1. Who we are

This website is operated by ASSISTBDA LTD, a company registered in England and Wales (Company No. 17004760), based in Coalville, Leicestershire.

ASSISTBDA LTD is the data controller for personal data collected through this website. We are registered with the Information Commissioner's Office (ICO) under registration number: [ICO REGISTRATION NUMBER: TO BE ADDED].

For any privacy-related queries, contact us at: yjones@assistbda.com

2. What personal data we collect

We collect personal data in the following ways:

Contact and enquiry forms

When you submit an enquiry via our website, we collect: your name, email address, phone number (optional), and website URL. We also record the subject of your enquiry.

Private client portal

Invited clients provide their name, email address, password, business legal name and address. We store proposals, agreements, signatures and signing status so both parties can review and complete their contract. Passwords are stored as hashes.

Advertising measurement

With your separate advertising consent, Google Ads associates ad clicks with successful SEO enquiries to measure our campaign. We do not send your name, email, phone number or other enquiry form details to Google. You can change your choice through the cookie preferences.

Analytics data

We use Google Analytics 4 and Microsoft Clarity to collect information about how visitors use our website, including pages visited, time on site, general location (country/region level), and (for Clarity) session recordings and heatmaps. This data is only collected with your consent, which you can manage via our cookie banner or Cookie Policy.

3. Legal basis for processing

Enquiry and contact data

Legal basis: Legitimate interests (UK GDPR Article 6(1)(f)). We have a legitimate interest in responding to enquiries submitted through our website, and you have a reasonable expectation that we will respond to your contact request.

Marketing follow-up emails

Legal basis: Legitimate interests for direct follow-up related to your enquiry. We may send you information about our services by email. You can opt out at any time by replying "unsubscribe" to any email we send you.

Analytics and advertising measurement cookies

Legal basis: Consent (UK GDPR Article 6(1)(a) and PECR). Analytics and advertising measurement use separate consent choices in our cookie banner.

Client portal and agreements

Legal basis: Contract or pre-contract steps (UK GDPR Article 6(1)(b)) when the client contracts as an individual; otherwise, legitimate interests (Article 6(1)(f)) in managing agreements with business clients and their representatives. We use this data to give invited clients access to proposals, prepare agreements and record signatures.

4. How we use your data

To respond to your enquiry and discuss our SEO or web development services
To send follow-up information about our services relevant to your enquiry
To improve our website based on anonymised analytics data
To fulfil our contractual obligations where you become a client
To provide invited clients with private access to proposals and agreements and obtain signatures

We will never sell your personal data to third parties or use it for purposes incompatible with those listed above.

5. Third-party processors

We use the following third-party services that may process your personal data on our behalf:

Cloudflare, Inc.

Provides website hosting, content delivery, and email delivery for form submissions. Data may be processed on servers within the EU/UK and USA under Standard Contractual Clauses.

Also hosts the private client portal, its account records and private document storage, and sends portal invitations.

Documenso

Processes agreements, signer names and email addresses, signatures and an audit trail when we ask both parties to sign electronically. The signed agreement is also kept in our private client portal.

Google LLC (Google Analytics 4 and Google Ads)

Provides analytics and advertising conversion measurement according to your consent choices. Data may be processed in the USA under Standard Contractual Clauses. You can review Google's Privacy Policy.

Microsoft Corporation (Clarity)

Provides session recordings, heatmaps, and behavioural analytics. Only activated with your consent. Data may be processed by Microsoft. You can review Microsoft's Privacy Statement.

Google LLC (Google Search Console)

Used as part of our SEO service delivery. When used on your behalf as a client, this is governed by our client agreement.

Google LLC (Gmail / Google Workspace)

Used for email communication with enquirers and clients. Emails you send to yjones@assistbda.com are processed by Google's servers.

6. How long we keep your data

Data type	Retention period
Contact form enquiries	3 years from last contact
Client project data	Duration of contract + 6 years (legal requirement)
Client portal accounts and signed agreements	Duration of contract + 6 years
Google Analytics data	14 months (GA4 default)
Microsoft Clarity data	13 months for dashboard data; session recordings typically 30 days on the free plan
Email correspondence	3 years from last contact

7. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate data.
Right to erasure: you can ask us to delete your data, subject to our legal obligations.
Right to object: you can object to processing based on legitimate interests.
Right to restrict processing: you can ask us to pause processing of your data in certain circumstances.
Right to data portability: you can request your data in a structured, machine-readable format.
Right to withdraw consent: where processing is based on consent (e.g. analytics), you can withdraw it at any time via our cookie settings.

To exercise any of these rights, contact us at yjones@assistbda.com. We will respond within 30 days.

8. Right to complain

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO):

Information Commissioner's Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Tel: 0303 123 1113

ico.org.uk

9. Changes to this policy

We may update this policy from time to time. When we do, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically.