Lunar Reach Privacy Policy
Last updated: September 2026
1. Introduction
This Privacy Policy explains how Ashley Hyman trading as Lunar Reach (“Lunar Reach”, “we”, “us” or “our”) collects, uses, stores and protects personal information.
We are committed to handling personal information responsibly and in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
For personal information collected for our own business purposes, the data controller is:
Ashley Hyman trading as Lunar Reach
88–90 Wilton St
Denton
Manchester
M34 3NH
Email: terms@lunar-reach.co.uk
Website: lunar-reach.co.uk
For certain services provided to clients, Lunar Reach may instead act as a data processor on behalf of the client. This is covered separately within our client agreements and, where appropriate, our Data Processing Agreement.
2. Information We May Collect
Depending on how you interact with Lunar Reach, we may collect information including:
Contact information
- Name
- Business name
- Email address
- Telephone number
- Business address
Enquiry information
- Website URL
- Services you are interested in
- Information submitted through website forms
- Messages and correspondence
- Information provided during telephone calls or meetings
Client information
- Contact details
- Project information
- Proposals and quotations
- Contracts
- Invoices and payment records
- Communications
- Information required to provide our services
We do not normally need to collect payment-card details directly. Where payments are processed through third-party providers, those providers may process payment information under their own privacy terms.
3. Website and Analytics Information
When you use the Lunar Reach website, we may collect technical information including:
- IP address
- Browser type
- Device type
- Operating system
- Pages visited
- Approximate geographic information
- Referring website or source
- Time spent on pages
- Website interactions
- Marketing attribution information
We may use services including Google Analytics 4 and Google Tag Manager to understand how visitors interact with our website.
We may also measure actions such as successful enquiry-form submissions and telephone or email-link interactions to understand how effectively our website generates enquiries.
Where non-essential analytics or advertising technologies require consent, they should not be activated until the appropriate consent has been obtained.
The ICO states that visitors must be informed about cookies and, where cookies aren’t strictly necessary, their agreement is generally required. Information Commissioner’s Office
4. Information Submitted Through Our Website
When you complete a form on our website, such as requesting a:
- Free SEO Report
- Free Website Review
- Free Google Ads Review
- Free Social Media Review
- Free Marketing Audit
- quotation; or
- general enquiry,
we may collect the information you provide so that we can respond to your request.
This may include your name, email address, telephone number, website address and details about your business.
5. How We Use Personal Information
We may use personal information to:
- respond to enquiries;
- prepare proposals and quotations;
- provide contracted services;
- communicate with clients;
- manage projects;
- manage client accounts;
- provide customer support;
- maintain business records;
- issue invoices and manage payments;
- analyse website performance;
- measure marketing effectiveness;
- improve our website and services;
- prevent fraud and protect our systems;
- comply with legal obligations; and
- send marketing communications where permitted by law.
We will not use personal information for purposes incompatible with the reason it was originally collected unless permitted by law.
6. Our Lawful Bases
Depending on the circumstances, we may process personal information under one or more lawful bases.
Contract
Where processing is necessary to enter into or perform a contract, such as providing marketing or website services to a client.
Legitimate interests
Where processing is reasonably necessary for the operation and development of Lunar Reach, provided those interests are not overridden by an individual’s rights.
Examples may include responding to business enquiries, maintaining client relationships, improving our services, preventing fraud and understanding the effectiveness of our website and marketing.
Consent
Where you have given us consent for a particular activity and consent is the appropriate lawful basis.
Where processing relies upon consent, you may withdraw that consent.
Legal obligation
Where processing is necessary to comply with a legal or regulatory obligation.
The ICO requires privacy information to explain both the purposes for which information is processed and the lawful basis relied upon. Information Commissioner’s Office
7. Marketing Communications
We may send marketing communications where we have an appropriate lawful basis and where permitted by applicable electronic-marketing and data-protection legislation.
Where consent is required, we will seek consent before sending such communications.
You can unsubscribe from marketing communications at any time by using an unsubscribe facility within the communication or contacting:
Opting out of marketing will not prevent us from sending necessary communications relating to an existing client relationship, project, contract, invoice or service.
8. Client Data We Process
When providing services to clients, Lunar Reach may be given access to systems containing personal information.
These may include:
- website enquiry data;
- CRM systems;
- email-marketing databases;
- customer contact details;
- analytics information;
- advertising information;
- social-media accounts;
- website administration systems.
Where we process personal information solely on a client’s instructions, the client will normally be the data controller and Lunar Reach will act as a data processor.
Our Data Processing Agreement provides additional terms governing this processing.
9. Sharing Personal Information
We do not sell personal information.
We may share information with trusted third-party providers where reasonably necessary to operate our business or provide our services.
These may include providers of:
- website hosting;
- cloud storage;
- email;
- analytics;
- advertising;
- accounting;
- CRM software;
- email marketing;
- website software;
- project-management tools;
- security services; and
- professional advice.
Depending on the services used, this may include organisations such as Google and other technology providers.
We may also disclose information where required by law or where reasonably necessary to establish, exercise or defend legal rights.
The ICO requires privacy information to explain recipients, or categories of recipients, where applicable. Information Commissioner’s Office
10. International Transfers
Some technology providers used by Lunar Reach may process or store information outside the United Kingdom.
Where personal information is transferred internationally, we will take reasonable steps to ensure an appropriate legal mechanism or safeguard is in place where required.
This may include applicable UK adequacy regulations or approved contractual safeguards.
11. How Long We Keep Information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting and contractual requirements.
Different information may therefore have different retention periods.
For example, we may retain:
- enquiry information while the enquiry remains relevant;
- client information throughout the client relationship;
- project records after completion where reasonably required;
- financial and accounting records for legally required periods;
- marketing preferences until changed or withdrawn.
Information that is no longer reasonably required will be deleted, anonymised or securely disposed of where appropriate.
The ICO specifically identifies retention periods as information that individuals should be given within privacy information. Information Commissioner’s Office
12. Security
Lunar Reach takes reasonable technical and organisational measures to protect personal information against:
- unauthorised access;
- accidental loss;
- destruction;
- alteration;
- disclosure; and
- misuse.
Measures may include access controls, strong passwords, multi-factor authentication, software updates, website security tools and appropriate access restrictions.
No internet-based system can be guaranteed to be completely secure.
13. Your Data Protection Rights
Depending on the circumstances, UK data-protection law may give you rights relating to your personal information, including rights to:
- access personal information held about you;
- request correction of inaccurate information;
- request deletion in certain circumstances;
- request restriction of processing;
- object to certain processing;
- request portability of certain information; and
- withdraw consent where processing relies upon consent.
Not every right applies in every circumstance.
To exercise a data-protection right, contact:
We may need to verify your identity before responding.
The ICO identifies these individual rights as part of the information that organisations should communicate to people. Information Commissioner’s Office
14. Automated Decision-Making
Lunar Reach does not currently use personal information to make solely automated decisions that produce legal or similarly significant effects on individuals.
If this changes, this Privacy Policy will be updated accordingly.
15. Cookies
Our website uses cookies and similar technologies for functions such as website operation, analytics and potentially advertising measurement.
More information is provided within our separate Cookie Policy.
Where required, non-essential cookies will be controlled through our cookie-consent mechanism.
16. Third-Party Websites
Our website may contain links to third-party websites.
Lunar Reach is not responsible for the privacy practices of third-party websites. Visitors should review the relevant privacy information before providing personal information to those services.
17. Children
Lunar Reach provides digital marketing and related services primarily to businesses and does not intentionally provide its services to children.
We do not knowingly seek to collect children’s personal information through our business website.
18. Complaints
If you have concerns about how Lunar Reach has handled your personal information, please contact us first so that we can investigate.
Email: terms@lunar-reach.co.uk
You also have the right to raise concerns with the Information Commissioner’s Office (ICO), the UK’s data-protection regulator.
Information Commissioner’s Office
19. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or data-processing practices.
The latest version will be published on the Lunar Reach website with an updated revision date.
20. Contact Us
For questions regarding this Privacy Policy or the way Lunar Reach handles personal information, contact:
Ashley Hyman trading as Lunar Reach
88–90 Wilton St
Denton
Manchester
M34 3NH
Email: terms@lunar-reach.co.uk
Website: lunar-reach.co.uk
Last updated: September 2026