Version 1.0. Last updated: 28 October 2026.
This policy explains what personal information Visionary Marketing collects, why, how long we keep it, who we share it with, and the rights you have. It covers our website visionary.marketing (including the AI marketing tool directory) and our AI advisor service at ai.visionary.marketing, which we call ViMa.AI. We have written it in plain English. If anything is unclear, please contact us.
1. Who we are
Visionary Marketing is a trading name of Kaaran Ltd, a private limited company registered in England and Wales under company number 15760357. Our registered office is 30 Churchill Place, London, E14 5RE, United Kingdom.
Kaaran Ltd is the controller of the personal information described in this policy. This means we decide why and how it is used and we are responsible for protecting it.
For anything about your personal information, email [email protected].
2. The short version
- We collect only what we need to run the directory and to give you marketing advice about your business.
- Access to your business accounts (for example Google Analytics or Search Console) is read-only. We never change anything in your accounts, and you can disconnect at any time.
- We do not sell your personal information and we do not use it for advertising.
- We do not allow our AI providers to use your information to train their models.
- Our main database is in London. Where a supplier processes data outside the UK, we use the legal safeguards described in section 8.
- You can ask to see, correct or delete your information at any time.
3. What we collect
3.1 When you browse the website
- Technical information your browser sends, such as IP address, browser type, pages visited and the time of your visit. Our hosting and security providers use this to deliver the site and protect it from attack.
- Cookies and similar technologies. See section 10.
3.2 When you create an account, contact us or subscribe
- Your name, email address and the details you choose to give us, such as your company name or a message.
- If you save tools or submit a tool to the directory, the details of those tools and your account settings.
- If you subscribe to our emails, your email address and whether you open or click our emails. You can unsubscribe at any time using the link in every email.
3.3 When you use ViMa.AI (the Business Snapshot and our AI advisors)
- Your answers about your business, such as what it does, its location, size, goals, budget range, how you win customers and how your team handles marketing.
- Information about your business that we find publicly, such as your website, public business listings, public reviews and competitors. We record this about the business, not about private individuals. We do not record the names of private individuals that appear in reviews or page metadata.
- Data you choose to share from your business tools, either by uploading an export file or by connecting an account read-only. This is usually summary numbers such as website visits, search clicks, enquiries, campaign results or monthly sales.
- Your consent choices, such as when you agreed to share data and with which tool.
- Session information. We create an anonymous, secure session so that you can save your profile without creating a password. If you later add an email address, we link it to your profile.
Most of what you share with ViMa.AI is information about a business rather than about a person. Where it identifies you (for example if you are a sole trader, or you give us your name or email), we treat it as personal information under this policy.
Please do not upload information about your own customers, such as customer lists, names, emails, phone numbers or addresses. We only need totals and summaries. If a file you upload contains customer personal information by mistake, we will not use it and will delete that part.
4. Why we use your information, and our legal basis
UK and EU data protection law require us to have a lawful basis for each use. These are ours:
| What we do | Lawful basis |
|---|---|
| Run your account, the directory, your saved tools and tool submissions | Contract (providing the service you asked for) |
| Prepare your Business Snapshot and advice from your answers | Contract, or steps you asked us to take before a contract |
| Research public information about your business, its market and competitors | Legitimate interests (giving you an accurate picture of your business, which you asked for) |
| Read data from tools you connect or files you upload | Your consent, which you can withdraw at any time |
| Include your figures in anonymous benchmarks for similar businesses | Your consent (off unless you switch it on) |
| Send marketing emails | Your consent, or for existing customers our legitimate interests with an easy way to opt out |
| Follow up after 30 and 90 days to check whether our advice worked | Legitimate interests (improving the quality of our advice), with an easy way to opt out |
| Keep the service secure, prevent misuse and fix problems | Legitimate interests |
| Keep records required by law, such as tax and accounting records, and handle legal claims | Legal obligation, and legitimate interests |
Where we rely on legitimate interests, we have weighed our interests against your rights. You can object at any time (see section 9).
5. How our AI works with your information
- ViMa.AI uses AI models to read your answers, research your business, and draft findings and recommendations. A quality check runs before anything is shown to you, and a person may review reports.
- Our AI provider processes your information only to give us its answer. Under our agreement, it does not use your information to train its models.
- We do not make decisions about you that have legal or similarly significant effects using only automated means. Our recommendations are advice. You decide what to do, and we never take action in your accounts.
- AI can make mistakes. We show where each finding comes from and how confident we are, and you can correct anything in your profile.
6. Connected accounts (Google, Meta and other tools)
- When you connect an account, you approve access on that provider’s own page. We never ask for or see your password.
- We ask only for read-only access, and only to the reports we need to analyse your marketing.
- Access tokens are stored encrypted on our servers. You can disconnect from your ViMa.AI profile or from the provider’s own security settings at any time. When you disconnect, we stop collecting new data and delete the access token.
- Google user data. ViMa.AI’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Google user data only to provide and improve the features you see in ViMa.AI. We do not sell it, use it for advertising, or use it to train AI models. People at Visionary Marketing do not read it unless you ask us to, it is needed for security or the law, or it has been aggregated and anonymised.
- Meta (Facebook and Instagram) data. We use it only to analyse your own pages and ads for your report, in line with Meta’s Platform Terms. You can remove our access in your Facebook settings, and you can ask us to delete the data at any time (see section 9).
7. Who we share information with
We share information only with suppliers who help us run the service, under contracts that require them to protect it and use it only on our instructions:
| Supplier | What they do | Where |
|---|---|---|
| Supabase | Database, secure sessions and file storage for ViMa.AI | London, UK |
| Vercel | Runs the ViMa.AI application | London, UK for processing; some network and log services may be global |
| Anthropic | AI model that reads your answers and drafts findings | United States |
| Hostinger | Hosts the visionary.marketing website, and sends our emails | Hostinger data centres, which may be outside the UK |
| Cloudflare | Website security, performance and email forwarding | Global network |
We may also share information if the law requires it, to protect our rights or the safety of others, or if our business is sold or reorganised (in which case the new owner must respect this policy). We will never sell your personal information or share it for others’ advertising.
8. International transfers
Where a supplier processes personal information outside the UK, we make sure it is protected by a legally recognised safeguard. This is either a UK adequacy decision (for example for the European Economic Area, or for US companies certified under the UK Extension to the EU-US Data Privacy Framework), or the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses. You can ask us for details.
9. Your rights
You have the right to:
- Access the personal information we hold about you and get a copy.
- Correct information that is wrong or incomplete. You can also edit most of your profile yourself.
- Delete your information. You can ask us to delete your whole profile, connected data and uploaded files.
- Restrict how we use your information, or object to uses based on legitimate interests, including all marketing.
- Withdraw consent at any time, for example by disconnecting an account or switching off benchmark sharing. This does not affect what we did before.
- Data portability: receive the information you gave us in a common, machine-readable format.
To use any of these rights, email [email protected]. We may need to confirm your identity. We will reply within one month, or tell you within that month if we need longer for a complex request (up to two further months). There is normally no charge.
10. Cookies and similar technologies
- Strictly necessary: these keep you logged in, remember your basket or saved tools, keep your ViMa.AI session secure and protect the site from attack. They do not need your consent.
- Analytics: if we use analytics to count visits and improve the site, we will tell you here which tool we use, and you will be able to refuse it easily and for free. For visitors outside the UK we will ask for consent first.
- Advertising and tracking pixels: we do not use them at the moment. We will always ask for your consent before using any.
You can also block or delete cookies in your browser settings, although some parts of the site may then stop working.
11. How long we keep information
| Information | How long |
|---|---|
| Business profile, answers and reports | While you use the service, and deleted 24 months after your last activity, unless you ask us to delete them sooner |
| Uploaded files | Deleted within 90 days of upload, once we have taken the summary figures we need. The figures stay with your profile |
| Connected account data | Summary figures stay with your profile. Access tokens are deleted as soon as you disconnect |
| Anonymous benchmarks | Kept, because they cannot identify you or your business, and are only shown when at least 10 businesses are in a group |
| Account and directory data | Until you close your account, then deleted within 30 days |
| Security logs | Up to 90 days |
| Invoices and accounting records | 6 years after the end of the financial year, as UK law requires |
12. How we protect information
We use encryption in transit and at rest, strict access controls so that each user can see only their own business data, read-only access to connected accounts, two-factor authentication on our key systems and regular reviews of who has access. No system is perfectly secure, but if a breach happens that puts your rights at risk, we will tell you and the regulator as the law requires.
13. Children
Our services are for businesses and people aged 18 and over. We do not knowingly collect information from children. If you think a child has given us information, please contact us and we will delete it.
14. If you are outside the UK
- European Union and EEA: you have the same rights as described above under the EU GDPR, and you can complain to the data protection authority in your country.
- United States: we do not sell or share personal information for targeted advertising, and we do not use sensitive personal information. If you live in a state with a privacy law (for example California), you can use the rights in section 9, and we will not treat you differently for doing so.
- Canada, Australia and other countries: you can use the rights in section 9 and complain to us. You may also contact your local privacy regulator.
15. Complaints
If you are unhappy with how we have handled your information, please tell us first at [email protected], or by any other way you prefer. We will acknowledge your complaint within 30 days, look into it without undue delay, keep you updated and tell you the outcome.
You also have the right to complain to the UK regulator, the Information Commissioner’s Office (ICO), at ico.org.uk/make-a-complaint or on 0303 123 1113.
16. Changes to this policy
We will update this policy when our services or the law change. We will show the date of the latest version at the top, and if a change is significant we will tell you by email or on the site before it takes effect.