Company Policies

The Marketing Guys is a small web design and marketing business based in Whitefield, Greater Manchester, company number 15509323. These policies apply to everyone who works for or with us. Questions about any of them can go to hello@themarketing-guys.co.uk.

• Modern slavery statement
• Anti-bribery policy
• Cyber security policy
• Data assurance policy

Modern Slavery Statement

We are opposed to slavery, servitude, forced labour and human trafficking in any form. We are below the turnover threshold that requires a statement under section 54 of the Modern Slavery Act 2015, but we publish one because we think it’s the right thing to do.

• Our work is digital: design, development, copywriting, SEO and advertising. Our team is the two founders, plus trusted partners such as the specialist who delivers our SEO work.
• Our main suppliers are software, hosting and advertising platforms. We choose established suppliers who publish their own modern slavery commitments.
• We pay everyone who works with us fairly and on time, and we don’t use unpaid labour.
• Where we use stock photography, we use reputable libraries.

If you have any concern about slavery or trafficking connected to our business, tell us and we will look into it straight away.

Anti-Bribery Policy

We do not offer, pay, ask for or accept bribes, in any form, to win or keep business. This follows the Bribery Act 2010.

• We don’t make facilitation payments.
• Gifts and hospitality, given or received, must be modest, occasional and never linked to a decision about work.
• Any referral fee or commission is agreed openly and in writing.
• Freelancers and partners who work on our behalf are expected to follow the same rules.

Anyone can report a concern to us in confidence. We won’t treat anyone unfairly for raising one in good faith.

Cyber Security Policy

We build and host websites for other businesses, so keeping our systems and theirs secure is part of the job.

• Accounts. We use unique passwords stored in a password manager, and two-factor authentication on every service that offers it.
• Devices. Our laptops and phones are encrypted, locked with a password or biometrics, and kept up to date.
• The websites we build. Pages are built ahead of time and served as finished files, so there is no database or admin login on the live site to attack. Hosting includes protection against common attacks, and we monitor and back up every site.
• Least access. People only get access to the systems they need, and access is removed when a project or engagement ends.
• Incidents. If we discover a security incident affecting a client, we tell them promptly, and where personal data is involved, we report it to the ICO within 72 hours where the law requires.

Data Assurance Policy

This sets out how we look after the data and access our clients trust us with. Our privacy notice covers personal data in more detail.

• Only what we need. We only ask for the data and logins we need to do the work.
• Your accounts stay yours. Where we can, we ask to be added as a user on your domain, Google Business Profile, analytics and ad accounts, rather than owning them ourselves. You can remove our access at any time.
• Stored securely. Logins live in our password manager, never in email or chat. Files are kept in secure, access-controlled cloud storage.
• Suppliers. We use established suppliers that meet UK data protection standards. The main ones are listed in our privacy notice.
• Backups. The websites we host are backed up, and the source of every website is kept under version control.
• At the end of a project. When we stop working together, we hand over what’s yours and delete the access and data we no longer need, except records we’re required to keep by law.