Legal

Privacy Policy

Last updated: May 2026

Last updated: May 2026

1. Who we are

Ashfield Digital is a digital services business based in Sutton in Ashfield, Nottinghamshire. We provide websites, SEO, social media, ecommerce, CRM, automation, AI tools and local search services to small businesses.

For the purposes of UK data protection law, Ashfield Digital is the data controller for personal data collected through this website.

You can contact us about anything in this policy at [email protected].

2. What data we collect and why

Contact form

When you use the contact form on our website, we collect:

  • First and last name
  • Email address
  • Business name (optional)
  • The service area you're interested in (optional)
  • The message you write to us

We use this information solely to respond to your enquiry. We do not add you to any mailing list, pass your details to third parties for marketing, or use your information for any purpose other than handling your message.

Legal basis: Legitimate interests (Article 6(1)(f) UK GDPR) — responding to a business enquiry you have initiated.

Google Analytics

We use Google Analytics to understand how visitors use our website — for example, which pages are viewed most, how long people spend on the site, and where visitors come from. This helps us improve the website over time.

Google Analytics uses cookies to collect this information. The data is anonymised and aggregated — we do not see any personally identifiable information through Google Analytics.

Data collected by Google Analytics may be transferred to and stored on servers in the United States. Google LLC is certified under the EU-US Data Privacy Framework.

Legal basis: Consent (Article 6(1)(a) UK GDPR) — we only activate Google Analytics after you accept cookies via our cookie banner.

Cookies

Our website uses the following cookies:

  • Cookie consent preference — a cookie that remembers whether you have accepted or declined analytics cookies. This is essential to the functioning of our cookie banner and does not track you.
  • Google Analytics cookies (_ga, _gid, _gat) — only set if you accept cookies. These track anonymous usage data as described above. They expire between 24 hours and 2 years.

You can withdraw your consent to analytics cookies at any time by clearing your browser cookies and declining when the banner reappears.

3. How long we keep your data

Enquiries submitted via the contact form are received by email and kept in line with our standard email retention practices. We do not retain form submissions in a database.

If you become a client, we will retain relevant correspondence and project information for as long as the business relationship continues and for a reasonable period afterwards in line with our legal obligations.

Google Analytics data is retained for 26 months, after which it is automatically deleted.

4. Who we share your data with

We do not sell, rent or trade personal data. We may share data with the following third parties only where necessary:

  • Google LLC — for Google Analytics (analytics only, no advertising use)
  • Google LLC — for reCAPTCHA, which protects our contact form from spam. reCAPTCHA collects hardware and software information and sends it to Google for analysis. See Google's Privacy Policy.

We do not use any other third-party services that process personal data in connection with this website.

5. Your rights

Under UK GDPR you have the following rights regarding your personal data:

  • Right of access — you can request a copy of the personal data we hold about you
  • Right to rectification — you can ask us to correct inaccurate data
  • Right to erasure — you can ask us to delete your data where there is no legitimate reason to continue holding it
  • Right to restrict processing — you can ask us to limit how we use your data
  • Right to object — you can object to processing based on legitimate interests
  • Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please email us at [email protected]. We will respond within one month.

6. ICO registration and complaints

Ashfield Digital is registered with the Information Commissioner's Office (ICO) as required under UK data protection law.

If you have a concern about how we handle your personal data and are not satisfied with our response, you have the right to lodge a complaint with the ICO:

7. How we protect your data

Our website is served over HTTPS. Contact form submissions are transmitted securely and delivered directly to our email inbox — we do not store form submissions in a database on the server.

We take reasonable technical and organisational measures to protect personal data against accidental loss, unauthorised access or disclosure.

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and recommend you read their privacy policies before submitting any personal data.

9. Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the date at the top of this page. We encourage you to review this page periodically.

10. Contact us

If you have any questions about this privacy policy or how we handle your data, please get in touch: