Privacy Policy

1. About us

Pinky Promise Ltd (“Pinky Promise”, “we”, “us” or “our”) is a digital marketing consultancy registered in England and Wales. For the personal information described in this policy, Pinky Promise Ltd is the data controller. Questions or requests may be sent to info@pinkypromisedigital.com.

2. Information we collect

We collect information you provide when you request a quote, make an enquiry, become a client or correspond with us. This may include your name, job title, business name, email address, enquiry details, service requirements, correspondence, contract and invoice records. When needed to provide an agreed service, we may also receive authorised access to business accounts, campaign information, website data, content, customer feedback or other materials supplied by you.

Our website may also receive basic technical information such as IP address, browser type, device type, referring page and server logs. We do not ask for sensitive personal information through our website forms.

3. How and why we use information

We use personal information to answer enquiries, prepare proposals, enter into and manage contracts, deliver services, communicate about work, maintain business records, issue and reconcile invoices, prevent misuse, protect our rights and comply with legal or regulatory duties. We may send relevant service updates or business communications where the law permits; you can ask us to stop marketing messages at any time.

4. Our lawful bases

We rely on the lawful basis that fits the particular activity: taking steps at your request before entering a contract; performing a contract; complying with a legal obligation; pursuing legitimate interests such as running, securing and improving our business; or consent where consent is required. Withdrawing consent does not affect processing that was lawful before withdrawal.

5. Website forms and service providers

Website enquiries are delivered through FormSubmit to our business email account. Form data therefore passes through FormSubmit’s systems before reaching us. We may also use trusted providers for website hosting, email, cloud storage, project management, analytics, invoicing, professional advice and payment processing. Providers may use information only for the service they supply to us or as otherwise permitted by law.

We may disclose information where required by law, to establish or defend legal claims, in connection with a business reorganisation, or with your instructions. We do not disclose a client’s identity, campaign results or confidential materials publicly without permission.

6. International transfers

Some providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards, we use an approved transfer mechanism or another lawful basis for the transfer and take reasonable steps to ensure the information remains protected.

7. How long we keep information

We keep enquiry records for up to 24 months after the last meaningful contact. Client, contract and financial records are normally retained for six years after the relevant engagement or accounting period, unless a longer period is required for a legal claim or statutory duty. Marketing preferences are kept until you opt out. Credentials and platform access are removed or returned when no longer needed. We securely delete or anonymise information when its retention period ends.

8. Security

We use proportionate organisational and technical measures to protect information, including access controls, reputable service providers and limiting access to people who need it. Clients should use secure channels for passwords and enable multi-factor authentication where available. No internet transmission or storage system can be guaranteed completely secure; if a breach creates a legal notification duty, we will follow the applicable reporting requirements.

9. Your rights

Depending on the circumstances, you may ask for access to your personal information, correction, deletion, restriction, portability or an objection to certain uses. You may withdraw consent and opt out of direct marketing at any time. We may need to verify your identity before acting on a request, and some rights are subject to legal exceptions.

Please contact us first so we can help. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

10. Cookies and third-party links

This website does not currently use non-essential first-party cookies. Essential hosting or security technologies may operate to deliver and protect the site. If we add analytics, advertising cookies or embedded tools that require consent, we will provide appropriate information and controls before they are used. Links to other websites are governed by those websites’ own privacy practices.

11. Changes and contact

We may update this policy when our services, providers or legal duties change. The current version will always appear on this page with its revision date. Privacy enquiries and rights requests should be emailed to info@pinkypromisedigital.com.