Privacy Policy
Privacy Policy
PM Digital Design Last updated: [22/09/2026
This Privacy Policy explains how [PM Digital Design Ltd] ("PM Digital", "we", "us", "our") collects, uses, shares and protects personal data when you visit [www.pmdigitaldesign.com] (the "Site"), enquire about our services, or work with us as a client. We are committed to protecting your privacy and handling your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
[PM Digital Design Ltd] is the data controller responsible for your personal data.
- Company: [PM Digital Design Ltd], company number [ NI689800]
- Contact for data matters: [paddy@pmdigitaldesign.com]
If you have any questions about this policy or how we handle your data, contact us at the email above.
2. The personal data we collect
Depending on how you interact with us, we may collect:
When you enquire or contact us (via our form, email, WhatsApp, or a booked call):
- Name
- Email address
- Phone number (if provided)
- Company or store name and website URL
- Business information you share, such as monthly revenue range, the services you're interested in, and details about your store or funnel
- The content of your message or enquiry
When you use the Site:
- Technical data such as IP address, browser type, device information, operating system and referring URLs
- Usage data such as pages visited, time on page, clicks and how you navigate the Site
- Cookie and analytics data (see section 7)
When you become a client:
- Business contact details for you and members of your team
- Billing and payment information (processed by our payment provider, we do not store full card details)
- Access credentials and account information necessary to deliver our services (for example, store admin access), handled under a separate agreement
- Communications and records relating to the engagement
When you subscribe to our newsletter or download a resource:
- Name and email address
- Records of your engagement with our communications
We do not intentionally collect special category data (such as health, race or political opinions), and we ask that you do not send it to us.
3. How we collect your data
- Directly from you, when you complete a form, email or message us, book a call, subscribe, or become a client.
- Automatically, through cookies and similar technologies when you use the Site (see section 7).
- From third parties, such as analytics providers, or where a client authorises us to access their systems to deliver services.
4. Why we use your data, and our lawful basis
We process personal data only where we have a lawful basis to do so:
| What we use it for | Lawful basis |
|---|---|
| Responding to your enquiry and providing information you request | Legitimate interests / steps to enter a contract |
| Delivering our services and managing our client relationship | Performance of a contract |
| Sending our newsletter and marketing communications | Consent, or legitimate interests for existing clients |
| Improving the Site and understanding how it's used | Legitimate interests |
| Processing payments and keeping financial records | Contract / legal obligation |
| Complying with legal and regulatory obligations | Legal obligation |
| Protecting our business and preventing fraud | Legitimate interests |
Where we rely on consent (for example, marketing emails or certain cookies), you can withdraw it at any time.
5. Who we share your data with
We do not sell your personal data. We share it only with:
Service providers (data processors) who help us run our business and deliver our services, under contracts that require them to protect your data. These may include providers of:
- Website hosting and ecommerce platform [e.g. Shopify]
- Website and product analytics [e.g. Google Analytics, Microsoft Clarity]
- Email marketing and newsletters [e.g. Klaviyo]
- CRM and project management [e.g. Monday.com]
- Call scheduling and video calls [e.g. Calendly, Google Meet]
- Call recording and transcription [e.g. Fireflies.ai]
- Messaging [e.g. WhatsApp, Slack]
- Payment processing [e.g. Stripe, your provider]
- Cloud storage [e.g. Google Workspace]
[Confirm and complete this list with the actual tools you use. This is the section most likely to be inaccurate and it matters legally.]
Professional advisers such as our accountants and lawyers, where necessary.
Authorities or third parties where required by law, to enforce our agreements, or to protect our rights, property or safety.
6. When we act as a processor for our clients
When we deliver services to a client, we often access and process personal data that belongs to that client, for example, their customers' names, email addresses, order history and support messages, through access to their store and tools.
In these cases the client is the data controller and we act as their data processor. We only process that data to deliver the services the client has instructed, under the terms of our agreement with them (including a Data Processing Agreement where required). We do not use our clients' customer data for our own purposes.
If you are a customer of one of our clients and have a question about your data, please contact that business directly, as they are the controller responsible for it.
7. International data transfers
Some of our service providers are based outside the United Kingdom, including in the United States. Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or transfers to countries covered by UK adequacy regulations. You can request more information about these safeguards using the contact details above.
8. Cookies and tracking
We use cookies and similar technologies to make the Site work, understand how it's used, and improve it. These include:
- Essential cookies, needed for the Site to function.
- Analytics cookies, which help us understand how visitors use the Site.
- Marketing cookies, which may be used to measure and improve our marketing.
You can control cookies through our cookie banner and your browser settings. Blocking some cookies may affect how the Site works.
[If you use a cookie consent tool, reference it here, and consider a separate, detailed Cookie Policy listing each cookie, its purpose and duration.]
9. How long we keep your data
We keep personal data only as long as necessary for the purposes we collected it for, including to satisfy any legal, accounting or reporting requirements.
- Enquiry data: [e.g. up to 24 months if you don't become a client]
- Client data: for the duration of the engagement and [e.g. 6 years] afterwards, to meet legal and accounting obligations
- Marketing data: until you unsubscribe or withdraw consent
- Website analytics: [retention period set in your analytics tool]
[Confirm your actual retention periods.]
10. Your rights
Under UK data protection law, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data in certain circumstances
- Restrict our processing of your data
- Object to processing based on legitimate interests, and to direct marketing at any time
- Data portability, to receive your data in a usable format
- Withdraw consent where we rely on it
- Complain to a supervisory authority
To exercise any of these rights, contact us at [paddy@pmdigitaldesign.com]. We will respond within one month.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk or on 0303 123 1113, though we'd appreciate the chance to resolve your concerns first.
11. How we protect your data
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. These include access controls, secure systems and agreements with our service providers. No method of transmission or storage is completely secure, but we take reasonable steps to keep your data safe.
12. Children's privacy
Our Site and services are intended for businesses and are not directed at children under 16. We do not knowingly collect personal data from children.
13. Third-party links
Our Site may link to third-party websites. We are not responsible for their privacy practices, and we encourage you to read their privacy policies.
14. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows when it was last revised. Material changes will be posted on this page.
15. Contact us
For any questions about this policy or your personal data email us.