Legal

Privacy Policy

Last updated 18 September 2026

This policy explains what personal data MERCURY PLUS LTD collects through mercuryplusads.com, why we collect it, and what you can require us to do about it. It is written to be read, not to be survived.

Who is responsible for your data

The data controller is MERCURY PLUS LTD, a company registered in England and Wales under number 17391914.

Registered office: 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
Operating office: 2 Przeworska, apt 139, 04-382 Warsaw, Poland
Data enquiries: dzmitry@mercuryplusads.com
Telephone: +48 571 213 243

What we collect

Only what you type into the enquiry form, plus the technical minimum needed to serve the page. Specifically:

Your name and work email address
Your telephone number, including the country code
Your brand's website address
The ranges you select for monthly ad spend and monthly store revenue
Which advertising platforms you currently use and your primary market
The description you write of your current constraint
A record that you asked us to make contact, and when
A record of whether you opted in to marketing messages — we store your answer either way, so a "no" is recorded as clearly as a "yes"
Server access logs kept by our hosting provider, which may include your IP address

We do not use analytics software, advertising pixels, session recording, heatmaps, or third-party trackers on this site. We do not buy contact lists, and we do not enrich or cross-reference your details against other sources.

What we do with your telephone number

The form asks for a phone number because a ten-minute call usually settles whether we are a fit faster than a week of email. We use it for four things, and no others:

Answering your enquiry: Calling or texting you about the enquiry you sent us. Our basis is legitimate interests — you asked us to make contact.
Running your account, if you become a client: Status updates on your campaigns, anything urgent affecting live spend, billing or account issues, and scheduling reviews. Our basis is performance of our contract with you.
Marketing, only if you tick the optional box: Automated marketing messages by text and email. Our basis is your consent, and you can withdraw it at any time by replying STOP.
Checking who is calling: Matching an incoming call against the number we hold, before we discuss a client account. Our basis is legitimate interests in security.

We do not make marketing phone calls. The optional box covers automated text messages and email. It is not consent to ring you with an offer. If that ever changes we will ask separately, and we would first have to screen numbers against the Telephone Preference Service and its corporate equivalent.

Marketing messages, and how to stop them

The marketing box on the form is optional and starts unticked. Leaving it alone changes nothing about your enquiry — we will still reply, and we will not treat you differently. Ticking it is never a condition of working with us.

If you do tick it, message frequency will vary, and your mobile operator's message and data rates may apply. Every message identifies us. To stop them:

Reply STOP to any text and we will stop, immediately and for good
Reply HELP to any text for information about the messages
Use the one-click unsubscribe in any email
Or email dzmitry@mercuryplusads.com and ask

Withdrawing consent is free and takes effect straight away. It does not affect anything we sent lawfully beforehand, and it does not stop messages about your own account — campaign status, billing and urgent matters are not marketing, and you keep receiving those for as long as we work together.

Checking who we are speaking to

If you telephone us about a client account, we may need to be satisfied you are entitled to discuss it. We do that by sending a single-use code by text message to the number already on our records, and asking you to read it back. We send it only to the number we already hold — never to a number given to us during the call, because that would defeat the point. The code is ours: it gives whoever holds it no access to anything of yours.

We have selected Sinch to send these messages. The integration is not live yet, so anyone telling you today that Mercury Plus has just texted you a code is not Mercury Plus.

A text message is not a confidential channel — delivering it routes your number through your own mobile operator and usually through other carriers, who are not under our contract. So our messages contain nothing but the code itself: no account details, no figures, no client names.

Things we will never ask you for

This list applies now and always, whether or not the check above is running.

We will never ask you to forward, screenshot or read out a code you received from anyone else — Meta, Facebook, Instagram, TikTok, Google, an email provider or a bank
We will never ask for a password, a code from an authenticator app, or account recovery details
We will never ask you, on a call, to add an unknown user or partner to your Business Manager

A code another service sent you is that service's own security credential. It is never ours to collect. If anyone asks you for any of the above, it is not us — whatever name they give and whatever number they appear to call from. Tell us at dzmitry@mercuryplusads.com.

Cookies and local storage

This site sets no tracking cookies. When you dismiss the notice at the bottom of the page, your browser stores a single entry (mp-notice) in local storage so the notice stays dismissed. It contains no identifier, it is never transmitted to us, and clearing your browser data removes it.

Why we use it, and on what legal basis

Answering your enquiry: Legitimate interests — you ticked the box asking us to make contact, so replying is what you came for. We do not rely on consent here: consent you cannot refuse without losing the form is not freely given, and we would rather be accurate than tick a box of our own.
Marketing messages by email or SMS: Consent, given by the separate optional box, withdrawable at any time.
Checking the identity of a caller: Legitimate interests — protecting client advertising accounts from unauthorised access.
Assessing whether we are a fit: Legitimate interests — responding accurately to a commercial enquiry you initiated.
Keeping the site available and secure: Legitimate interests — operating and protecting our own website.
Meeting legal obligations: Legal obligation, where accounting or tax rules require us to keep records.

We will not add you to a mailing list, a newsletter or an automated sequence off the back of an enquiry. If we ever want to market to you beyond answering what you asked, we will ask separately.

Who else sees it

We keep the list of processors deliberately short. As this site is built, your form submission passes through:

FormSubmit.co — receives the enquiry form and forwards it to our email inbox
Namecheap Private Email — stores the resulting message
Netlify — serves this website and keeps access logs
Sinch — selected to send the single-use codes described above. Sinch processes messaging data through group companies and infrastructure in Ireland, Germany, Sweden, Poland, France, the United Kingdom and Luxembourg, and may transfer data within its group to provide the service globally. Its data processing agreement incorporates the EU Standard Contractual Clauses together with the UK Addendum, and provides for deletion of personal data within 90 days of an account ending. Not yet in use — the integration is not live.

We do not sell personal data, and we do not share it with advertising networks or data brokers. We may disclose data where the law compels us to.

Transfers outside the UK and EEA

Some of the providers above may process data outside the UK and the European Economic Area. Where that happens, transfers rely on adequacy regulations or on standard contractual clauses with the relevant safeguards. You can ask us which mechanism applies to a specific provider.

How long we keep it

Enquiries that do not become client relationships are deleted within 24 months. If we begin working together, your details are retained for the duration of the engagement and then for as long as tax and accounting law requires. You may ask us to delete an enquiry sooner and we will, unless we are required to keep it.

Your rights

Under the UK GDPR and the EU GDPR you can require us to do all of the following, free of charge, and we will respond within one month:

Tell you what data we hold about you, and give you a copy
Correct anything inaccurate
Delete your data, where no legal obligation requires us to keep it
Restrict how we use it while a dispute is resolved
Object to processing we base on legitimate interests
Receive your data in a portable format
Withdraw consent at any time, without affecting what was lawful beforehand

Write to dzmitry@mercuryplusads.com and say which of these you want. You do not need to give a reason or use particular wording.

Complaints

If you think we have handled your data badly, tell us first — it is usually faster. You also have the right to complain directly to a supervisory authority:

United Kingdom: Information Commissioner's Office — ico.org.uk ↗
Poland: Urząd Ochrony Danych Osobowych — uodo.gov.pl ↗
Elsewhere in the EU: The data protection authority in your country of residence

Children

This site is aimed at businesses. We do not knowingly collect data from anyone under 16. If you believe we have, contact us and we will delete it.

Changes to this policy

If we change how we handle personal data — for example by adding analytics or a CRM — we will update this page and change the date at the top. Material changes affecting people whose data we already hold will be communicated directly.

MERCURY PLUS LTD · Registered in England & Wales no. 17391914 · Terms of Service · Back to site