Privacy Policy

Online Resource Services

Phone: 0330 126 0393

Email: info@online-resource-services.com

Online Resource Services is a social media management service operated by Casey Williams, based in Cardiff, UK.

1. Who I Am

I provide social media management services to individuals and small businesses, including content planning, content creation, community engagement, and growth strategy. For the purposes of UK data protection law, I am the Data Controller of your personal data.

2. What Information I Collect

When you enquire about or sign up for my services, I may collect:

  • Identity & Contact Data: Full name, business name, phone number, email address, and billing address.

  • Brand & Business Information: Your brand guidelines, goals, target audience, and content preferences, used to plan and create content on your behalf.

  • Account Access Data: Login credentials or access permissions for your social media platforms (such as Instagram, Facebook, or TikTok) and any scheduling or reporting tools, where you grant this to allow me to deliver the service.

  • Content & Assets: Photos, videos, logos, and other brand assets you provide for use in posts.

  • Payment Information: Billing details processed through a third-party payment provider. I do not store full card details myself.

  • Technical Data: IP address, browser type, and website usage data (via cookies).

3. How I Collect Your Data

I collect information when:

  • You complete an enquiry or contact form on my website.

  • You contact me via phone, email, or WhatsApp.

  • You grant me access to a social media account, page, or platform as part of an agreed engagement.

  • You browse my website.

4. Legal Basis for Processing (UK GDPR)

I process your personal data under the following lawful bases:

  • Contractual Necessity: To provide the social media management services you have engaged me for.

  • Consent: Where you agree to your feedback being used as a testimonial, or agree to marketing communications.

  • Legitimate Interests: To improve my services and manage my business efficiently.

  • Legal Obligation: For tax, accounting, and record-keeping requirements.

5. How I Use Your Information

I use your data to:

  • Plan, create, and schedule content across your agreed platforms.

  • Reply to comments and messages on your behalf, where agreed.

  • Track performance and adjust strategy over time.

  • Maintain required business and accounting records.

I do not sell, rent, or share your personal data with third parties for marketing purposes.

6. Account & Platform Access

Where you grant me access to your social media accounts, pages, or related tools, this access is used solely to deliver the agreed work.

I do not use this access for any purpose beyond the scope of the agreed engagement, and I do not share login details or account access with third parties, other than tools or software directly used to carry out the work.

At the end of an engagement, access can be revoked by you at any time, or removed by me on request.

7. Content & Testimonials

With your permission, I may reference work delivered for your account, or feedback you’ve shared, as a testimonial or example of my work.

This will only be shared publicly with your explicit consent, and you may withdraw this consent at any time.

8. Cookies

My website uses cookies to improve your user experience and monitor performance. You may accept or reject non-essential cookies via the cookie banner on this website. Essential cookies cannot be disabled as they are required for the site to function. You may also disable cookies through your browser settings at any time.

9. Data Retention

I retain:

  • Appointment, contract, and transaction records: For up to 6 years (for UK tax and accounting purposes).

  • Enquiry data: For up to 12 months.

  • Account access credentials: Only for the duration of the engagement, and removed or revoked once the engagement ends.

  • Content and brand assets: Only for as long as needed to deliver the service, or until you ask for them to be deleted.

After these periods, data is securely deleted or anonymised.

10. Data Security

I take appropriate measures to protect your personal data, including:

  • Secure, encrypted storage of client records.

  • Password-protected and access-controlled devices.

  • SSL-secured website for all data transmissions.

11. Your Rights

Under UK data protection law, you have the right to request access to your data, correction of inaccurate information, or deletion of your records. To exercise these rights, please contact me at: info@online-resource-services.com.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at https://www.ico.org.uk.

12. Changes to This Policy

I may update this Privacy Policy from time to time. The latest version will always be available on this page.