Skip to content
ToolkitStack
Request a Site Review
Menu
Request a Site Review

Legal

Privacy Notice

Last updated: 10 July 2026

ToolkitStack is a trading name of First Ideas Ltd (Company No. 08885551), registered office 15 Jubb’s Lane, Ogbourne St George, Wiltshire SN8 1SR, United Kingdom (“we”, “us”). We provide managed SEO for healthcare businesses, and we are the controller of the personal information described in this notice.

This notice explains what personal information we handle, why, and the choices you have. For any question or request, email .

1. If you send us an enquiry

When you use the enquiry form on our site we collect the details you provide — your name, business email, website, sector and message. We use them to respond to your enquiry and, where you ask us to, to prepare your written site review or a services agreement. Our legal bases are taking steps you request before entering a contract, and our legitimate interest in responding to business enquiries. We keep enquiry records for up to 24 months.

2. If we contact your business (B2B outreach)

We occasionally write to people in professional roles at healthcare businesses whose websites we believe we can help. If we have contacted you:

  • What we hold: your name, role and business email address, together with publicly available information about your company’s website and search presence.
  • Where it came from: your company’s website or public professional listings, in some cases located via Hunter.io, a service that indexes publicly available sources.
  • Why: our legitimate interest in introducing relevant services to businesses like yours; a Legitimate Interests Assessment is on file. In Canada we rely on implied consent under CASL, because your business address was conspicuously published and our message relates to your business role.
  • The written review we may share with you is prepared from public information about your company’s website — not from personal information about you.
  • Your choices: every email contains an unsubscribe link, and replying “unsubscribe” works too. We stop immediately and permanently. You can also ask us to delete the review and your details; we will, keeping only a minimal suppression record so that we do not contact you again.
  • Retention: if you do not engage with us, we delete or anonymise your details within 12 months of our last message.

3. If you are a client, or on a client’s team

We process account, website and reporting data to deliver the services agreed with your business, on the basis of that contract. The detail sits in the services agreement; analytics and reporting data about a client’s website belong to the client.

4. Cookies and analytics

Our marketing pages use Google Analytics 4 to understand how the site is used — pages viewed, approximate location and device type. Google Analytics sets cookies. You can block or delete cookies in your browser settings, and Google offers a browser add-on to opt out of Google Analytics across all websites. We do not use advertising or cross-site tracking cookies.

5. Who we share information with

Service providers acting on our instructions: Hunter.io (business-contact management and outreach email delivery), Google (analytics), our website hosting and email providers, and Xero (invoicing, for clients). We do not sell personal information. Where a provider processes data outside the UK, the EEA or Canada, the transfer is protected by recognised safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses or an adequacy decision.

6. Your rights

Depending on where you live, you can ask for access to, correction or deletion of your personal information, object to or restrict our use of it — including any direct marketing, which we always honour — and ask for a portable copy. Email ; we respond within one month under UK GDPR, and in line with PIPEDA for Canadian residents. We extend the same controls to everyone, wherever you are.

If you are unhappy with our response you can complain to the UK Information Commissioner’s Office (ico.org.uk) or, in Canada, the Office of the Privacy Commissioner (priv.gc.ca).

7. Changes to this notice

We will post any changes here with a new “last updated” date.