Privacy Policy

1. Scope

This Privacy Policy applies to our website, contact forms, sales inquiries, discovery calls, client onboarding, project delivery, support communications, web design services, logo and brand design services, SEO and digital marketing services, and related automation or lead-generation activity.

2. Information We Collect

• Identity and contact details, such as your name, company name, email, phone number, billing information, and postal address.
• Project and business information, such as website copy, logos, brand assets, campaign goals, ad account details, access credentials, and creative feedback.
• Technical and usage data, such as IP address, browser type, device information, pages visited, interactions, and approximate location data.
• Marketing preference data, such as consent records, subscription status, and unsubscribe or suppression information.

3. How We Use Information

• To respond to inquiries, prepare proposals, and manage service requests.
• To perform contracts and deliver web design, logo design, branding, SEO, and marketing services.
• To process invoices and payments, maintain records, prevent fraud, and protect our systems.
• To improve our website, assess engagement, and understand service demand.
• To send marketing or follow-up communications where permitted by law or based on valid consent.

4. UK Lawful Bases

Where UK data protection law applies, we generally rely on one or more of these lawful bases:

• Contract: to take steps at your request and provide agreed services.
• Legitimate interests: to run and secure our business, manage client relationships, and improve our services.
• Consent: for certain cookies, promotional emails, or other optional processing where consent is required.
• Legal obligation: where we must keep or disclose information for tax, accounting, fraud-prevention, or similar legal reasons.

5. Cookies and Similar Technologies

We may use essential cookies and similar technologies for site operation, performance, and security. We may also use analytics, advertising, and marketing technologies to understand traffic and optimize campaigns.

Where UK PECR or similar laws apply, non-essential cookies or similar technologies should be deployed only after valid consent. You can also manage cookies through browser settings or any consent tools we make available.

6. Direct Marketing

• Service messages needed to answer an inquiry or manage a project may be sent without separate marketing consent where lawful.
• Promotional emails or similar electronic marketing will be sent only where permitted under applicable law, including PECR and CAN-SPAM.
• Marketing communications should include accurate sender details, a working unsubscribe method, and our valid postal address.
• You may opt out of promotional messages at any time.

7. Sharing Information

• With hosting, analytics, CRM, payment, communication, automation, advertising, and file-storage providers that act on our behalf or at your request.
• With subcontractors, advisers, or platform providers involved in service delivery.
• With courts, regulators, law enforcement, or professional advisers where necessary for legal compliance or rights protection.
• With a successor entity in connection with a merger, acquisition, financing, or sale of business assets, subject to appropriate protections.

8. International Transfers

Because we and our vendors may operate internationally, personal information may be processed outside your home country. Where UK personal data is transferred internationally, we aim to use recognized safeguards, such as adequacy regulations or contractual protections, where required.

9. Retention and Security

• We keep personal information only for as long as reasonably necessary for the purposes described in this policy and for legal, accounting, tax, security, or dispute needs.
• Retention periods may differ for lead records, client files, contracts, invoices, access logs, campaign reports, and support requests.
• We use commercially reasonable administrative, technical, and organizational safeguards, but no system can be guaranteed to be completely secure.

10. Your Rights

• UK-based individuals may have rights to access, rectify, erase, restrict, object, and, where applicable, port their personal data.
• California residents may have rights to know, delete, correct, and opt out of certain selling or sharing activity where the CCPA/CPRA applies.
• We do not sell personal information in the ordinary course of our agency services as those terms are commonly understood, but if that changes we will provide the notices and controls required by law.

11. Children’s Privacy

Our services are aimed at businesses, founders, and adults acting on behalf of organizations. We do not knowingly collect personal information from children in a way that requires parental consent under applicable law.