Privacy Policy

Effective Date: March 2026 • Data Controller: Sovereign Digital Agency • Jurisdiction: England & Wales

1. Introduction

This Privacy Policy explains how Sovereign Digital Agency ("we", "us", "our") collects, uses, processes, and protects your personal information when you visit our website at https://sovereigndigitalagency.co.uk or use our AI-powered digital marketing services.

This Privacy Policy should be read alongside our Terms of Service and any other applicable terms and conditions.

2. Data Controller

We are the data controller responsible for your personal information.

Sovereign Digital Agency
Email: hello@sovereigndigitalagency.co.uk
Website: https://sovereigndigitalagency.co.uk
Jurisdiction: England & Wales

3. Information We Collect

3.1 Information You Provide Directly

We may collect the following when you fill out contact forms, subscribe to communications, create an account, communicate with us, or participate in surveys:

Name and contact details (email, phone, postal address)
Company name and job title
Website URL and business information
Marketing preferences and interests
Communication history and correspondence
Payment information (processed securely through third-party processors)

3.2 Information Collected Automatically

When you visit our Website, we automatically collect technical information including:

IP address and location data
Browser type, version, and operating system
Device type and screen resolution
Referring website, pages visited, session duration, and page views
Cookies and tracking technologies (essential, analytics, marketing, and preference cookies)

3.3 Information from Third Parties

We may receive information about you from social media platforms, business partners, public databases, and third-party analytics and marketing tools.

4. How We Use Your Information

4.1 Legal Bases for Processing

Consent: When you have given clear consent for specific processing activities.
Contract: To perform our contractual obligations or take pre-contractual steps.
Legitimate Interests: For our legitimate business interests, provided these do not override your rights.
Legal Obligation: To comply with legal or regulatory requirements.

4.2 Purposes of Processing

Service Delivery: Providing AI-powered marketing services, managing accounts, processing payments, and communicating about services.
Business Operations: Responding to enquiries, customer support, website administration, and business analysis.
Marketing: Sending marketing communications (with consent), personalising content, market research, and promotions.
Legal & Compliance: Complying with legal obligations, defending legal claims, fraud prevention, and record-keeping.

5. Disclosure of Your Information

We may share your information with trusted third parties who provide services on our behalf:

AI and Technology Partners for delivering our AI-powered marketing services.
Cloud Hosting Providers for secure data storage and website hosting.
Payment Processors for secure payment processing.
Marketing Tools for email marketing, analytics, and advertising platforms.
Professional Advisors including lawyers, accountants, and consultants.

We may also disclose your information where required by law, to enforce our terms, protect our rights, or investigate potential violations or fraud. In the event of a merger, acquisition, or sale of assets, your information may be transferred subject to appropriate safeguards.

6. International Transfers

We may transfer your personal information outside the UK to service providers in other countries. Where we do so, we ensure appropriate safeguards are in place, including adequacy decisions by the UK government, Standard Contractual Clauses approved by the ICO, and other appropriate safeguards as required by law.

7. Data Retention

We retain your personal information only for as long as necessary for the purposes outlined in this Privacy Policy:

Client Data: Duration of contract plus 6 years for legal and tax purposes.
Marketing Data: Until you unsubscribe or withdraw consent.
Website Analytics: Up to 26 months.
Communication Records: Up to 3 years from last contact.

We will securely delete or anonymise your information when it is no longer needed, unless we are legally required to retain it.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal information:

Right of Access — Request copies of your personal information.
Right to Rectification — Request correction of inaccurate information.
Right to Erasure — Request deletion of your information in certain circumstances.
Right to Restrict Processing — Request limitation of processing in certain situations.
Right to Data Portability — Request transfer of your data in a structured format.
Right to Object — Object to processing based on legitimate interests or for marketing.
Rights Related to Automated Decision Making — Protection against purely automated decisions.

To exercise any of these rights, contact us at hello@sovereigndigitalagency.co.uk. We will respond within one month. These services are provided free of charge unless requests are manifestly unfounded or excessive.

9. Cookies

Cookies are small text files stored on your device when you visit our website. We use the following types:

Strictly Necessary Cookies: Essential for website functionality.
Performance Cookies: Help us understand how visitors interact with our website.
Functional Cookies: Remember your preferences and choices.
Marketing Cookies: Used to deliver relevant advertising and track campaign effectiveness.

We obtain your consent for non-essential cookies through our cookie banner. You can manage your preferences at any time or disable cookies through your browser settings, though this may affect website functionality.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

Encryption of data in transit and at rest
Regular security assessments and updates
Access controls and staff training
Secure hosting and backup systems
Incident response procedures

While we strive to protect your information, no method of transmission over the internet is 100% secure. We will notify you and relevant authorities of any data breaches as required by law.

11. Children's Privacy

Our services are not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

12. Third-Party Links

Our website may contain links to third-party websites, services, or applications. This Privacy Policy does not apply to third-party sites, and we are not responsible for their privacy practices. We encourage you to read the privacy policies of any third-party sites you visit.

13. Updates to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date, notify existing clients via email, and provide prominent notice on our website. Your continued use of our services after changes become effective constitutes acceptance of the revised Privacy Policy.

14. Contact and Complaints

For any questions about this Privacy Policy or our data practices:

Sovereign Digital Agency
Email: hello@sovereigndigitalagency.co.uk
Website: https://sovereigndigitalagency.co.uk

If you have concerns about how we handle your personal information, please contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk

This Privacy Policy was last updated in March 2026. By using our Website or Services, you acknowledge that you have read and understood this Privacy Policy.