy explains how Good and Proper Marketing Ltd ("we", "us", "our"), the publisher of Cfoday, collects, uses, and protects your personal data when you visit cfoday.com. We are committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
The data controller for cfoday.com is Good and Proper Marketing Ltd, registered in England and Wales (Companies House No. 14628441), with registered address at The Faversham, 1-5 Springfield Mount, Leeds, LS2 9NG, United Kingdom.
For data protection enquiries: privacy@cfoday.com
2. What Personal Data We Collect
- Usage data: IP address, browser type, pages visited, time on site, and referring URL — collected for security monitoring and fraud prevention purposes.
- Newsletter subscription: Email address, consent timestamp, and IP address when you subscribe to our newsletter.
- Cookie consent preference: Your cookie consent choice is stored locally in your browser. See our Cookie Policy for full details.
3. Lawful Basis for Processing
- Consent (Article 6(1)(a) UK GDPR): Advertising cookies are only set with your explicit consent via our cookie consent banner. Newsletter subscription is consent-based.
- Legitimate interests (Article 6(1)(f) UK GDPR): We process certain data for fraud prevention and site security only, where this does not override your rights and freedoms. A Legitimate Interests Assessment (LIA) has been conducted for these activities. This basis is not used for tracking, advertising or analytics cookies.
4. How We Use Your Data
- To operate and improve the cfoday.com website
- To send our newsletter to subscribers who have consented
- To serve relevant advertising (only with your consent via cookie preferences)
- For security monitoring and fraud prevention
5. Third-Party Services
We currently do not use any third-party analytics or tracking services. Should we integrate any third-party services in future (such as analytics or advertising platforms), this page will be updated to reflect those changes before any data is processed. You will be notified via the cookie consent banner.
6. International Data Transfers
We do not currently transfer personal data outside the United Kingdom. If this changes, we will update this policy and ensure that appropriate transfer safeguards under UK GDPR are in place before any transfer takes place.
7. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"): Request deletion of your personal data where there is no compelling reason for us to continue processing it.
- Right to restriction: Request that we restrict processing of your data in certain circumstances.
- Right to data portability: Receive your data in a structured, machine-readable format.
- Right to object: Object to processing based on legitimate interests, including for direct marketing.
- Rights related to automated decision-making: We do not use automated decision-making or profiling that produces legal or similarly significant effects.
To exercise any of these rights, contact us at privacy@cfoday.com. We will respond within one month.
8. Cookie Policy Summary
We use essential cookies and, with your consent, advertising cookies. For full details, see our Cookie Policy. You can withdraw or modify your cookie consent at any time by clicking "Cookie settings" in the footer.
9. Data Retention
Newsletter subscriber data is retained until you unsubscribe. Security and access logs are retained for up to 90 days for fraud prevention purposes.
10. Complaints
If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK supervisory authority for data protection:
- Website: ico.org.uk
- Helpline: 0303 123 1113
11. Changes to This Policy
We review this Privacy Policy annually and will update it when our data processing practices change significantly. The "last updated" date at the top of this page reflects the most recent revision. Continued use of the site after a material change constitutes acceptance of the updated policy.