1. Who We Are

HEM Digital (“we”, “us”, or “our”) provides digital marketing services to clients in the UK. We are registered with the Information Commissioner’s Office (ICO) under registration number ZC092644. In the course of delivering our services, we may collect and process personal data, including contact details and other information on behalf of our clients.

2. What Data We Collect

We may collect and process the following types of personal data:

• Client contact details: such as name, email address, phone number, and company name.
• End-user data provided by clients: such as email addresses or names of customers or subscribers, which clients provide to us for the purpose of communication or marketing.
• Account credentials: usernames or access tokens provided by clients for their social media and marketing accounts, solely for the purpose of delivering agreed services.

We act as a Data Controller for our own clients’ information, and as a Data Processor for data provided to us by clients (e.g., email lists).

3. How We Use Your Data

We use personal data for the following purposes:

• To provide and manage services to our clients.
• To securely access and manage social media or marketing accounts on behalf of clients.
• To create, publish, and manage content as instructed by clients.
• To send marketing or transactional emails on behalf of clients.
• To respond to enquiries and provide support.
• To comply with legal obligations.

We do not sell or rent personal data to third parties.

4. Legal Basis for Processing

We process personal data under the following lawful bases:

• Consent – where you have given us clear permission, which you may withdraw at any time (see Your Rights below).
• Contract – where processing is necessary to fulfil a contract with you.
• Legal obligation – to comply with the law.
• Legitimate interests – where processing is necessary for our legitimate business interests, provided these are not overridden by your rights.

5. Data Sharing and Transfers

We may share personal data with trusted third-party service providers who assist us in delivering our services (e.g., email platforms, IT services). All third parties are required to respect the security of your data and treat it in accordance with UK data protection law.

We do not transfer your data outside the UK unless adequate safeguards are in place, such as UK adequacy regulations or Standard Contractual Clauses approved for use in the UK.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements.

• Data provided by clients (including credentials) is deleted or returned upon request or termination of the service agreement.
• Clients are encouraged to update or revoke account access at any time.

7. Data Security

We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, or disclosure.

• Passwords and account credentials are stored securely and used only for the purpose of providing agreed services.
• Clients are encouraged to share login details via secure methods (e.g., a password manager).
• We do not disclose or share account credentials with any third party unless required by law.

8. Client Responsibility

Clients are responsible for ensuring that any credentials shared with HEM Digital are accurate and that their accounts remain compliant with the terms of service of the respective platforms. Clients should update passwords regularly and notify us immediately if they wish to revoke access.

9. Cookies and Website Tracking

Our website uses cookies and similar tracking technologies to improve user experience and analyse website usage. We use the following:

• Google Analytics (analytics cookie) – we use Google Analytics to understand how visitors interact with our website. It collects anonymised data such as pages visited, time on site, and browser type. This data does not identify you personally. You can opt out by installing the Google Analytics Opt-out Browser Add-on.
• Meta Pixel (marketing/tracking cookie) – we use the Meta Pixel (provided by Meta Platforms, Inc.) to measure the effectiveness of advertising, understand actions taken on our website, and where relevant, serve relevant ads on Facebook and Instagram. You can manage your ad preferences via your Facebook Ad Settings.

Where cookies require your consent, we will ask for this before placing them. You can also manage or disable cookies at any time through your browser settings.

10. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right to access – you may request a copy of the personal data we hold about you.
• Right to rectification – you may ask us to correct any inaccurate or incomplete data.
• Right to erasure – you may ask us to delete your personal data in certain circumstances.
• Right to restrict processing – you may ask us to limit how we use your data.
• Right to object – you may object to our processing of your data in certain circumstances.
• Right to data portability – you may request your data in a portable, machine-readable format.
• Right to withdraw consent – where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please email helen@hemdigital.co.uk. We will respond to your request within one calendar month.

11. Right to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk or by calling 0303 123 1113. We would, however, appreciate the opportunity to address your concerns first — please contact us at helen@hemdigital.co.uk.

12. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be published on this page with an updated ‘Last updated’ date. This policy was last updated on 21 February 2026.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us:

HEM Digital  |  www.hemdigital.co.uk  |  helen@hemdigital.co.uk