Privacy Policy

Who we are

A1 Digital ("we", "us", "our") is a done-for-you online-presence agency. We build and manage websites, branded email, search and AI visibility, content, reviews and marketing for small businesses. For the purposes of data protection law, A1 Digital is the data controller for the personal data described in this policy. You can reach our privacy contact any time through our contact page.

What we collect

We only collect what we genuinely need to answer your enquiry and run your services. That falls into a few categories:

• Contact & account details: your name, email, phone number, business name, domain and the plan you're on, given when you enquire or become a customer.
• Service information: the content, logins, brand assets and access we need to build and run your website, email and marketing (for example DNS access, page copy, images, business hours).
• Billing information: your billing name and the records of payments you've made. We do not store full card numbers. Card payments are handled by our PCI-compliant payment processor.
• Communications: the emails, messages and call notes exchanged with you, so we have a record of what you've asked for.
• Privacy-friendly analytics: aggregate, non-invasive information about how our own website is used (such as page views and approximate region). We do not build advertising profiles or track you across other websites.

How we use it

• To respond to your enquiry and prepare a proposal or example for you.
• To deliver, maintain and support the services in your plan.
• To send service-related updates, your monthly reports and important account notices.
• To take payment and keep accurate financial records.
• To improve our website, services and customer support.
• To meet our legal, tax and accounting obligations.

Legal basis for processing

Where data protection law (such as the UK/EU GDPR) applies, we rely on the following lawful bases:

• Contract: to deliver the services you've signed up for and take payment for them.
• Legitimate interests: to respond to enquiries, support customers, secure our systems and improve our services, balanced against your rights.
• Legal obligation: to keep records required by tax and accounting law.
• Consent: where we ask for it specifically (for example, optional updates). You can withdraw consent at any time.

What we never do

• We never sell, rent or trade your personal data.
• We never send you marketing you didn't ask for.
• We never use cross-site advertising trackers on our website.
• We never send cold or unsolicited email on your behalf. Any email marketing we run for you is to your own opt-in list only.

Your data, your ownership

Your domain, website content, brand assets and email account belong to you, not to us. If you leave, we return or hand over access to anything that is yours, and we don't hold your property hostage. The systems, templates and tooling we use to deliver the service remain ours.

Sharing & service providers

We only share information with the trusted providers needed to run your services, and only the minimum required. These act as our processors and are bound by contract to protect your data and use it only on our instructions. Typical categories include:

• Hosting & infrastructure: to host your website and our platform.
• Email & DNS providers: to set up and run your branded email and domain records.
• Payment processing: to take and reconcile payments securely.
• Analytics & support tooling: privacy-friendly analytics and the inbox/helpdesk we use to support you.

We may also disclose information where we're legally required to (for example, a valid legal request), or to protect our rights, customers or systems from harm.

How long we keep it

We keep personal data only as long as we need it for the purpose it was collected, then delete or anonymise it. As a guide: enquiry data is kept for up to 24 months if you don't become a customer; account and service data is kept for the life of your account; and billing/tax records are kept for the period required by law (typically 6 to 7 years). You can ask us to delete data earlier where we're not legally required to keep it.

International transfers

We serve customers in several countries, so your data may be processed outside your home country (for example, on hosting located in the US, UK or EU). Where data crosses borders, we rely on appropriate safeguards (such as providers with recognised data-protection frameworks or standard contractual clauses) to keep it protected to the same standard.

How we protect it

We use sensible, proportionate measures to keep your data safe: encryption in transit (HTTPS), access controls and least-privilege access to your accounts, reputable infrastructure providers, and regular review of who can access what. No system is ever 100% secure, but we treat your access and data as if they were our own. If a breach ever affected your personal data, we'd notify you and any regulator as required by law.

Your rights

Depending on where you live, you have some or all of the following rights over your personal data:

• Access: get a copy of the data we hold about you.
• Rectification: correct anything inaccurate or incomplete.
• Erasure: ask us to delete data we no longer need to keep.
• Restriction & objection: limit or object to certain processing.
• Portability: receive your data in a portable format.
• Withdraw consent: where we relied on your consent.

To exercise any of these, get in touch through our contact page and we'll action it promptly and at no charge. If you're in the UK/EU and you're unhappy with how we've handled your data, you also have the right to complain to your local data-protection authority (in the UK, the ICO).

Cookies

We use only essential and privacy-friendly cookies on this website. See our Cookie Policy for the full detail and how to manage them.

Children's privacy

Our services are for businesses and are not directed at children. We don't knowingly collect personal data from anyone under 16. If you believe a child has given us data, contact us and we'll delete it.

Changes to this policy

We may update this policy from time to time as our services or the law change. We'll always update the "last updated" date above, and we'll notify customers of any material changes by email before they take effect.

Contact us

For any privacy question or request, get in touch through our contact page. We're a small team and a real person will reply.