1. Introduction
PNK Digital ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, use our services, or interact with us.
This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are the data controller responsible for your personal data.
Please read this policy carefully to understand our practices regarding your personal data. By using our website or services, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller Contact Information
If you have any questions about this Privacy Policy or our data practices, please contact us:
3. Personal Data We Collect
We may collect and process the following categories of personal data:
3.1 Information You Provide to Us
- Identity Data: Name, job title, company name
- Contact Data: Email address, telephone number, business address
- Project Data: Information about your project requirements, budget, and timeline preferences submitted through our project builder
- Communication Data: Any correspondence you have with us including enquiries and feedback
3.2 Information Collected Automatically
- Technical Data: IP address, browser type and version, operating system, device information
- Usage Data: Pages visited, time spent on pages, navigation paths, referral source
- Cookie Data: Information collected through cookies and similar technologies (see Section 9)
4. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Under UK GDPR, we must have a valid legal basis for processing your data. The table below sets out the purposes for which we process your data and our legal basis:
| Purpose | Legal Basis |
|---|---|
| To respond to your enquiries and provide quotes | Legitimate interests / Contract performance |
| To deliver our services and manage our relationship with you | Contract performance |
| To send marketing communications (with your consent) | Consent |
| To improve our website and services | Legitimate interests |
| To comply with legal obligations | Legal obligation |
| To protect our rights and prevent fraud | Legitimate interests |
5. Who We Share Your Data With
We may share your personal data with the following categories of recipients:
- Service Providers: Third-party companies that help us operate our business, including hosting providers, email services, analytics providers, and payment processors
- Professional Advisers: Lawyers, accountants, and insurers who provide professional services to us
- Regulatory Authorities: Government bodies, regulators, and law enforcement where required by law
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.
6. International Transfers
Some of our service providers may be located outside the United Kingdom. Whenever we transfer your personal data internationally, we ensure appropriate safeguards are in place to protect your data, including:
- Transfers to countries with an adequacy decision from the UK Government
- Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO)
- Binding Corporate Rules where applicable
Please contact us if you want further information on the specific mechanisms used when transferring your personal data internationally.
7. Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements.
To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for processing, and legal requirements.
- Enquiry data: Retained for 2 years from last contact unless we enter into a business relationship
- Client data: Retained for 7 years after the end of our business relationship (for legal and accounting purposes)
- Website analytics: Retained for 26 months
8. Your Legal Rights
Under UK data protection law, you have the following rights regarding your personal data:
- Right of Access: You can request a copy of the personal data we hold about you (commonly known as a "subject access request").
- Right to Rectification: You can request correction of inaccurate or incomplete personal data we hold about you.
- Right to Erasure: You can request deletion of your personal data where there is no good reason for us to continue processing it.
- Right to Restrict Processing: You can request suspension of processing of your personal data in certain circumstances.
- Right to Data Portability: You can request transfer of your personal data to you or a third party in a structured, machine-readable format.
- Right to Object: You can object to processing of your personal data where we are relying on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where we rely on consent to process your data, you can withdraw that consent at any time.
To exercise any of these rights, please contact us at privacy@pnk-digital.com. We will respond to your request within one month. There is no fee for making a request unless it is manifestly unfounded or excessive.
9. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to distinguish you from other users, improve your experience, and analyse how our website is used.
Types of Cookies We Use
- Strictly Necessary Cookies: Essential for the website to function properly. You cannot opt out of these.
- Performance Cookies: Help us understand how visitors interact with our website by collecting anonymous information.
- Functional Cookies: Remember your preferences and choices to provide enhanced features.
- Marketing Cookies: Track your activity across websites to deliver relevant advertising (only used with your consent).
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.
10. Data Security
We have implemented appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These measures include:
- Encryption of data in transit using TLS/SSL
- Secure hosting with reputable service providers
- Access controls limiting who can access personal data
- Regular security assessments and updates
While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but will notify you and relevant authorities of any data breach in accordance with our legal obligations.
11. Third-Party Links
Our website may contain links to third-party websites, plugins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy policies. We encourage you to read the privacy policy of every website you visit.
12. Children's Privacy
Our services are not intended for children under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will take steps to delete such information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this page periodically to stay informed about how we protect your data.
14. Complaints
If you have any concerns about how we handle your personal data, please contact us first so we can try to resolve the issue.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues:
Website: www.ico.org.uk
Telephone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF