Privacy Policy

1. What Data We Collect

We collect the following categories of personal data when you interact with our website or services:

• Contact information you submit via our contact or enquiry forms (name, email address, company name)
• Communication data — emails, messages, and enquiries you send us
• Technical data — IP address, browser type, device type, pages visited, time on site (via analytics tools)
• Newsletter subscription data — email address if you subscribe to our updates
• Payment and billing data — processed securely via Stripe; we do not store card details
• Service usage data — how you interact with the deliverables and platforms we manage on your behalf

2. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiries and provide the services you have requested
• To manage our contractual relationship with you as a client
• To send service-related communications (onboarding, delivery, updates)
• To send marketing communications where you have opted in (you may unsubscribe at any time)
• To improve and optimise our website using aggregated, anonymised analytics data
• To comply with our legal and regulatory obligations
• To process payments securely through our payment processor (Stripe)

3. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

• Contract performance — where processing is necessary to deliver the services you have engaged us for
• Legitimate interests — to operate, protect, and improve our business and website
• Consent — for marketing communications and optional cookies where required
• Legal obligation — where we are required to process data to comply with applicable law

4. Data Sharing & Third Parties

We do not sell your personal data. We may share data with the following trusted third-party service providers who process data on our behalf:

• Formspree — contact form submission processing
• Stripe — secure payment processing (subject to Stripe's own privacy policy)
• Google Analytics / Google Tag Manager — website traffic and behaviour analytics
• Cloudflare — DNS, security, and performance infrastructure
• Hostinger — website and email hosting
• n8n / automation tools — workflow automation for service delivery

All third parties are contractually required to handle your data in accordance with applicable data protection law.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Client records and communications — retained for 6 years following the end of the contract (for legal and tax compliance)
• Marketing contact records — retained until you unsubscribe or withdraw consent
• Website analytics data — retained in aggregated form for up to 26 months
• Contact form submissions — retained for up to 12 months unless a client relationship is established

6. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — to request a copy of the data we hold about you
• Right to rectification — to correct inaccurate or incomplete data
• Right to erasure — to request deletion of your data in certain circumstances
• Right to restrict processing — to limit how we use your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

7. Cookies

Our website uses cookies and similar tracking technologies to improve your experience and analyse site usage. These include:

• Essential cookies — required for the website to function correctly
• Analytics cookies — Google Analytics and GTM, used to understand traffic patterns (anonymised)
• Security cookies — Cloudflare Turnstile for spam and bot protection on forms

You can manage cookie preferences through your browser settings. Disabling analytics cookies will not affect your ability to use the site.

8. International Transfers

Some of our third-party service providers are based outside the UK or EEA. Where data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions, in accordance with UK GDPR requirements.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission (HTTPS), access controls, and secure third-party processors. However, no internet transmission is completely secure and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The effective date at the top of this page will be updated accordingly. We encourage you to review this policy periodically. Continued use of our services after any changes constitutes acceptance of the updated policy.

11. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would however appreciate the opportunity to address your concerns directly first — please contact us at [email protected].