1. Who we are
DigiHolistic (“we”, “us”, “our”) is a digital marketing consultancy based in the United Kingdom. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller for the personal data described in this policy.
You can contact us at info@digiholistic.co.uk for any privacy-related question or to exercise your rights.
2. What data we collect
We only collect data you actively provide, plus a small amount of technical data needed to run the site:
- Enquiry data via our contact form: name, email address, optional company name, service of interest and the content of your message.
- Technical data: IP address, browser user agent, referring URL and similar metadata captured by our hosting provider (Vercel) in server logs for security and reliability.
We do not knowingly collect special-category data (health, race, political opinions, etc.) and we do not buy personal data from third parties.
3. Why we use it
- To respond to your enquiry and discuss our services.
- To keep records of communications for client-management purposes.
- To protect the site against abuse, spam and fraud.
- To improve the site (only with your consent, via aggregated analytics).
4. Legal basis
We rely on the following legal bases under the UK GDPR:
- Consent — for any optional cookies (e.g. analytics). You can withdraw consent at any time via the cookie banner or your browser settings.
- Legitimate interests — for responding to enquiries you initiate, and for the secure operation of the site.
- Legal obligation — for retaining limited business records where required by law (e.g. accounting).
5. Who we share it with
We do not sell your personal data. We share it only with service providers who help us run the business, under appropriate data processing agreements:
- Vercel Inc. — hosting and request logs. Vercel processes data inside the EU and the US under standard contractual clauses.
- Email providers — when we reply to your enquiry from our company inbox.
6. How long we keep it
- Enquiry messages: up to 24 months after the last contact, then deleted.
- Server logs: up to 30 days, then automatically rotated.
- Business records required by law: up to 7 years.
7. Where it is stored
Most processing takes place inside the United Kingdom and the European Economic Area. Where data is transferred outside the UK (for example to Vercel’s US infrastructure), we rely on the UK’s International Data Transfer Agreement or equivalent safeguards.
8. Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you.
- Have inaccurate data corrected.
- Ask us to erase your data (right to be forgotten).
- Restrict or object to how we process it.
- Receive your data in a portable format.
- Withdraw consent for optional processing at any time.
To exercise any of these rights, email info@digiholistic.co.uk. We’ll respond within one calendar month.
9. Complaints
You have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe we have not handled your data properly: ico.org.uk/make-a-complaint. We’d appreciate the chance to address your concerns first — please contact us before doing so.
10. Cookies
For details on the cookies and similar technologies used on this site, please read our Cookie Policy.
11. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top of the page shows when the most recent change was made.