Privacy Policy

Last updated: 02/06/2026


1. Introduction

This Privacy Policy explains how B24 Digital (“we”, “us”, “our”) collects, uses, stores and protects personal data when you visit our website at https://b24.digital (“our site”), make an enquiry, or engage us for our services. It also sets out your rights under data protection law and how to exercise them.

We are committed to protecting your privacy and handling your personal data in an open and transparent manner, in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

2. Who we are

For the purposes of data protection law, the data controller for the personal data collected through this website is:

  • Company: B24 Digital Limited
  • Registered office: 25-29 Sandy Way, Yeadon, Leeds, England, LS19 7EW
  • Company registration number: 14778503
  • Email: [email protected]
  • Telephone: 07912 290275

If you have any questions about this policy or how we handle your personal data, please contact us using the details above.

Note: We are not required to appoint a Data Protection Officer, but you can direct all data protection queries to the contact above.

3. The personal data we collect

We only collect personal data that is relevant and necessary for the purposes set out in this policy. Depending on how you interact with us, this may include:

When you contact us through our website form, email or phone

  • Your name (first and last)
  • Your email address
  • Your company name (where provided)
  • The contents of your message or enquiry
  • Any other information you choose to share with us

When you become a client or supplier

  • Business contact details (name, job title, email, telephone, company)
  • Correspondence and records relating to our engagement
  • Billing, invoicing and payment information necessary to manage the relationship

When you visit our website

  • Technical data such as your IP address, browser type and version, device information, operating system, and approximate location
  • Usage data such as the pages you visit, the time and date of your visit, time spent on pages, and referral sources
  • Cookies and similar technologies (see Section 8 below)

We do not intentionally collect any special category data (such as data revealing health, ethnicity, religious beliefs or political opinions) through our website, and we ask that you do not send us such information.

4. How we collect your data

We collect personal data:

  • Directly from you, when you complete our contact form, email us, call us, or engage us for our services
  • Automatically, through cookies and analytics technologies when you use our website (where you have consented)
  • From third parties, such as our agency partners, where we work together on a project, or from publicly available business sources

5. How we use your data and our lawful bases

Under UK GDPR, we must have a lawful basis for processing your personal data. The table below sets out the purposes for which we process your data and the lawful basis we rely on for each.

Purpose Lawful basis
Responding to your enquiries and providing information you request Legitimate interests / steps to enter into a contract
Providing our services and managing our client relationships Performance of a contract
Managing supplier relationships Legitimate interests / performance of a contract
Sending invoices and processing payments Performance of a contract / legal obligation
Sending marketing communications (where permitted) Consent or legitimate interests (see Section 9)
Operating, maintaining and improving our website Legitimate interests
Using analytics and non-essential cookies Consent
Complying with legal and regulatory obligations (e.g. accounting, tax) Legal obligation
Establishing, exercising or defending legal claims Legitimate interests

Where we rely on legitimate interests, we have considered the impact on your rights and freedoms and are satisfied that our processing does not override them. You can ask us for more detail about this balancing assessment at any time.

6. Acting as a data processor

In the course of providing our SEO, analytics and reporting services, we may process personal data contained within our clients’ systems, websites or analytics platforms on their behalf. In these circumstances our client is the data controller and we act as a data processor, handling that data only in accordance with the client’s instructions and the data processing terms agreed between us. This Privacy Policy does not cover that processing — the relevant client’s own privacy policy will apply to it.

7. Who we share your data with

We do not sell your personal data. We may share it with the following categories of recipient, only where necessary:

  • Service providers and processors who help us run our business and website, such as our website host and content delivery network, email and IT providers, analytics providers, and payment or accounting providers
  • Agency partners where we are collaborating on a project that involves you, and only on a need-to-know basis
  • Professional advisers such as accountants, insurers and legal advisers
  • Regulators, law enforcement and government bodies where we are legally required to disclose data

All third parties who process personal data on our behalf are required to do so under a written contract that obliges them to keep your data secure and to use it only for the purposes we specify.

8. Cookies and analytics

Our website uses cookies and similar technologies to function correctly and to help us understand how visitors use the site.

  • Essential cookies are necessary for the website to operate and do not require your consent.
  • Analytics and performance cookies help us measure and improve site performance. We use Google Analytics 4 / Google Tag Manager for this purpose. These are only set where you have given your consent.

We obtain your consent to non-essential cookies through the cookie banner displayed when you first visit our site.

For more detail about the specific cookies we use, please see our Cookie Policy.

9. Marketing communications

We will only send you marketing communications where we have a lawful basis to do so — either because you have consented, or because you are an existing business contact and we are relying on legitimate interests in line with PECR (the “soft opt-in”).

Every marketing email we send includes a clear way to unsubscribe, and you can opt out at any time by clicking the unsubscribe link or contacting us directly. Withdrawing consent will not affect any service-related communications that are necessary to manage our relationship with you.

10. International transfers

We are based in the United Kingdom and aim to keep your personal data within the UK or European Economic Area (EEA) wherever possible. Some of our service providers may process data outside the UK/EEA. Where this happens, we ensure an appropriate safeguard is in place, such as an adequacy decision or the use of the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses, so that your data continues to be protected to UK standards.

11. How long we keep your data

We keep personal data only for as long as necessary for the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements. In general:

  • Enquiries that do not become clients: retained for up to 12 months and then deleted
  • Client and supplier records: retained for the duration of our relationship and for up to 6 years afterwards, in line with our legal and tax obligations
  • Marketing data: retained until you unsubscribe or withdraw consent
  • Website analytics data: retained in line with the settings of our analytics platform

When data is no longer required, we will securely delete or anonymise it.

12. How we keep your data secure

We have appropriate technical and organisational measures in place to protect your personal data against unauthorised access, loss, misuse or alteration. These include access controls, encryption in transit (HTTPS), and limiting access to personal data to those who need it. While no method of transmission over the internet is completely secure, we take all reasonable steps to protect your data.

13. Your rights

Under UK data protection law, you have the following rights in relation to your personal data:

  • The right to be informed about how we use your data (this policy)
  • The right of access to the personal data we hold about you
  • The right to rectification of inaccurate or incomplete data
  • The right to erasure (“right to be forgotten”) in certain circumstances
  • The right to restrict processing in certain circumstances
  • The right to data portability for data you have provided to us
  • The right to object to processing based on legitimate interests or for direct marketing
  • Rights relating to automated decision-making and profiling — we do not make decisions about you based solely on automated processing

To exercise any of these rights, please contact us using the details in Section 2. We will respond within one month. There is normally no charge, although we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive. We may need to verify your identity before responding.

14. Children’s privacy

Our website and services are aimed at businesses and are not directed at children. We do not knowingly collect personal data from anyone under the age of 16.

15. Third-party links

Our website may contain links to third-party websites, plugins and services. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party sites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.

16. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically.

17. How to complain

If you have any concerns about how we handle your personal data, we would encourage you to contact us first so we can try to resolve the matter. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

  • Website: https://ico.org.uk
  • Helpline: 0303 123 1113
  • Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

18. Contact us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

  • Email: [email protected]
  • Telephone: 07912 290275
  • Post: 25-29 Sandy Way, Yeadon, Leeds, England, LS19 7EW