Only essential cookies run unless you allow more; visits are counted anonymously, without cookies. With your consent I add analytics and session replay (form inputs hidden), and identify your company from your IP address (IP2Location and Hunter.io) to sync high-confidence matches (60% or more) to my CRM. You can refuse both.
Marketing Upgrade ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.
This policy is compliant with the General Data Protection Regulation (GDPR), the Dutch Data Protection Act (Autoriteit Persoonsgegevens), and applicable Dutch law. Please read this policy carefully. If you do not agree with our practices, please do not use our services.
Data Controller: Marketing Upgrade
Location: Netherlands (CET)
Email: hi@marketingupgrade.pro
Responsibility: We are the data controller for personal data collected through our website and services.
A. Information You Provide Directly:
B. Information Collected Automatically:
Visitor Tracking & Company Identification: We use IP enrichment services (IP2Location and Hunter.io) to identify your company from your IP address. When confidence is ≥60%, we sync this data to our Notion CRM for lead qualification. This includes: company name, domain, industry, size, location, visit count, and form completion status. This processing is based on our legitimate interest in B2B lead generation.
C. Cookies and Tracking: We use cookies to enhance user experience. See our Cookie Policy for details.
D. Unfinished intake forms: When you complete the first step of the intake form (/apply) and continue, our server emails a six-digit code to the address you gave, to confirm it is yours. The code is not stored: it is signed, so the server can check it without keeping it. Once you enter it, the contact details from that step (name, email address and company, plus phone number and website if you gave them) and any engagement type or challenge already selected are sent to us by email, so we can follow up if you do not finish the form. They are not stored in a database. The legal basis is our legitimate interest in answering an enquiry you started. We delete that email within 30 days if you do not continue, and sooner if you ask. Our server also records that an intake was started, without your name, email address, phone number or company.
E. Calculator and audit emails: Before the calculator and audit forms email you a result, our server emails a six-digit code to the address you gave, to confirm it is yours. The code is not stored: it is signed, so the server can check it without keeping it. Once you enter it, the result is sent to that address, with a copy to us so we can reply. Our server also records that a code was sent and whether it was entered, without your email address.
We process your personal data based on the following legal grounds:
We use collected information for:
We do not sell your personal data. We may share data with:
All third parties are bound by confidentiality agreements and process data only as instructed.
We use Google Analytics 4 (measurement ID G-7286DPK512) with IP anonymisation and Consent Mode v2. Until you grant analytics consent in the cookie banner, GA4 receives only consent-mode signals — no personal identifiers, no advertising signals, no cross-site tracking. For details see the Google Privacy Policy.
We partner with Microsoft Clarity to capture how you use and interact with our website through behavioural metrics, heatmaps, and session replay so we can improve the site. Until you grant analytics consent, Clarity runs in cookieless mode (no first- or third-party cookies set, no persistent identifier). When you grant consent, Clarity records the consent and may use first- and third-party cookies and other tracking technologies to attribute behaviour to a session. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.
We use PostHog (data hosted in the EU) to measure how the site is used and which pages lead to an enquiry. Until you accept analytics cookies, or if you refuse them, PostHog counts visits without cookies: nothing is stored on your device, a visit is recognised by a privacy-preserving hash made on PostHog's servers, and IP addresses are discarded. If you accept, PostHog uses first-party cookies to recognise a returning visit and may record the session, with every form input masked. When you submit the intake form, our server records that an intake arrived and the scope you chose (tier, engagement type, challenge, timeline, budget range, company size, industry), never your name, email address, phone number or company. For details see the PostHog privacy policy.
We retain personal data for as long as necessary:
Under GDPR, you have the right to:
To exercise these rights, contact us at hi@marketingupgrade.pro. We will respond within 30 days (GDPR requirement).
We implement industry-standard security measures:
While we strive to protect your data, no system is 100% secure. We will notify you of any data breaches as required by GDPR (within 72 hours).
Your data is primarily processed in the Netherlands. If we transfer data outside the EU/EEA, we ensure adequate safeguards (Standard Contractual Clauses or adequacy decisions) as required by GDPR.
Data Protection Officer / Contact:
Email: hi@marketingupgrade.pro
Location: Netherlands
Complaints: You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at www.autoriteitpersoonsgegevens.nl if you believe we've violated your privacy rights.
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes via email or website notice. Continued use of our services constitutes acceptance of the updated policy.
Last Updated: September 28, 2026