Privacy Policy

Behaviour Digital (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data.This Privacy Policy explains how we collect, use, store and share personal data when you visit behaviour.digital, contact us, submit a form, or otherwise interact with our website and services. It is intended to help you understand what information we collect, why we collect it, and your rights in relation to that information.

1. Who we are

Behaviour Digital is a digital advertising and marketing agency. For the purposes of data protection law, Behaviour Digital is the data controller of the personal data collected through this website, except where we clearly state otherwise.If you have any questions about this Privacy Policy or want to exercise your data protection rights, you can contact us at:Email: hello@behaviour.digital

2. The personal data we collect

We may collect, use, store and transfer different kinds of personal data about you, including:

Information you provide to us

• your name
• email addres
• phone number
• company name
• job title
• any information you include in an enquiry form, contact form, or email

Information collected automatically when you use our website

• IP address
• browser type and version
• device type
• time zone and general location data
• pages viewed and how you move through the site
• referral source, such as the website or campaign that brought you to us
• dates and times of visits
• interactions with our website, forms, and marketing pages

Marketing and tracking data
‍
• cookie identifiers
• analytics data
• advertising identifiers
• information about whether you have viewed, clicked, or interacted with our ads, emails, or website content, where applicable

The ICO states that privacy information should explain what personal data is collected, the purposes for processing it, who it is shared with, and retention periods.

3. How we collect your personal data

We collect personal data in a number of ways, including:

• when you complete a contact form or enquiry form on our website
• when you email us directly
• when you book a call or request information from us
• automatically through cookies and similar technologies when you browse our site
• through analytics and advertising tools, where these are in use and permitted by your consent choices

Under PECR, the rules can apply not only to cookies but also to pixels, scripts, tags, web storage, fingerprinting and similar storage or access technologies.

4. How we use your personal data

We may use your personal data to:

• respond to your enquiries
• provide you with information about our services
• manage our relationship with you
• improve our website, content and user experience
• understand how visitors use our site
• monitor the performance of our marketing activity
• protect our website and business from fraud, abuse, and technical issues
• send marketing communications where we are allowed to do so
• comply with legal or regulatory obligations

5. Lawful bases for processing

Under UK GDPR, organisations must have a lawful basis for processing personal data. Depending on the situation, we may rely on one or more of the following:

• Consent — for example, where you opt in to marketing communications or accept certain non-essential cookies
• Legitimate interests — for example, to respond to business enquiries, improve our website, analyse performance, or operate our business efficiently, provided your rights do • not override those interests
• Contract — where processing is necessary to take steps before entering into a contract with you or to perform a contract
• Legal obligation — where we need to comply with applicable law or regulation

6. Cookies and similar technologies

We use cookies and similar technologies to help our website function, understand usage, and support analytics and advertising activity.These technologies may include:

• essential cookies required for core site functionality
• analytics cookies to understand how visitors use the site
• advertising and remarketing technologies such as pixels, tags, or scripts
• preference cookies that remember user choices

Where required, we will ask for your consent before placing non-essential cookies or using similar technologies on your device. The ICO states that PECR applies to cookies and similar technologies, and that clear information must be provided about what is used and why. You can also control cookies through your browser settings and, where available, through our cookie consent tool.

7. Analytics and advertising

We may use analytics and advertising partners to help us understand website usage, measure campaign performance, and improve our marketing.Depending on how the site is configured, this may include tools such as:

• Google Analytics
• Google Ads
• Meta Pixel
• LinkedIn Insight Tag
• other comparable analytics, CRM, or advertising tools

These providers may process personal data such as IP address, cookie identifiers, device data, and website interaction data in accordance with their own privacy policies and your consent preferences where applicable.These providers may process personal data such as IP address, cookie identifiers, device data, and website interaction data in accordance with their own privacy policies and your consent preferences where applicable.

8. Sharing your personal data

We may share personal data with trusted third parties where necessary, including:

• website hosting and infrastructure providers
• analytics providers
• advertising platforms
• CRM and form processing tools
• email and communications platforms
• professional advisers such as accountants, lawyers, or insurers
• regulators, courts, law enforcement, or other authorities where required by law

We require third parties acting on our behalf to process personal data only in accordance with applicable law and appropriate safeguards.These providers may process personal data such as IP address, cookie identifiers, device data, and website interaction data in accordance with their own privacy policies and your consent preferences where applicable.These providers may process personal data such as IP address, cookie identifiers, device data, and website interaction data in accordance with their own privacy policies and your consent preferences where applicable.You should make sure this section reflects the tools you actually use. If you want, I can tailor this section exactly to your stack.

9. International transfers

Some of our third-party service providers may process personal data outside the UK. Where this happens, we take steps intended to ensure your personal data receives an appropriate level of protection, such as relying on adequacy regulations, standard contractual clauses, or other recognised safeguards where appropriate.

10. Data retention

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, regulatory, tax, accounting, or reporting requirements.Some of our third-party service providers may process personal data outside the UK. Where this happens, we take steps intended to ensure your personal data receives an appropriate level of protection, such as relying on adequacy regulations, standard contractual clauses, or other recognised safeguards where appropriate.

As a general guide:
• enquiry data may be retained for as long as necessary to respond to and manage the enquiry
• client and prospective client data may be retained while discussions or a working relationship continue and for a reasonable period afterwards
• analytics and cookie data retention will depend on the configuration of the relevant platform
• we may retain some information for longer where required for legal, regulatory, or legitimate business reasons

11. Your data protection rights

Depending on your location and the circumstances, you may have the right to:be informed about how your personal data is used:

• request access to the personal data we hold about you
• request correction of inaccurate or incomplete data
• request deletion of your personal data
• request restriction of processing
• object to processing in certain circumstances
• request transfer of certain personal data to you or another provider
• withdraw consent where we rely on consent
• complain to the Information Commissioner’s Office (ICO)

The ICO’s guidance confirms these core UK GDPR rights, including the rights to be informed, access, rectification, erasure, restriction, portability, and objection. It also states that subject access requests should normally be answered without undue delay and within one month.To exercise any of these rights, contact us at hello@behaviour.digital.

12. Marketing communications

If you opt in to receive marketing from us, we may send you updates, insights, service information, or other marketing communications that we think may be relevant to you.

You can opt out of marketing emails at any time by:
• clicking the unsubscribe link in any email, where available
• contacting us at hello@behaviour.digital

13. Third-party websites

Our website may include links to third-party websites, plug-ins, or embedded content. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We are not responsible for the privacy practices of third-party websites, and we encourage you to read their privacy notices.

14. Data security

We take appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. However, no method of transmission over the internet or method of electronic storage is completely secure.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, legal obligations, or the way we process personal data.

16. Contact us

If you have any questions, requests, or complaints about this Privacy Policy or the way we handle your personal data, please contact:Behaviour Digital
Email: hello@behaviour.digital