Privacy Policy

This Privacy Policy applies to highstreetdigitalnorfolk.co.uk and High Street Digital client services.

1. Who we are

High Street Digital provides website design and refresh services, social media management, Google Business Profile support and business-plan writing and support services.

Data controller: High Street Digital
Website: highstreetdigitalnorfolk.co.uk
Email: hello@highstreetdigitalnorfolk.co.uk

2. Personal information we may collect

• Identity and contact information, including your name, business name, email address, telephone number and business address or service area.
• Enquiry and project information, including questionnaire answers, briefs, deadlines, preferences and correspondence.
• Business content you provide, such as logos, photographs, service descriptions, prices, testimonials and social-media links.
• Business-plan information, including goals, costs, pricing, forecasts, funding objectives, competitor information and supporting documents.
• Transaction and accounting information, such as invoices, payment status and bookkeeping records. We do not need passwords, PINs or full payment-card details.
• Website and technical information, which may include IP address, browser or device information, pages viewed, privacy choices and basic analytics where enabled.
• Marketing preferences where you have chosen to receive marketing communications.

3. Why we use your information and our lawful bases

• Enquiries and quotes: steps at your request before entering a contract and our legitimate interests.
• Providing and managing purchased services: performance of a contract.
• Project communication, revisions, approvals and support: performance of a contract and legitimate interests.
• Invoices, accounting and tax records: legal obligation and legitimate interests.
• Optional analytics: consent where required and legitimate interests where lawful and appropriate.
• Marketing: consent where required, or another lawful basis where permitted. You can opt out at any time.
• Preventing misuse, fraud or security issues: legitimate interests and, where applicable, legal obligation.

4. Where we get information from

Most information comes directly from you when you contact us, complete a questionnaire, supply project materials, approve work or purchase a service. We may also use relevant publicly available business sources, such as your existing website, public social-media pages, Companies House, Google Business Profile or other public business listings.

5. Who we may share information with

We do not sell your personal information. Where reasonably necessary, we may share it with website, hosting, form, email, cloud-storage and productivity providers; payment providers; professional advisers; contractors helping deliver an agreed service under appropriate obligations; and regulators or authorities where legally required.

Some providers may process information outside the UK. Where this happens, we will use providers and safeguards intended to provide an appropriate level of protection as required by UK data-protection law.

6. How long we keep information

We keep personal information only as long as reasonably necessary, including for legal, accounting and dispute-resolution purposes. As a general guide:

• unsuccessful or inactive enquiries may normally be deleted after around 24 months;
• client project, contract, approval, invoice and accounting records may normally be kept for up to 6 years after the client relationship ends where reasonably required;
• marketing information is kept until you opt out or it is no longer useful or lawful; and
• privacy-choice records are kept for an appropriate period according to the relevant tool and compliance needs.

We may keep information longer where legally required, during an ongoing dispute or for another legitimate reason.

7. Your data-protection rights

Depending on the circumstances, UK data-protection law may give you rights to request access, correction, deletion, restriction, objection or transfer. Where processing relies on consent, you can withdraw consent at any time without affecting earlier lawful processing. Contact us to exercise a right; we may need to verify your identity.

8. Marketing

You can ask us to stop sending marketing communications at any time. Necessary messages about an active enquiry, project, invoice or contract are not marketing.

9. Cookies and website analytics

Strictly necessary technologies may be used where required for the website to operate. Non-essential analytics, advertising or similar technologies will only be enabled after appropriate consent. See our Cookie Policy.

10. Security

We take reasonable technical and organisational steps to protect personal information, but no internet or electronic-storage system is completely secure. Please do not send passwords, PINs, full bank-account credentials or unnecessary sensitive information through our forms.

11. Links and third-party services

Our website may link to third-party websites, platforms or services. Their handling of personal information is governed by their own privacy information.

12. Complaints

Please contact us first so we can try to resolve any concern. You also have the right to complain to the Information Commissioner’s Office, the UK regulator. Current details are at ico.org.uk.

13. Changes to this policy

We may update this policy when our services, website tools or legal requirements change. The latest version will be published here with its updated date.