Privacy Policy

1. Who we are

Convertec Ltd is a digital marketing agency registered in England and Wales (Company No. 15891234). Our registered office is at 20 Farringdon Street, London EC4A 4AB, United Kingdom.

Data Controller: Convertec Ltd Data Protection contact: privacy@convertec.cloud ICO Registration Number: ZB712345

If you are located outside the United Kingdom, Convertec Ltd remains the data controller for any personal data we collect from you, and we apply UK GDPR standards as a baseline wherever local law does not require a higher standard.

2. What data we collect

We collect personal data in the following categories:

Identity Data — first name, last name, job title. Contact Data — business email address, telephone number, business address. Technical Data — IP address, browser type and version, time zone, device and operating system. Usage Data — information about how you use our website, products and services. Marketing Data — your preferences in receiving marketing communications from us. Enquiry Data — information you submit through our contact form, including company name, budget range, service interest, and message content. Client Data — data provided or generated in the course of delivering our services, including campaign briefs, advertising account access (granted via platform partner access — we never store your passwords), performance reports, and creative assets.

3. How we collect your data

Direct interactions — you provide data when completing our enquiry form, subscribing to our newsletter, requesting a strategy session, or contacting us by email or phone.

Automated technologies — as you interact with our website, we automatically collect Technical Data using cookies, server logs, and similar technologies. See our Cookie Policy for full details.

Third parties — we may receive data about you from analytics providers, advertising networks, and our client relationship management tools.

4. How we use your data

We process your data on the following lawful bases: Contract (to onboard you as a client and deliver services), Legitimate Interests (to respond to enquiries, improve our website, and manage business relationships), Legal Obligation (accounting, tax, and anti-money-laundering requirements), and Consent (for marketing emails and non-essential cookies).

We use your data specifically to: • Respond to your enquiry and send you requested information • Onboard you as a client and deliver agreed services • Manage advertising campaigns across relevant platforms on your behalf • Issue invoices and collect payment in GBP • Send performance reports and client portal notifications • Improve our website through aggregated analytics • Send marketing communications where you have opted in, or opted out of if you no longer wish to receive them

5. Data sharing and disclosure

We do not sell your personal data. We share data only with trusted service providers who help us operate our business (hosting, email, payment processing, and project management), with advertising platforms where required to run campaigns on your behalf, and where required by law, regulation, or court order.

Each third party is bound by a data processing agreement requiring them to protect your data to a standard equivalent to our own.

6. International transfers

Some of our service providers are based outside the United Kingdom. Whenever we transfer data internationally, we ensure an equivalent level of protection using one or more safeguards: countries deemed adequate by the UK Information Commissioner's Office, Standard Contractual Clauses, or Binding Corporate Rules where applicable. You can request a copy of the relevant transfer mechanism by contacting privacy@convertec.cloud.

7. Data retention

We retain personal data only for as long as necessary for the purpose it was collected:

Enquiry data (unconverted prospects) — 24 months from submission Client contract and financial records — 7 years (Companies Act 2006) Campaign performance data — 3 years from campaign end Website analytics — 26 months, rolling Marketing consent records — until consent is withdrawn

After the relevant period, data is securely deleted or anonymised.

8. Your rights

Under UK GDPR and applicable data protection law, you have the right to: Access a copy of the personal data we hold about you; request Rectification of inaccurate or incomplete data; request Erasure of your data in certain circumstances; request Restriction of processing; receive your data in a portable, machine-readable format; Object to processing based on legitimate interests or direct marketing; and Withdraw Consent at any time where processing is based on consent.

To exercise any of these rights, email privacy@convertec.cloud. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or damage, including TLS encryption in transit, strict access controls, role-based permissions, and regular security reviews. No system is completely secure, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email. We encourage you to review this page periodically.

11. Contact us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact:

Convertec Ltd Data Protection Team 20 Farringdon Street London EC4A 4AB United Kingdom Email: privacy@convertec.cloud General enquiries: hello@convertec.cloud