Privacy Policy

Last updated: 24 August 2026

This Privacy Policy explains how The Square Genius collects, uses, stores and protects your personal information when you visit this website, contact us, join our mailing list, purchase a product or service, download a resource, request support, work with us, or interact with our connected services.

The Square Genius is owned and operated by Toni Hill, trading as The Square Genius.

For the purposes of UK data protection law, The Square Genius is the data controller for personal information collected through this website and its related services.

If you have questions about this Privacy Policy or how your information is used, please contact:

Email: [email protected]
Website: www.thesquaregenius.com

1. Personal information we collect

We may collect the following types of personal information.

Contact information

This may include your name, email address, telephone number, business name, website address and any information you provide when completing a form or contacting us.

Order and purchase information

This may include details of the plugins, templates, digital products or services you purchase, together with your order number, billing details, payment status and purchase history.

Support and project information

This may include your Squarespace website address, information about the product or service for which you require support, descriptions of technical issues, screenshots, project files and correspondence.

If access to a website or account is required to provide an agreed service, we will only use the access information for that purpose. You should use secure sharing methods and revoke access when it is no longer required.

Marketing information

This may include your name, email address, marketing preferences, email opens, link clicks and unsubscribe activity if you join our mailing list.

Website usage and technical information

This may include your IP address, browser type, device type, operating system, pages visited, time spent on the website, referral source, approximate location and general analytics information.

Payment information

Payments are processed by third-party payment providers. The Square Genius does not directly store your full payment-card details.

Information from connected services

If you authorise a connection to a third-party platform, we may receive information made available by that platform according to the permissions you approve.

More information about our Pinterest integration is provided in Section 12.

2. How we collect your information

We may collect personal information when you:

  • Visit or interact with this website

  • Complete a contact, enquiry or support form

  • Purchase a plugin, template, digital product or service

  • Request customer or technical support

  • Join our mailing list

  • Download a free resource

  • Book a call or consultation

  • Email or otherwise contact us

  • Work with us on a project

  • Create or use a customer account

  • Interact with our cookies or analytics tools

  • Authorise a connection to a supported third-party platform

We may also receive limited information from service providers involved in processing payments, delivering emails, managing orders, analysing website usage or providing other business services.

3. How we use your information

We may use your personal information to:

  • Respond to enquiries

  • Provide products or services you have requested

  • Process orders and payments

  • Deliver plugins, templates, files, guides and other digital products

  • Manage customer accounts

  • Provide customer and technical support

  • Arrange and deliver projects or consultations

  • Manage refunds, disputes and order enquiries

  • Send service messages and important product information

  • Send marketing emails where you have opted in or where otherwise permitted by law

  • Operate authorised third-party integrations

  • Improve our website, products, services and customer experience

  • Monitor website performance and understand how the website is used

  • Prevent fraud, misuse and security incidents

  • Maintain business, tax, accounting and legal records

  • Establish, exercise or defend legal claims

  • Comply with legal and regulatory obligations

We will not use your personal information for purposes that are incompatible with the reasons for which it was collected, unless permitted or required by law.

4. Our lawful bases for processing

Under UK data protection law, we must have a lawful basis for processing your personal information. Depending on the circumstances, we may rely on the following bases.

Contract

We may process your information when it is necessary to enter into or fulfil a contract with you. This includes processing an order, delivering a digital product, providing a service or responding to a request made before you purchase.

Consent

We may rely on your consent when you join our mailing list, agree to non-essential cookies or authorise certain connections and activities.

You may withdraw your consent at any time. Withdrawing consent will not make earlier processing unlawful.

Legitimate interests

We may process information when it is reasonably necessary to operate and improve our business, respond to enquiries, provide customer support, maintain customer relationships, understand website usage, secure our systems or protect our legal rights.

We consider whether our interests are balanced against your rights and reasonable expectations before relying on this basis.

Legal obligation

We may process and retain information when required to comply with tax, accounting, regulatory or other legal obligations.

5. Marketing communications

If you join our mailing list, we may send you emails about Squarespace tips, resources, products, plugins, templates, services, offers and updates from The Square Genius.

You can unsubscribe at any time by:

Unsubscribing from marketing will not prevent us from sending essential messages relating to an order, account, support request or service.

We do not sell your personal information to third parties.

6. Cookies and analytics

This website may use cookies and similar technologies to:

  • Make the website function correctly

  • Remember preferences

  • Process purchases and customer logins

  • Understand how visitors use the website

  • Measure website performance

  • Improve products, services and user experience

  • Support relevant marketing activities

Cookies and related technologies may collect information including your IP address, browser, device type, pages visited, interactions, approximate location and referral source.

Where required by law, we will ask for consent before placing non-essential cookies. You can manage cookies through the controls provided on the website and through your browser settings.

Disabling some cookies may affect the operation of certain website features.

7. Who we share information with

We may share personal information with trusted service providers that help us operate the website and business. These may include:

  • Website hosting and ecommerce platforms

  • Payment processors

  • Email marketing providers

  • Form, booking and customer-support services

  • Website analytics providers

  • Cloud storage and file-transfer providers

  • Accounting software providers and accountants

  • Project management and business administration tools

  • Technical support and security providers

  • Legal and professional advisers

These providers should only receive the information reasonably necessary to perform their services and must process it according to their own legal obligations and applicable agreements.

We may also disclose information:

  • Where required by law, regulation, court order or legal process

  • To establish, exercise or defend legal claims

  • To prevent or investigate fraud, misuse, security incidents or other unlawful activity

  • To protect the rights, property or safety of The Square Genius, our customers or others

  • In connection with a sale, transfer or reorganisation of all or part of the business, subject to appropriate confidentiality and data-protection safeguards

  • Where you have authorised or requested the disclosure

We do not sell or rent your personal information.

8. International data transfers

Some of the platforms and service providers we use may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure that appropriate protections are in place. Depending on the circumstances, these may include:

  • A transfer to a country recognised by the UK Government as providing an adequate level of data protection

  • The use of approved contractual safeguards, such as the UK International Data Transfer Agreement or an approved UK Addendum

  • Another transfer mechanism permitted under UK data-protection law

You can contact us if you would like more information about the safeguards relating to a particular service provider or international transfer.

9. How long we keep your information

We keep personal information only for as long as it is reasonably required for the purpose for which it was collected, including to provide products and services, support customers, maintain appropriate business records and meet legal, tax, accounting and regulatory obligations.

Our typical retention periods include:

  • General enquiries: usually up to two years after our last meaningful contact

  • Orders, invoices and payment records: usually up to six years, or for as long as required by applicable tax and accounting laws

  • Customer, project and contract records: usually for the duration of the working relationship and up to six years afterwards

  • Support correspondence and technical information: usually up to three years after the support request is closed, unless it needs to be retained for longer in connection with an order, ongoing service or legal matter

  • Mailing-list information: until you unsubscribe, withdraw consent or we determine that the information is no longer accurate or required

  • Marketing suppression records: a limited record may be retained after you unsubscribe so that we can respect your preference and avoid contacting you again

  • Connected-service authorisations and access tokens: until you disconnect the service, withdraw authorisation or the connection is no longer required

  • Website analytics information: according to the retention settings of the relevant analytics service and our cookie settings

We may retain information for longer where this is necessary to resolve a dispute, investigate misuse, enforce an agreement, establish or defend a legal claim, or comply with a legal requirement.

When personal information is no longer required, we will delete it, anonymise it or securely dispose of it where reasonably possible.

10. How we protect your information

We use reasonable technical and organisational measures designed to protect personal information against accidental or unlawful loss, alteration, disclosure, access, misuse or destruction.

These measures may include:

  • Password protection and account-access controls

  • Multi-factor authentication where available

  • Secure website connections

  • Restricted access to customer and project information

  • Secure storage and file-sharing services

  • Software updates and security monitoring

  • Careful selection of service providers

  • Secure handling of website and account access information

No method of online transmission or electronic storage is completely secure. Although we take reasonable precautions, we cannot guarantee absolute security.

If you provide access to a website or third-party account as part of an agreed service, you should use the secure sharing method recommended and remove or revoke that access when it is no longer required.

11. Your data-protection rights

Depending on the circumstances and the lawful basis on which we process your information, you may have the right to:

  • Ask for a copy of the personal information we hold about you

  • Ask us to correct information that is inaccurate or incomplete

  • Ask us to delete your personal information

  • Ask us to restrict how your information is used

  • Object to the processing of your information

  • Receive certain information in a portable format and ask for it to be transferred to another organisation

  • Withdraw consent where we rely on consent

  • Complain to the Information Commissioner’s Office

These rights are not absolute and may not apply in every situation. For example, we may need to retain certain information to comply with the law, complete a contract or establish or defend a legal claim.

Your right to object

You have the right to object to the use of your personal information for direct marketing at any time.

You may also have the right to object where we process your information on the basis of legitimate interests. If you object, we will stop the relevant processing unless we have compelling legitimate grounds to continue or the information is required in connection with a legal claim.

To exercise any of your rights, contact [email protected].

We may need to ask for information to confirm your identity before completing a request. We will normally respond within one month, although the law allows additional time in certain circumstances.

There is usually no charge for exercising your data-protection rights. However, we may charge a reasonable fee or refuse a request where the law allows us to do so, including where a request is manifestly unfounded or excessive.

12. Pinterest integration

The Square Genius uses the Pinterest API as a private internal integration to create, schedule, publish and manage organic Pinterest content for its own business account. The integration is not currently offered to customers, members of the public or other external users.

Information we may receive

If you choose to connect a Pinterest account, Pinterest may provide us with information and permissions associated with that account. Depending on the permissions you approve, this may include:

  • Basic Pinterest account information

  • Information about your Pinterest boards

  • Information about pins connected with the authorised account

  • Permission to create or manage boards

  • Permission to create, schedule, publish or manage pins

  • Authorisation tokens required to maintain the connection

The Square Genius does not receive or store your Pinterest password.

How Pinterest information is used

We use information received through the Pinterest connection only to:

  • Provide the Pinterest features you have requested

  • View or select authorised Pinterest boards

  • Create, schedule, publish or manage pins on your behalf

  • Maintain and secure the authorised connection

  • Diagnose technical issues and provide support

  • Prevent misuse or unauthorised activity

We will not use information received through Pinterest to send unrelated marketing communications or sell it to third parties.

Pinterest access tokens

Pinterest access and refresh tokens may be stored securely so that authorised actions can be completed without requiring you to reconnect your account each time.

These tokens are used only for the permissions you have approved. We take reasonable steps to restrict access to them and protect them against unauthorised use.

Disconnecting Pinterest and requesting deletion

You can withdraw Pinterest access through your Pinterest account settings, where this option is available, or by contacting [email protected].

If you disconnect the integration, we will stop using the authorisation to perform new actions. Disconnecting the service will not necessarily delete pins or boards that have already been published to Pinterest.

You may ask us to delete information associated with your Pinterest connection. We will delete or anonymise it where reasonably possible, unless we need to retain limited information to comply with the law, prevent misuse, resolve a dispute or maintain necessary business records.

Your use of Pinterest is also subject to Pinterest’s own terms and privacy policy. The Square Genius is not responsible for how Pinterest independently collects or uses personal information.

13. Automated decision-making

The Square Genius does not currently use personal information to make solely automated decisions that produce legal or similarly significant effects.

If this changes, we will update this Privacy Policy and provide the information required by law.

14. Third-party websites and services

This website may contain links to websites, platforms or services operated by third parties.

The Square Genius is not responsible for the privacy practices, security or content of third-party services. You should review the privacy policy of any external service before providing personal information or authorising a connection.

15. Children’s information

This website, our products and our services are not intended for children under the age of 18, and we do not knowingly collect personal information directly from children.

If you believe that a child has provided personal information to us, please contact [email protected] so that we can investigate and take appropriate action.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, connected platforms, business practices or legal obligations.

The latest version will be published on this website and the “Last updated” date at the top of the policy will be changed.

Where a change materially affects how we use personal information, we may provide an additional notice where appropriate.

17. How to complain

If you have concerns about how we collect or use your personal information, please contact us first so that we have an opportunity to investigate and respond.

You also have the right to complain to the UK Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website:www.ico.org.uk

18. Contact us

If you have questions about this Privacy Policy, would like to exercise a data-protection right, or want to request the deletion of information connected with a third-party integration, please contact:

The Square Genius
Toni Hill, trading as The Square Genius

Email:[email protected]
Website:www.thesquaregenius.com