This Privacy Policy explains how Olli Hopkins Digital (“we”, “us”, “our”) collects, uses, discloses, and safeguards your personal data when you visit our website, contact us, or use our services.
We are committed to protecting your privacy and processing personal data in accordance with the UK GDPR, the EU GDPR (where applicable), and the Data Protection Act 2018.
If you have questions, contact us at olli@ollihopkins.co.uk.
Controller: Olli Hopkins Digital
Email: olli@ollihopkins.co.uk
Jurisdiction: United Kingdom
If you are located in the EEA, you may also have rights under the EU GDPR. Where we offer services to individuals in the EEA, we process personal data in accordance with EU GDPR standards.
We may collect and process the following categories of personal data:
Identity & Contact Data: name, email address, phone number, company, role.
Business/Project Data: information you share about your business, requirements, budgets, assets, and content.
Transactional Data: proposals, invoices, purchase records, payment confirmations (note: payment card data is processed by our payment providers and not stored by us).
Communications Data: emails, messages, meeting notes, feedback, and support requests.
Technical & Usage Data: IP address, device and browser type, pages visited, time on site, referring URLs, and other analytics data (via cookies or similar technologies).
Marketing Preferences: your preferences for receiving updates or newsletters.
Directly from you: when you submit a form, email us, book a call, or engage our services.
Automatically: via cookies, server logs, and analytics when you use our website.
From third parties: analytics providers, advertising platforms, payment processors, or publicly available sources where lawful.
We use your data for:
Providing and delivering services (e.g., proposals, project delivery, support) – Performance of a contract.
Responding to enquiries and communicating with you – Legitimate interests and/or Performance of a contract.
Improving our website and services (analytics, troubleshooting, testing) – Legitimate interests.
Marketing (news, updates, offers) – Consent (where required) or Legitimate interests. You can opt out at any time.
Legal and regulatory compliance (tax, accounting, legal claims) – Legal obligation.
Security and fraud prevention – Legitimate interests and/or Legal obligation.
We use cookies and similar technologies to operate the site and understand usage. Where required, we will request your consent for non-essential cookies.
Typical tools we may use include website analytics and performance monitoring. You can control cookies via your browser settings and, where implemented, our cookie banner preferences. For more details, see our Cookie Policy (if available on your site).
We may share personal data with:
Service providers / sub-processors: hosting, email, CRM, analytics, payment processing, project management, and cloud storage providers who process data under our instructions.
Professional advisers: accountants, lawyers, insurers.
Authorities: where required by law or to protect rights, safety, and property.
Business transfers: in connection with a merger, acquisition, or reorganisation.
We require all recipients to respect the security of your data and to process it lawfully.
Where data is transferred outside the UK/EEA, we use lawful safeguards such as UK IDTA, EU Standard Contractual Clauses (SCCs), or ensure the destination benefits from an adequacy decision.
We keep personal data only as long as necessary for the purposes collected, including to meet legal, accounting, or reporting requirements. Typical periods:
Enquiry data: up to 24 months from last contact.
Client/project records & contracts: generally 6 years after the end of the engagement (to meet tax and legal obligations).
Marketing data: until you opt out or your consent is withdrawn.
Analytics data: commonly 26 months (tool-dependent).
We may retain data longer where required for legal claims or compliance.
Subject to applicable law, you have rights to:
Access your personal data.
Rectify inaccurate or incomplete data.
Erase your data (in certain circumstances).
Restrict processing (in certain circumstances).
Object to processing based on legitimate interests or direct marketing.
Data portability (receive your data in a machine-readable format).
Withdraw consent at any time, where processing is based on consent.
To exercise your rights, contact olli@ollihopkins.co.uk. We may need to verify your identity before acting on your request.
You also have the right to lodge a complaint with your local supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO): ico.org.uk.
We use appropriate technical and organisational measures to protect personal data, including access controls, encryption in transit (TLS), secure password practices, and least-privilege access. However, no method of transmission or storage is completely secure.
Our services are not directed to children under 16, and we do not knowingly collect personal data from children.
Our website may include links to third-party sites and services. We are not responsible for their privacy practices. We encourage you to review their policies.
We do not use personal data for automated decision-making that produces legal or similarly significant effects.
We may update this Privacy Policy from time to time. The updated version will be indicated by a revised “Last updated” date.
For questions, requests, or complaints about this Privacy Policy or our data practices, contact:
Olli Hopkins Digital
Email: olli@ollihopkins.co.uk