Privacy Policy

1. Introduction

Exeter Digital Agency ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Name and contact details (email, phone number, address)
• Company information and job title
• Project requirements and specifications
• Payment and billing information
• Communication records and correspondence

2.2 Technical Information

We automatically collect certain technical information:

• IP address and browser information
• Device type and operating system
• Website usage data and analytics
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information for the following purposes:

• Providing and delivering our services
• Communicating with you about projects and services
• Processing payments and managing accounts
• Improving our website and services
• Sending marketing communications (with consent)
• Complying with legal obligations

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract: To fulfill our contractual obligations
• Legitimate Interest: For business operations and improvements
• Consent: For marketing communications and cookies
• Legal Obligation: To comply with applicable laws

5. Information Sharing

We do not sell, trade, or rent your personal information. We may share information with:

• Service Providers: Third-party vendors who assist with our services
• Payment Processors: For secure payment processing
• Legal Authorities: When required by law or legal process
• Business Transfers: In case of merger, acquisition, or sale

6. Data Security

We implement appropriate technical and organizational measures to protect your data:

• SSL encryption for data transmission
• Secure servers and databases
• Access controls and authentication
• Regular security assessments
• Staff training on data protection

7. Data Retention

We retain your personal data only as long as necessary:

• Client Data: For the duration of our business relationship plus 7 years for legal/tax purposes
• Marketing Data: Until you withdraw consent or we determine it's no longer needed
• Website Analytics: Up to 26 months
• Communication Records: Up to 3 years

8. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data
• Restriction: Limit how we process your data
• Portability: Receive your data in a portable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for marketing or cookies

To exercise these rights, contact us at hello@exeterdigitalagency.co.uk

9. Cookies and Tracking

9.1 Types of Cookies

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand website usage
• Marketing Cookies: Used for targeted advertising (with consent)

9.2 Managing Cookies

You can control cookies through your browser settings or our cookie consent banner. Note that disabling certain cookies may affect website functionality.

10. Third-Party Services

Our website may use third-party services with their own privacy policies:

• Google Analytics: Website analytics and performance
• Payment Processors: Secure payment processing
• Email Services: Communication and marketing
• Hosting Providers: Website hosting and infrastructure

11. International Transfers

Some of our service providers may be located outside the UK/EEA. We ensure appropriate safeguards are in place, including adequacy decisions or standard contractual clauses.

12. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal information from children under 16. If we become aware of such collection, we will delete the information promptly.

13. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated effective date. We will notify you of significant changes via email or website notice.

14. Contact Information