Privacy Policy
Your privacy matters to us. Learn how we collect, use, and protect your personal data in accordance with UK GDPR, Data Protection Act 2018, and PECR regulations.
Last Updated
Saturday, 6 December 2025
Introduction
Digital Marketing Agency Ltd (Company Number: 12345678) respects and protects your privacy. This privacy policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
We are committed to being transparent about how we collect and use your data and to meeting our data protection obligations.
Who We Are
Legal Name: Digital Marketing Agency Ltd
Trading Name: Digital Agency
Company Number: 12345678
Registered Address: 123 Digital Blvd, Suite 400, Innovation City, London, SW1A 1AA
Data Protection Contact: privacy@scalewave.co.uk
What Data We Collect
We collect the following types of personal data:
Personal Data
- Name, email address, phone number
- Business address and company information
- Payment details (processed securely by our payment providers)
- Communication preferences and marketing consents
Technical Data
- IP address and location data
- Browser type, version, and device information
- Operating system and screen resolution
- Cookies and similar tracking technologies
Behavioural Data
- Pages visited and time spent on our website
- Links clicked and downloads
- Search terms and referral sources
- Form interactions and conversion data
How We Collect Data
Directly from You
- Contact forms and project inquiry forms
- Newsletter signup and marketing preferences
- Account creation and service checkout
- Phone calls, emails, and support requests
Automatically
- Cookies and similar tracking technologies
- Google Analytics and website analytics tools
- Server log files and error reports
- Social media pixels and advertising trackers
From Third Parties
- Social media platforms (LinkedIn, Facebook, X (formerly Twitter))
- Payment processors (Stripe, PayPal)
- Marketing platforms and affiliate partners
- Public databases and business directories
How We Use Your Data
We use your personal data for the following purposes:
Service Provision
- Creating and managing your account
- Delivering our digital marketing services
- Processing payments and invoicing
- Providing customer support and technical assistance
Website and Service Improvement
- Analytics and performance monitoring
- A/B testing and user experience research
- Website security and fraud prevention
- Technical troubleshooting and bug fixes
Marketing (with your consent)
- Email newsletters and promotional content
- Targeted advertising and retargeting
- Social media marketing and engagement
- Event invitations and industry updates
Legal and Compliance
- Compliance with legal obligations
- Fraud prevention and security
- Dispute resolution and legal proceedings
- Regulatory reporting and audits
Lawful Basis for Processing
Under UK GDPR, we process your data based on:
- Contractual Necessity: To provide our services and fulfill our contractual obligations
- Consent: For marketing communications and non-essential cookies
- Legitimate Interest: For analytics, security, and business development
- Legal Obligation: For tax records, regulatory compliance, and legal requirements
How We Share Your Data
Third-Party Processors
- Hosting Providers: AWS, Cloudflare (data processing agreements in place)
- Analytics Tools: Google Analytics, Hotjar (privacy-compliant configurations)
- Email Providers: Mailchimp, SendGrid (GDPR-compliant processors)
- Payment Gateways: Stripe, PayPal (PCI DSS compliant)
- CRM Systems: HubSpot, Salesforce (data processing agreements)
Legal Disclosures
We may disclose data when required by law, court order, or regulatory authority.
International Transfers
Some of our processors are located outside the UK/EEA. We ensure adequate protection through Standard Contractual Clauses, adequacy decisions, or other approved transfer mechanisms.
Data Retention
- Account Data: Retained until account deletion or 3 years after last activity
- Financial Records: 6 years (HMRC compliance requirement)
- Marketing Data: Until consent is withdrawn or 2 years of inactivity
- Website Analytics: 26 months (Google Analytics default)
- Support Records: 3 years after case closure
- Legal Documents: 6 years or as required by law
Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a portable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent for marketing or cookies
To exercise these rights, contact us at privacy@scalewave.co.uk. We will respond within 30 days.
Right to Complain: You can lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data properly.
Security Measures
We protect your data using:
- SSL/TLS encryption for all data transmission
- Encrypted database storage and regular backups
- Multi-factor authentication for staff access
- Regular security audits and penetration testing
- Staff training on data protection and security
- Incident response procedures and breach notification
Children's Data
We do not knowingly collect personal data from children under 13. If you are under 18, please ensure you have parental consent before providing any personal information. If we become aware that we have collected data from a child without consent, we will delete it immediately.
Policy Updates
We may update this privacy policy to reflect changes in our practices or legal requirements. We will notify you of significant changes by:
- Email notification to registered users
- Prominent notice on our website
- In-app notifications where applicable
Continued use of our services after changes constitutes acceptance of the updated policy.
Contact Information
For all privacy-related matters, please contact our Data Protection Officer:
Email Contact
Privacy Email: privacy@scalewave.co.uk
Data Protection Officer: dpo@scalewave.co.uk