1. Introduction

7C Digital Media UK Limited (“7CDM”, “we”, “us” or “our”) provides digital marketing, web development, branding and related services to businesses across the UK and internationally. We respect the privacy of everyone who visits our website, engages with our adverts and social channels, or works with us as a client, supplier or partner.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it. It has been written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR), each as amended by the Data (Use and Access) Act 2025.

By using our website, interacting with our adverts (including on Meta platforms), or otherwise providing us with your information, you acknowledge that your data will be processed as described in this Policy.

2. Who We Are

7C Digital Media UK Limited is the data controller responsible for your personal data for the purposes described in this Policy.

If you have any questions about this Policy or how we handle your data, please contact us using the details above or in Section 18.

3. Scope of This Policy

This Policy covers personal data that 7CDM collects and controls in its own right — for example, data about visitors to our website, people who respond to our adverts, our clients’ contact people, our suppliers, and job applicants.

Where 7CDM runs marketing campaigns or manages digital channels on behalf of a client (for example, managing a client’s Meta Ads account, CRM, or website), we typically act as a data processor for that client, and the client’s own privacy policy governs how that data is used. Our contracts with clients set out our responsibilities as a processor separately from this Policy.

4. Personal Data We Collect

• Identity and contact data — name, job title, company name, email address, phone number, postal address.
• Enquiry and communications data — the content of messages you send us, and records of calls, emails, meetings and chats.
• Marketing and advertising data — information you provide when you respond to our adverts on Meta, LinkedIn or other platforms, including details captured by lead forms.
• Technical and usage data — IP address, browser type and version, device type, operating system, referring website, pages viewed, and time spent on our website.
• Cookie data — see Section 7.
• Client and contract data — billing details, contract terms, and information needed to deliver our services. This may include data you provide to us about your own customers or employees where we act as a processor on your behalf (see Section 3).
• Recruitment data — if you apply for a role or freelance engagement with us, we collect your CV, application details, and any information you provide during the recruitment process.

We do not seek to collect special category data (such as data about health, religion, or ethnicity). If you choose to share such information with us — for example, in a message — we will only use it for the purpose you provided it and will delete it as soon as reasonably practicable.

5. How We Collect Your Data

• Directly from you — when you fill in a form on our website, email us, message us on social media, respond to one of our adverts, or speak to us by phone.
• Automatically — through cookies and similar technologies when you visit our website (see Section 7).
• From third parties — such as Meta, LinkedIn or Google, when you interact with our adverts on their platforms, or from publicly available business sources (for example, Companies House or LinkedIn) when we research prospective clients.

6. How We Use Your Data and Our Legal Basis

We only use your personal data where we have a valid lawful basis to do so under the UK GDPR. The table below summarises our main purposes and the basis we rely on for each.

Where we rely on legitimate interests, we have considered that our use of your data does not unfairly override your own rights and interests, and you can ask us for more details at any time.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies to make the site work, understand how it is used, and — with your permission — deliver and measure advertising, including via the Meta Pixel.

• Strictly necessary cookies keep our website secure and functioning, and do not require your consent.
• Analytics and preference cookies help us understand how visitors use our site. Following changes introduced by the Data (Use and Access) Act 2025, some analytics and preference cookies may be used on an opt-out basis, provided we give you clear information and an easy way to decline.
• Advertising cookies (including the Meta Pixel and similar tools) are used to measure and personalise adverts, and require your consent.

You can manage your cookie preferences at any time using the cookie banner or settings tool on our website, or through your browser settings. Blocking some cookies may affect how our website works.

8. How We Share Your Data

We do not sell, rent or trade your personal data. We may share it with:

• Service providers who support our business, such as website hosting providers, CRM and email marketing platforms, analytics providers (e.g. Google Analytics), and advertising platforms (e.g. Meta, Google, LinkedIn).
• Payment providers who process invoicing and payments on our behalf.
• Subcontractors and white-label partners who help us deliver services to clients, under contracts that require them to protect your data.
• Professional advisers, such as our accountants or solicitors, where necessary.
• Regulators or law enforcement, where we are legally required to do so.
• A buyer or successor, if we sell or reorganise our business, subject to the same protections set out in this Policy.

All third parties who process data on our behalf are required to do so only on our instructions and to keep it secure.

9. International Transfers

Some of the service providers we use — for example, cloud hosting, CRM, or advertising platforms — may store or process data outside the UK, including in the United States, or be delivered with the support of our subcontractors and partners based outside the UK. Where this happens, we put appropriate safeguards in place, such as the UK’s International Data Transfer Agreement (IDTA) or Standard Contractual Clauses, and we apply the UK’s data protection test before relying on those safeguards.

If you would like more information about the safeguards in place for a specific transfer, please contact us.

10. How Long We Keep Your Data

We keep personal data only for as long as necessary for the purposes set out in this Policy, including to satisfy any legal, accounting or reporting requirements. As a guide:

• Enquiry and lead data: up to 24 months from your last contact with us, unless you become a client or ask us to delete it sooner.
• Client and contract records, including invoices: for the duration of our relationship and for 6 years afterwards, to meet our accounting and tax obligations.
• Marketing consent records: until you withdraw consent, plus a limited period afterwards to evidence compliance.
• Cookie data: for the duration set out in our cookie banner or settings tool, typically no longer than 24 months.
• Recruitment data: up to 12 months after a recruitment process ends, unless you give us permission to keep your details on file for future opportunities.

11. Keeping Your Data Secure

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. These include access controls, encryption where appropriate, staff training, and contracts requiring our suppliers to protect data to an equivalent standard. No system is completely secure, but we review our measures regularly.

12. Your Rights

Under the UK GDPR, you have the right to:

• Access a copy of the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erasure of your data in certain circumstances.
• Restrict how we use your data.
• Object to processing, including for direct marketing.
• Data portability, where applicable.
• Withdraw consent at any time, where we rely on consent.
• Not be subject to decisions based solely on automated processing that have a legal or similarly significant effect on you, except in limited circumstances (see Section 15).

To exercise any of these rights, contact us using the details in Section 18. We will respond within the statutory timeframe, normally one month.

13. Marketing Preferences

Where you have agreed to receive marketing from us, you can opt out at any time by clicking “unsubscribe” in our emails, replying “STOP” to text messages, or contacting us directly. In line with the PECR “soft opt-in”, we may also contact existing clients with marketing about similar services unless you tell us not to, and you can opt out of this at any time.

14. Children

Our services are aimed at businesses and professionals, and our website is not directed at or designed for children. We do not knowingly collect personal data from anyone under the age of 13. If you believe a child has provided us with personal data, please contact us so we can delete it.

15. Automated Decision-Making and Profiling

We do not make decisions about you based solely on automated processing where that decision would have a legal or similarly significant effect on you. Some of the advertising platforms we use, such as Meta or Google Ads, use automated systems to decide which adverts are shown to you; these do not produce legal or similarly significant effects and are governed by each platform’s own privacy terms.

16. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices or the law. The “last updated” date at the top of this Policy shows when it was last revised. We encourage you to check this Policy periodically.

17. How to Complain

We hope we can resolve any concerns you have about how we handle your data. You have the right to complain to us directly: please email enquiries@7cdm.co.uk with the subject line “Data Protection Complaint”, setting out the details of your concern. We will look into it and respond to you without undue delay.

You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at any time:

• Website: www.ico.org.uk
• Helpline: 0303 123 1113
• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

18. Contact Us

If you have any questions about this Policy or how we handle your personal data, please contact us:

7C Digital Media UK Limited

Email: enquiries@7cdm.co.uk

Phone: +44 (0)7874 127685

Website: www.7cdm.co.uk

Offices: Glasgow and London, United Kingdom