1. Introduction and company information
This Privacy Policy explains how BluePeak Digital Marketing Ltd collects, uses, shares, stores, and protects personal data when operating its digital-marketing business, including when you visit our website, contact us, request services, subscribe to communications, or otherwise interact with us.
Data controller: BluePeak Digital Marketing Ltd
Registered / business address: BluePeak Digital, 14B King Street, Manchester, M2 4LQ, UK
Email: [email protected]
Phone: +44 161 832 4976
This Privacy Policy should be read together with any other privacy notices or fair processing information we provide from time to time. By using our services or communicating with us, you acknowledge that your personal data may be processed as described in this Policy.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, job title, employer, and similar identifiers.
- Contact data: email address, telephone number, postal address, and other contact details.
- Professional data: company details, role information, business interests, and service requirements.
- Communication data: messages you send to us, enquiry details, feedback, and correspondence records.
- Marketing and preference data: subscription choices, consent records, campaign engagement, and communication preferences.
- Technical data: IP address, browser type, device identifiers, operating system, pages visited, timestamps, and website usage data.
- Analytics data: aggregated or pseudonymised information relating to website performance, campaign results, and user interaction.
- Transaction and service data: details relating to proposals, contracts, billing, service delivery, and account management where applicable.
We generally collect personal data directly from you, including when you submit forms, request a quote, sign up for updates, contact us by email or phone, or engage with our marketing materials. We may also receive data from third-party sources such as analytics providers, advertising platforms, social media channels, lead generation tools, and publicly available business sources.
Where required by law, we will collect personal data only where we have a lawful basis to do so and will ensure that any processing is limited to what is necessary and proportionate.
3. Purpose of data processing
We process personal data for the following purposes:
- to respond to enquiries and communicate with prospective and existing clients;
- to provide digital-marketing services, including strategy, campaign management, analytics, search marketing, social media marketing, content support, and related consultancy;
- to manage client relationships, contracts, proposals, and billing;
- to personalise and improve our website, services, and client experience;
- to analyse website traffic, campaign effectiveness, and user engagement;
- to send administrative messages, service notices, and updates related to our services;
- to send direct marketing communications where permitted by law and, where required, with your consent;
- to maintain business records, ensure internal administration, and support quality control;
- to detect, prevent, and investigate fraud, abuse, unauthorised access, and security incidents;
- to comply with legal obligations and respond to lawful requests from authorities;
- to establish, exercise, or defend legal claims.
4. Legal basis for processing
We process personal data on one or more of the following legal bases, depending on the context and applicable law:
- Consent: where you have given clear permission, for example for certain marketing communications or cookie-based tracking where required.
- Contract: where processing is necessary to enter into or perform a contract with you or your organisation.
- Legal obligation: where processing is necessary for compliance with a legal or regulatory requirement.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as operating and improving our services, managing client relationships, protecting our business, and promoting our services, provided those interests are not overridden by your rights and interests.
- Vital interests: in rare cases where processing is necessary to protect someone’s vital interests.
Where we rely on legitimate interests, we assess and balance our interests against your rights and freedoms. Where we rely on consent, you may withdraw it at any time as described below.
5. Data sharing and third parties
We may share personal data with trusted third parties where necessary for the purposes described in this Policy. Such third parties may include:
- IT and hosting service providers;
- email, customer relationship management, and communication platforms;
- analytics and website measurement providers;
- advertising, social media, and campaign management platforms;
- payment processors and invoicing providers, where applicable;
- professional advisers such as lawyers, accountants, auditors, and insurers;
- subcontractors, consultants, and service partners involved in delivering services;
- regulators, law enforcement authorities, courts, or other public bodies where required by law.
We only share personal data with third parties where necessary and, where appropriate, under contractual obligations requiring them to protect personal data and process it only in accordance with our instructions and applicable law.
We do not sell personal data in the ordinary sense of the word. However, certain analytics, advertising, and marketing tools may involve disclosure of technical data or identifiers to third-party service providers for measurement, optimisation, and audience management purposes, subject to applicable law and your preferences.
6. Data transfer to third countries
Some of our service providers or partners may be located outside the United Kingdom and may process personal data in countries that do not offer the same level of data protection as the UK. Where such transfers occur, we will take appropriate safeguards to protect your personal data, which may include:
- standard contractual clauses or equivalent transfer mechanisms;
- adequacy regulations or decisions where applicable;
- additional technical and organisational measures as appropriate.
Where required, you may request further information about the safeguards used for international transfers by contacting us using the details below.
7. Storage duration
We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, contractual, and reporting requirements.
Retention periods may vary depending on the category of data and the purpose of processing. As a general approach:
- enquiry and correspondence records are retained for as long as needed to manage the enquiry and for a reasonable follow-up period;
- client and contract records are retained for the duration of the relationship and for a period thereafter as required for legal, tax, and business purposes;
- marketing preference and consent records are retained until you withdraw consent or opt out, plus a reasonable period for compliance purposes;
- website analytics data is retained in accordance with our internal retention settings and provider configurations.
When personal data is no longer required, we will delete it, anonymise it, or securely archive it in accordance with our retention practices and legal obligations.
8. User rights (access, rectification, erasure, restriction, data portability, objection)
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: the right to request a copy of the personal data we hold about you.
- Rectification: the right to request correction of inaccurate or incomplete personal data.
- Erasure: the right to request deletion of personal data in certain circumstances.
- Restriction: the right to request that we limit the processing of your personal data in certain circumstances.
- Data portability: the right to receive certain personal data in a structured, commonly used, machine-readable format and/or request transfer to another controller where technically feasible.
- Objection: the right to object to processing based on legitimate interests and, in some cases, to direct marketing at any time.
To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law and may not always be able to comply fully where legal exemptions apply.
9. Withdrawal of consent
Where we process personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.
You can withdraw consent by following the unsubscribe instructions in our communications or by contacting us using the details below. If you withdraw consent, we may still be able to process your personal data where another lawful basis applies.
10. Right to complain
If you have concerns about how we handle personal data, we encourage you to contact us first so that we may try to resolve the issue.
You may also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. In the United Kingdom, this is the Information Commissioner’s Office (ICO):
- Website: https://ico.org.uk/
If you are located outside the UK, you may have the right to contact your local data protection authority or supervisory body.
11. Data security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include access controls, authentication mechanisms, secure storage, encryption where appropriate, staff confidentiality obligations, and regular review of security practices.
However, no system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of any credentials or account details and for notifying us promptly if you suspect any unauthorised access to your information.
12. Contact information
If you have any questions about this Privacy Policy, wish to exercise your rights, or would like more information about how BluePeak Digital Marketing Ltd processes personal data, please contact us:
- BluePeak Digital Marketing Ltd
- Address: BluePeak Digital, 14B King Street, Manchester, M2 4LQ, UK
- Email: [email protected]
- Phone: +44 161 832 4976
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, technology, or business practices. Any updated version will be posted on this page with a revised effective date where appropriate.
We encourage you to review this Privacy Policy periodically so that you remain informed about how BluePeak Digital Marketing Ltd processes personal data. Your continued use of our website or services after changes are posted may indicate your acceptance of the updated Policy, to the extent permitted by applicable law.