Privacy Policy

What personal data we collect

We may collect and process the following personal data:

• name and contact details, including email address
• information you submit through website forms
• marketing preferences and communication history
• technical data such as IP address, browser type, device information and operating system
• usage data relating to how you use our website

How we collect personal data

We collect personal data when you:

• complete a form on our website
• download content such as reports or PDFs
• subscribe to marketing communications
• interact with our website, including through cookies and similar technologies

How we use your personal data

We use your personal data for the following purposes:

• to provide requested content, such as downloadable PDFs
• to add you to our marketing and communications funnel
• to send marketing emails, insights, updates and relevant offers
• to manage our relationship with you
• to improve our website and services
• to protect our website from spam, fraud and abuse

Lawful basis for processing

We process personal data under the following lawful bases: 

• Consent – where you submit a form and agree to receive marketing communications
• Legitimate interests – for website security, fraud prevention and service improvement, including the use of Google reCAPTCHA
• Legal obligation – where required to comply with applicable law

You may withdraw consent to marketing communications at any time.

Marketing communications

When you submit a form to download content, you will be added to our marketing communications funnel. These communications may include insights, industry updates and information about our services. 

You can opt out at any time by:

• clicking the unsubscribe link in any marketing email
• contacting us using the details above

Opting out will not affect any communications required to provide requested services or comply with legal obligations.

Lead forms and CRM processing

When you submit a form on our website: 

• your data is collected via WordPress using Everest Forms
• the information is securely stored and processed in our on-premise EspoCRM system
• marketing emails are delivered using Mailgun

We only share personal data with third-party processors where necessary to provide our services, and we ensure appropriate safeguards are in place.

Google reCAPTCHA

We use Google reCAPTCHA on our website forms to protect against spam and automated abuse. 

reCAPTCHA analyses user interactions and may collect information such as:

• IP address
• browser and device information
• mouse movements and interaction patterns

This processing is carried out for security purposes under our legitimate interests. Information collected by reCAPTCHA is subject to Google’s privacy policy and terms of service.

Google may process this data outside the UK. Appropriate safeguards are applied in line with data protection law.

Google privacy policy: https://policies.google.com/privacy
Google terms of service: https://policies.google.com/terms

Cookies and similar technologies

We use cookies and similar technologies to:

• operate and secure our website
• analyse website usage
• improve user experience

Some cookies are essential, while others are used for analytics or security purposes. You can manage or disable cookies through your browser settings. Disabling certain cookies may affect website functionality.

Data retention

We retain personal data only for as long as necessary:

• while you remain subscribed to marketing communications
• until you request deletion or withdraw consent
• as required to comply with legal or regulatory obligations

When data is no longer required, it is securely deleted or anonymised.

Data sharing and international transfers

We may share personal data with trusted service providers, including:

• CRM and hosting providers
• email delivery services
• security and anti-spam providers

Some providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as standard contractual clauses.

We do not sell personal data.

Your rights

Under UK data protection law, you have the right to:

• access your personal data
• request correction of inaccurate data
• request deletion of your data
• restrict processing
• object to processing
• request data portability

To exercise your rights, please contact us using the details above.

Data security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse.

Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.

Contact us

If you have any questions about this Privacy Policy or our data practices, please contact us at connect@digiten.co.uk