Last updated: October 28, 2026
This policy explains how Sales Lift collects, uses and protects personal data when you visit our website, contact us, or work with us.
Sales Lift (“we”, “us”) is a HubSpot Diamond Partner agency that builds and supports HubSpot for sales teams, with sales process consulting alongside. We are the controller of the personal data described in sections 2 to 4. For the data in your own HubSpot account, we act as your processor (see section 6).
Company: [PLACEHOLDER: legal entity name and registered address]. Privacy contact: [PLACEHOLDER: privacy email address].
When you contact us or use our website. Your name, email address, phone number, company, job title and anything you write in a form or message. This covers our contact form, health audit enquiries, guide downloads and the partner referral form.
When someone is referred to us. A referrer (for example a Sandler trainer) may give us a customer’s name, email and details of their needs. We ask referrers to share these details only where the customer has agreed to be introduced.
When we work together. Contact details for your team, project documents, notes from calls and workshops, and recordings and transcripts of meetings we hold with you.
Automatically. Technical data such as IP address, browser, device and the pages you view, collected using cookies and similar technologies (see section 10).
We use personal data to reply to enquiries and book calls, to provide and support the services you buy, to send you the guides or audit you ask for, to run and improve our website and marketing, to keep records and invoice for our work, and to meet our legal duties.
Under UK GDPR our legal bases are: contract (to take steps before and during a project), legitimate interests (to run our business, respond to enquiries, keep in touch with business contacts about relevant services, and keep our systems secure, balanced against your rights), consent (for non-essential cookies and where we ask for it, which you can withdraw at any time), and legal obligation (for example tax and accounting records).
You can opt out of marketing emails at any time using the link in any email or by contacting us.
We use AI tools throughout our work to improve accuracy and work faster. This includes AI note-taking software that records and transcribes project meetings, and AI assistants that help our team draft, analyse and configure work in your HubSpot, under our team’s direction and review.
We use recordings, transcripts and AI summaries only to capture your requirements accurately, document decisions, check the quality of our work, and keep your team informed. Everyone on a recorded call is told at the start that it is being recorded. You can ask us not to record a meeting, or to delete a recording, at any time.
We only use AI providers under terms that do not allow your data to be used to train their models. We do not use AI to make decisions about individuals that have legal or similarly significant effects. People review AI output before it is used in your account or sent to you. These points match section 7 of our Standard Project Terms.
We share personal data only with the people and services we need to run our business and deliver your project, under written terms that protect it. These include: HubSpot (our CRM, forms, email and website analytics), our AI and meeting-recording tools, Microsoft 365 and similar email, calendar and video-call providers, our website host (Vercel), and subcontractors working on your project under confidentiality obligations.
We do not sell personal data. We may disclose data where the law requires it, or to professional advisers, or in connection with a sale of our business.
When you give us partner access to your HubSpot portal, the contacts, companies, deals and other records in it belong to you. We are your processor for that data: we use it only to do the work you instruct, and we handle it under our agreement with you and section 8 of our Standard Project Terms. That covers how we protect access keys, how we make and approve changes, and why we never delete, merge or bulk update records without your written approval and a backup.
We will help you respond to requests from people whose data is in your account. If someone contacts us about data in your portal, we will pass the request to you.
Some of our providers, including HubSpot, are part of groups that operate in the United States and other countries. Where personal data is transferred outside the UK or the EEA, we rely on approved safeguards, such as the UK International Data Transfer Agreement or Addendum, standard contractual clauses, or an adequacy decision.
We keep personal data only as long as we need it for the purposes above. As a guide: enquiries and marketing contacts, up to 24 months after our last contact; client project records, for the length of the agreement plus 6 years; financial records, for the period the law requires; meeting recordings and transcripts, until the project ends or you ask us to delete them, whichever is sooner. We then delete or anonymise the data.
We use access controls, multi-factor authentication, encrypted storage for keys and credentials, and the principle of least access. No system is completely secure, so if we ever have a breach that affects you, we will tell you and the regulator where the law requires.
Our website uses HubSpot’s tracking code, which sets cookies to recognise returning visitors, understand which pages are used, and connect form submissions to a visit. Where the law requires, we ask for consent before setting non-essential cookies, and you can change your choice at any time or block cookies in your browser settings.
Some pages embed content from other providers, such as Loom videos or HubSpot forms. These providers may set their own cookies and have their own privacy policies.
Under UK GDPR, you can ask us to: give you a copy of your data, correct it, delete it, restrict or object to how we use it, move it to another provider, and stop any processing that relies on your consent. Contact us at the address above and we will respond within one month. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk), although we would appreciate the chance to put things right first.
If you live in the EU or in a US state with a privacy law, you may have similar rights, and we will honour valid requests.
We may update this policy from time to time. The date at the top shows when it last changed. If we make a significant change, we will tell clients directly.