Legal · UK GDPR compliant

Privacy Policy.

How Built Digitally collects, uses, stores and protects your personal data when you use our website or engage our services.

Last updated: 25 May 2026

1.

Who we are.

Built Digitally is a digital marketing agency based in Hayes, West London, providing web design, SEO, PPC, social media management and AI integration services to UK businesses.

For the purpose of UK GDPR and the Data Protection Act 2018, the data controller is:

Built Digitally Ltd
Hayes, West London, UB3
United Kingdom
Email: contactus@builtdigitally.co.uk
Phone: +44 7404 931629

2.

What this policy covers.

This policy explains how we collect, use, store and protect your personal data when you:

  • Visit our website at builtdigitally.co.uk
  • Contact us via our website forms, email or phone
  • Engage us as a client for any of our services
  • Subscribe to our marketing communications
  • Apply for a job with us
3.

The data we collect.

We may collect the following categories of personal data:

Identity & Contact Data: name, business name, job title, email address, phone number, postal address.

Transaction Data: payment details, invoice records, contract information (processed via our payment providers; we do not store full card details).

Technical Data: IP address, browser type and version, operating system, device information, time zone setting, referral source, length of visit, page views, navigation paths.

Usage Data: how you use our website and services.

Marketing Data: your preferences for receiving marketing from us and your communication preferences.

Communications Data: content of emails, messages and call notes between you and Built Digitally.

We do not knowingly collect special categories of personal data (race, religion, health, sexual orientation, biometric data) or data relating to criminal convictions.

4.

How we collect your data.

Directly from you: when you fill in a contact form, request a free SEO audit, sign a contract, email us, call us or attend a meeting.

Automatically: when you browse our website, we collect technical and usage data via cookies and similar technologies (see our Cookie Policy).

From third parties: we may receive data about you from analytics providers (Google Analytics, Ahrefs), advertising networks (Google Ads, Meta), and search information providers based outside the UK.

5.

How we use your data.

We use your personal data on the following lawful bases under UK GDPR:

Contract: to provide services you have engaged us for, send invoices, and manage our business relationship.

Legitimate Interests: to run our business, develop our services, prevent fraud, secure our website, and contact prospective clients who have requested information.

Consent: to send marketing emails to subscribers who have opted in, and to set non-essential cookies on our website.

Legal Obligation: to comply with UK tax law (HMRC records retained for 6 years), accounting requirements, and any lawful regulator request.

6.

Who we share your data with.

We do not sell your personal data. We share data only with:

Service providers (acting as our data processors):

  • Hostinger (website hosting)
  • Google (Google Workspace, Google Analytics, Google Ads)
  • Yoast (SEO plugin telemetry — anonymised)
  • Ahrefs (analytics)
  • Payment processors (Stripe, PayPal or bank)
  • Email providers (Microsoft 365 or Google Workspace)
  • Accounting software (Xero, FreeAgent or equivalent)

Professional advisors: lawyers, accountants and insurers when reasonably necessary.

Regulators and authorities when required by law.

Business transfers: if Built Digitally is acquired or merges with another business, your data may transfer to the new entity. We will notify you if this occurs.

We do not share your data with third parties for their own marketing purposes without your explicit opt-in consent.

7.

International data transfers.

Some of our service providers (e.g. Google) are based outside the UK. When data is transferred outside the UK, we ensure adequate safeguards are in place, such as:

  • Transfers to countries deemed adequate by the UK government
  • Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner
  • The UK Extension to the EU-US Data Privacy Framework (where applicable)
8.

How long we keep your data.

Contact form enquiries (not converted)
12 months
Active client recordsHMRC requirement
Engagement + 6 years
Marketing email subscribers
Until unsubscribe
Job applicant data
6 months
Website analytics / cookies
Max 26 months
9.

Your rights under UK GDPR.

You have the right to:

  • Access your personal data and receive a copy
  • Rectify inaccurate or incomplete data
  • Erase your data ("right to be forgotten") in certain circumstances
  • Restrict processing of your data
  • Object to processing based on legitimate interests
  • Data portability — receive your data in a machine-readable format
  • Withdraw consent at any time (without affecting prior lawful processing)
  • Not be subject to automated decision-making

To exercise any of these rights, email contactus@builtdigitally.co.uk. We will respond within one month.

10.

How we keep your data secure.

We use appropriate technical and organisational measures including:

  • HTTPS encryption (TLS) on our website
  • Encrypted password storage
  • Two-factor authentication on admin accounts
  • Regular software updates and security patches
  • Limited staff access on a need-to-know basis
  • Daily backups stored securely
  • Web application firewall (Wordfence)

Despite these measures, no online transmission is 100% secure. You provide data at your own risk.

11.

Cookies, links & children.

Cookies: our website uses cookies. For full details, see our separate Cookie Policy.

Links to other websites: our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing any personal data.

Children: our services are not intended for anyone under 16. We do not knowingly collect data from children. If you believe we have, contact us and we will delete it.

12.

Changes & complaints.

Changes: we may update this policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be communicated via email to active clients.

Making a complaint: if you have a concern about how we handle your data, please contact us first at contactus@builtdigitally.co.uk so we can try to resolve it.

You also have the right to complain to the UK Information Commissioner's Office (ICO):

ICO
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Phone: 0303 123 1113
Email: casework@ico.org.uk
Website: ico.org.uk

Related

Other legal pages.

Get free audit