Privacy Policy

Effective Date: 13 May 2026 Last Updated: 2 July 2026

Data Controller

Marathon 360 Ltd is the data controller for all personal data collected and processed through our services.

Company: Marathon 360 Ltd Company No: 16710005 Registered Office: Office 14505, 182-184 High Street North, East Ham, London, United Kingdom, E6 2JA Email: [email protected] Website: marathon360.co.uk

About Us

Marathon 360 Ltd is an agent services and marketing technology company serving prime real estate agents and boutique agencies across global markets. We build the operational pipeline for client agencies — branded CRM, AI Employee, managed advertising, multi-channel follow-up across email, WhatsApp, and SMS, and account management. Service updates, billing notifications, and appointment coordination are delivered via email, WhatsApp, and SMS where the recipient has separately consented.

Data We Collect

We collect the following types of personal data:

• Contact Information: Name, phone number, email address
• Professional Information: Company name, job role
• Communication Preferences: SMS, email, and messaging consent choices
• Communication Data: Records of our interactions and correspondence
• Technical Data: Website usage data and analytics

Lawful Basis for Processing

We process personal data based on the following lawful bases:

• Consent: Where you have explicitly consented to receiving SMS, email, or other communications from us
• Contract: To perform our contractual obligations when you engage our services
• Legitimate Interest: For business-to-business communication and service operations in the real estate sector
• Legal Obligation: Where processing is required to comply with applicable law

How We Use Your Data

We use your personal data for:

• Delivering Marathon 360 agent services — CRM setup, AI Employee configuration, managed advertising, and multi-channel follow-up — to client real estate agencies
• Sending email, WhatsApp, and SMS communications where you have given consent. SMS recipients are limited to (a) clients of Marathon 360 Ltd under signed service agreement and (b) individuals who submitted a form on marathon360.co.uk and ticked the SMS consent box
• Responding to enquiries submitted via our contact forms
• Appointment scheduling and service updates
• Improving our services and internal processes
• Complying with legal and regulatory obligations

SMS / Text Messaging — Non-Sharing Clause

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Data Sharing

We may share your data only in the following circumstances:

• Service subcontractors: Third-party providers engaged solely to support our operations (e.g. cloud hosting, customer service platforms, email delivery)
• Legal authorities: Where required by law, regulation, or court order

We do not share, transfer, or disclose your personal data to any third party for their own marketing or promotional purposes. We do not share SMS opt-in consent data or phone numbers with any third parties for marketing purposes.

Third-Party Service Providers

We work with carefully selected service providers to deliver our operations, including:

• Email delivery platforms for client communications
• Cloud hosting providers for data storage and processing
• SMS and messaging platforms for consent-based communications
• CRM and workflow automation tools
• Analytics providers for website performance monitoring

All providers are bound by data processing agreements and are required to maintain appropriate security measures. They are permitted to process data only as instructed by Marathon 360 Ltd.

Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, typically for the duration of our business relationship plus 3 years, unless a longer retention period is required by law.

Your Rights

Under GDPR and UK data protection law, you have the right to:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Portability: Request transfer of your data to another organisation
• Restriction: Request limitation of processing
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw any previously given consent at any time, including SMS opt-in, by replying STOP to any SMS or contacting us directly

Marketing Communications

We may send you marketing communications about our services only where you have given explicit consent, or where we have a legitimate business interest and you have not opted out. You can opt out of marketing communications at any time by:

• Replying STOP to any SMS message
• Clicking unsubscribe links in our emails
• Contacting us directly at [email protected]

International Transfers

Your personal data may be transferred to and processed in countries outside the United Kingdom and European Economic Area (EEA). When we transfer your data internationally, we ensure adequate protection through:

• EU Standard Contractual Clauses for transfers to third countries
• Adequacy decisions by the UK Information Commissioner's Office
• Other appropriate safeguards as recognised under UK GDPR

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Where personal data is held within a client's branded CRM portal, the client agency acts as the data controller for that data and is responsible for its lawful collection and use; Marathon 360 Ltd acts only as processor on the client's documented instructions.

Exercising Your Rights

To exercise any of your data protection rights listed above:

• Submit your request to [email protected]
• Include proof of identity (copy of passport or driving licence)
• Specify which right you wish to exercise and the data concerned

We will respond to your request within one month of receipt. In complex cases, we may extend this by a further two months with notification.

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO) Website: ico.org.uk Telephone: 0303 123 1113 Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Contact Us

For any privacy-related questions, data requests, or to exercise your rights, please contact us:

• Email: [email protected]
• Phone: +44 7883 300968
• Address: Office 14505, 182-184 High Street North, East Ham, London, United Kingdom, E6 2JA
• Website: www.marathon360.co.uk

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on our website with an updated effective date.