Last updated: Feb 2025
1. Who We Are
Digital Movement is a UK-based web agency specialising in WordPress website design, development, and search engine optimisation (SEO). We operate from digitalmovement.co.uk and act as the data controller for personal data collected through our website and business operations.
We are subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Contact: hello@digitalmovement.co.uk
2. What Data We Collect
2.1 Data You Provide Directly
When you contact us, request a quote, or engage our services, we may collect:
- Your name and job title
- Business name and website URL
- Email address and telephone number
- Details about your project or requirements
- Billing and invoicing information
2.2 Data Collected Automatically
When you visit our website, we automatically collect certain technical data, including:
- IP address and approximate location
- Browser type, version, and language
- Device type and operating system
- Pages visited, time on site, and referring URLs
- Date and time of your visit
2.3 Data from Third Parties
We may receive data about you from third-party platforms such as Google Search Console, Google Analytics, or LinkedIn, where you have engaged with our content or where analytics are used to improve our services.
3. How We Use Your Data
We process your personal data for the following purposes, each supported by a lawful basis under UK GDPR:
| Purpose | Lawful Basis |
|---|---|
| Responding to enquiries and providing quotes | Legitimate interests / Pre-contractual steps |
| Delivering WordPress and SEO services | Performance of a contract |
| Sending invoices and processing payments | Performance of a contract / Legal obligation |
| Improving website performance and content | Legitimate interests |
| Analysing site traffic via Google Analytics | Consent (via cookie preferences) |
| Marketing emails (where opted in) | Consent |
| Complying with legal and regulatory obligations | Legal obligation |
4. Cookies
Our website uses cookies — small text files placed on your device — to enhance your experience and help us understand how visitors use our site.
4.1 Types of Cookies We Use
- Essential cookies — required for the website to function correctly; these cannot be disabled
- Analytics cookies — used to measure site traffic and user behaviour (e.g. Google Analytics)
- Preference cookies — store your settings and choices to personalise your experience
- Marketing cookies — used to deliver relevant content and measure campaign effectiveness
4.2 Managing Cookies
When you first visit our website, you will be presented with a cookie consent banner. You may accept all cookies, reject non-essential cookies, or manage your preferences individually. You can update your cookie preferences at any time via your browser settings or our cookie preference centre.
For guidance on managing cookies in your browser, visit www.aboutcookies.org.
5. Third-Party Services
To deliver our services and operate our website effectively, we use a number of trusted third-party tools. These providers may process your data on our behalf:
- Google Analytics & Google Search Console — website traffic analysis and performance monitoring
- Google Ads — advertising campaign management and reporting
- WordPress hosting providers — secure hosting of client and company websites
- Email and CRM platforms — managing client communications and project workflows
- Payment processors — invoicing and payment collection
Each of these providers operates under their own privacy policy. We ensure that any third party with access to your data is bound by appropriate data processing agreements. We do not sell your personal data to third parties.
6. Data Sharing & Disclosure
We do not sell, rent, or trade your personal information. We may share data in the following limited circumstances:
- With trusted subcontractors or freelancers who assist in delivering our services, under confidentiality agreements
- With our hosting, analytics, and software providers as described in Section 5
- Where required by law, regulation, or a valid request from a public authority
- In the event of a business sale or merger, where your data may transfer as a business asset
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:
- Client project data — retained for 6 years after project completion (in line with UK contract law)
- Enquiry and contact data — retained for 2 years if no contract is formed
- Financial and invoicing records — retained for 7 years (HMRC requirement)
- Website analytics data — retained for 26 months (Google Analytics default)
- Email marketing — retained until you unsubscribe or withdraw consent
Upon expiry of the applicable retention period, data is securely deleted or anonymised.
8. Data Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it from unauthorised access, loss, alteration, or disclosure. These measures include:
- SSL/TLS encryption on all our websites
- Secure, access-controlled hosting environments
- Strong password policies and two-factor authentication for internal systems
- Regular software updates and security patching (including WordPress)
- Limiting access to personal data to staff who require it
Whilst we take all reasonable precautions, no method of internet transmission is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Information Commissioner’s Office (ICO) as required by law.
9. Your Rights Under UK GDPR
As a data subject in the United Kingdom, you have the following rights regarding your personal data:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — request correction of inaccurate or incomplete data
- Right to erasure — request deletion of your data where there is no legitimate reason for us to continue processing it
- Right to restrict processing — request that we limit how we use your data in certain circumstances
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interests, or to direct marketing
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, please contact us at hello@digitalmovement.co.uk. We will respond within one calendar month of receiving your request.
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
10. Children’s Privacy
Our website and services are intended for business and professional audiences. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted personal information to us, please contact us immediately and we will delete it without delay.
11. Links to Other Websites
Our website may contain links to third-party websites, including those of clients, partners, and tools we recommend. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies independently before submitting any personal information.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. Any updates will be posted on this page with a revised ‘Last updated’ date at the top. For significant changes, we will notify active clients directly where appropriate.
We encourage you to review this policy periodically to stay informed about how we protect your data.
13. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or how Digital Movement handles your personal data, please do not hesitate to get in touch:
- Email: hello@digitalmovement.co.uk
- Website: digitalmovement.co.uk