Privacy Policy

Who we are

AL Digital is a UK digital agency and is the data controller for the personal information described in this policy where we decide how and why that information is used.

For privacy questions or to exercise your data protection rights, contact hello@aldigitalagency.live.

Where AL Digital processes personal data solely on a client's documented instructions as part of delivering a service, AL Digital may act as a processor instead. The relevant client agreement or data processing terms will govern that processing.

Information we collect

We may collect information that you provide directly to us, including:

• your name, email address, telephone number and other contact details;
• your business or organisation name, role and business information;
• project requirements, budget or timescale information, service interests and other details you choose to include in contact, quote or discovery forms; and
• communications and correspondence with AL Digital.

When you use our website, we may also receive technical and usage information such as IP address, browser and device information, approximate location derived from IP, referral source, pages viewed, dates and times of visits, interaction data and security or server logs.

Please do not include special category or highly sensitive personal information in free-text fields unless it is genuinely necessary for your enquiry. If such information is provided, we will handle it only where there is an appropriate lawful basis and, where required, an additional condition under data protection law.

How and why we use personal information

We use personal information only where we have a lawful basis. Depending on the circumstances, this may include:

• Contract or steps before a contract: to respond to a request for services, prepare a proposal or quote, discuss a project, onboard a client and deliver agreed services.
• Legitimate interests: to operate and improve our business and website, manage business relationships, respond to enquiries, keep appropriate records, prevent misuse, maintain website and network security, and understand how our services and website are used, where those interests are not overridden by your rights and interests.
• Consent: where you have made a genuine choice, including for non-essential analytics or similar cookies where consent is required. You can withdraw consent at any time.
• Legal obligation: where processing is necessary to comply with applicable law, regulatory requirements, accounting obligations or valid legal requests.

We do not use personal information for purposes that are incompatible with the reason it was collected unless permitted by law and, where required, we will provide further information before doing so.

Contact, quote and discovery forms

When you submit a contact, quote, discovery or project enquiry form, we use the information you provide to understand your requirements, respond to you, assess whether AL Digital can help, prepare proposals where appropriate and manage any subsequent business relationship.

The lawful basis will normally be taking steps at your request before entering into a contract and/or our legitimate interests in responding to genuine business enquiries and developing client relationships. If your enquiry becomes a client engagement, relevant information may be retained as part of our client and project records.

Website analytics and Microsoft Clarity

We use Microsoft Clarity to understand how visitors use and interact with our website. Clarity can provide behavioural metrics, heatmaps and session-replay style analytics based on interactions such as clicks, scrolling, navigation and page usage. This helps us identify usability issues and improve website performance and customer experience.

Clarity may use cookies and similar technologies and can associate website interaction data with pseudonymous identifiers. We treat Clarity analytics cookies as non-essential and rely on consent where required by UK law. Microsoft may process information as described in its own privacy documentation and applicable product terms.

You can find more information in our Cookie Policy and in Microsoft's Privacy Statement.

Cookies and similar technologies

Our website may use cookies or similar technologies that are necessary for core website functionality, security and performance. We may also use non-essential analytics technologies, including Microsoft Clarity, to understand website usage.

Where UK law requires consent for non-essential cookies, the lawful basis for the related processing is consent. You can withdraw or change your choice at any time using the cookie controls made available on the website or by following the guidance in our Cookie Policy. Blocking some cookies may affect certain website features.

Service providers, processors and sharing

We may share personal information only where necessary with trusted organisations that help us operate the website and provide our services. These may include website hosting and infrastructure providers, email and communications providers, analytics providers such as Microsoft, professional advisers, IT or security providers, and carefully selected contractors supporting client work.

Where a supplier acts as our processor, we require it to process personal information only for authorised purposes and subject to appropriate data protection and security obligations. We may also disclose information where required by law, to protect legal rights, to investigate fraud or security incidents, or in connection with a business reorganisation where lawful safeguards apply.

AL Digital does not sell personal information.

International transfers

Some service providers may process personal information outside the United Kingdom. Where a transfer is subject to UK GDPR international-transfer rules, we will use an appropriate lawful transfer mechanism. Depending on the destination and provider, this may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another legally recognised safeguard.

Where relevant, we also consider the circumstances of the transfer and any supplementary technical or organisational safeguards that are appropriate to protect the information.

Data retention

We keep personal information only for as long as it is reasonably necessary for the purpose for which it was collected, including to respond to enquiries, manage client relationships, provide services, maintain security and business records, and meet legal, accounting or contractual obligations.

Retention periods vary according to the type of information and context. We consider the nature and sensitivity of the data, the purpose of processing, whether the information is still needed, applicable legal or limitation periods, and any need to establish, exercise or defend legal claims. When information is no longer required, we delete it, anonymise it or securely dispose of it as appropriate.

Security

We use reasonable technical and organisational measures designed to protect personal information against accidental or unlawful loss, alteration, disclosure, destruction or unauthorised access. These measures may include access controls, secure hosting and communications, software maintenance, backups and proportionate security monitoring.

No method of transmission or storage is completely risk-free. We therefore review and improve our safeguards where appropriate and limit access to personal information to people and providers who need it for legitimate purposes.

Your UK GDPR rights

Depending on the circumstances and the lawful basis used, you may have rights to:

• ask for access to your personal information;
• ask us to correct inaccurate or incomplete information;
• ask us to erase personal information in certain circumstances;
• ask us to restrict processing in certain circumstances;
• object to processing based on legitimate interests and object at any time to direct marketing;
• receive certain information in a portable format where the right to data portability applies; and
• withdraw consent at any time where processing is based on consent, without affecting processing already carried out lawfully.

These rights are not absolute and exemptions may apply. To make a request, email hello@aldigitalagency.live. We may need to verify your identity before responding.

Complaints and the ICO

If you have a concern about how AL Digital uses your personal information, please contact us first at hello@aldigitalagency.live so we can try to resolve it.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator. Information about making a complaint is available at ico.org.uk.

Changes to this policy

We may update this Privacy Policy when our services, website technologies, suppliers or legal obligations change. We will publish the revised version on this page and update the date shown above. Where a change materially affects how we use personal information, we will take additional steps to inform affected people where required.

Privacy contact: hello@aldigitalagency.live. No postal privacy contact address has been provided for publication, so none has been invented in this policy.