PRIVACY POLICY

1. Who is responsible for your information?

Dub Digital Studio Ltd, trading as Dub Digital, is the business responsible for deciding how the information described in this policy is used (the “data controller”).

Legal business name: Dub Digital Studio Ltd
Registered office address: 3 Sunnybank Drive, BH21 2SZ, United Kingdom
Privacy enquiries: work@dubdigital.co.uk

2. Information we collect

Depending on the form or service you use, we collect:

• Your name, email address, company, website address and telephone number.
• Your project goals, website type, indicative budget, timescale, current systems, business challenges and comments.
• Your correspondence with us and information needed to discuss, scope or deliver a project.
• Where available, the advert or form through which you contacted us.
• Technical information processed by our hosting and security providers, such as IP address, browser details and request logs, to deliver and protect the website.

You provide most of this information directly. If you use a Facebook or Instagram instant form, Meta supplies us with the information you choose to submit, which may include details prefilled from your profile. We may also review your publicly available business website to understand your enquiry.

Please do not include passwords, payment-card details or sensitive personal information in enquiry forms. Required fields are marked or identified by the form; without the relevant contact and project information, we may be unable to respond or assess your request.

3. Why we use it and our lawful bases

• Responding to enquiries and assessing demo or roadmap requests: our legitimate interests in responding to people who contact us and developing relevant business relationships. Where you personally ask us to take steps towards a contract, we may also rely on those pre-contractual steps.
• Preparing proposals and delivering agreed services: performance of a contract with you, or our legitimate interests in managing a contract with the organisation you represent.
• Keeping the website secure and managing business records: our legitimate interests in operating and protecting our business, and legal obligations where applicable.
• Optional marketing and non-essential tracking: consent where required. A request for a demo or a reply to your enquiry is not consent to unrelated marketing.

We consider your rights and reasonable expectations when relying on legitimate interests. You can object to this processing by contacting us.

4. Facebook and Instagram enquiries

If you submit a Meta lead form or respond to an advert, we use your details to respond to that request, discuss your requirements and arrange relevant next steps. We may contact you using the email address or telephone number you provide.

Meta also handles information under its own Privacy Policy. This policy describes what Dub Digital does with the information it receives; it does not replace Meta’s policy.

5. Who receives your information?

Information is available to people and service providers who need it for the purposes above, including:

• Brevo: storing enquiry contacts, project notes and sales-pipeline records.
• Google and Meta, if you consent: receiving the analytics and advertising information described in section 8.
• Our website hosting provider, Vercel: hosting the website and processing form requests.
• Email, communications and business-service providers: enabling us to reply and manage your enquiry.
• Relevant team members, contractors and professional advisers: where needed to assess or deliver your project, administer our business or meet legal obligations.
• Authorities or other parties where disclosure is legally required or necessary to establish, exercise or defend legal claims.

We do not sell your personal information.

6. International processing

Some providers may process information outside the UK. Where UK data-protection law requires safeguards for a transfer, these must be in place—for example, an applicable UK adequacy decision or approved contractual safeguards. Contact us for information about the safeguards relevant to your data.

7. How long we keep information

We retain information only for as long as reasonably needed for the purpose for which it was collected. For enquiries that do not become projects, we delete or anonymise the enquiry records after 12 months without meaningful contact, unless there is a specific legal reason to retain them for longer.

For client records, we also consider the duration of the relationship, aftercare requirements, accounting obligations and any applicable legal-claim periods. Minimal records may be retained to honour a request not to receive marketing. Information should be deleted or anonymised when it is no longer needed.

8. Cookies, analytics and advertising measurement

Our Cookie settings control optional analytics and advertising separately. Both are off until you choose to allow them. Rejecting optional tracking does not prevent you from using our forms. You can change or withdraw your choices at any time using the Cookie settings button on every page. Withdrawal stops future tracking; it does not undo processing that already took place.

Your preference: we save your choice in your browser’s local storage under dub_consent_v1 for up to 180 days so we can remember and respect it. If browser storage is unavailable, your choice applies to the current page.

Analytics (Google Analytics 4): with analytics consent, Google receives page and usage information, browser/device details and successful enquiry events to help us understand how the website is used. Google can receive your IP address when your browser connects to its service. We do not send your name, email address, telephone number or project answers to Google Analytics. Our code removes query strings and fragments from the page address supplied to Google, while allowing conventional campaign labels for attribution. Google advertising signals and advertising personalisation are disabled in this implementation. Analytics cookies such as _ga and _ga_* identify browser activity; our configuration sets a 180-day cookie lifetime, which can renew when used.

Advertising (Meta Pixel and Conversions API): with advertising consent, Meta receives page visits and successful enquiries to measure and improve Facebook and Instagram advertising. Information can include page addresses, event times, browser details, IP address from browser connections and Meta browser/click identifiers (_fbp and _fbc, where available). These cookies generally last up to 90 days and may renew. When an enquiry is successfully saved, our server also sends Meta a SHA-256 hashed version of your email address, browser details, the enquiry type and available Meta identifiers. Hashing allows Meta to match the email to its users; it does not make the information anonymous. We do not send your project brief, questionnaire answers, name or telephone number through this integration.

We count a completed lead only when our server confirms that the contact, enquiry note and deal were saved in Brevo. A shared event identifier lets Meta recognise the browser and server reports as the same lead. Clicking a button or opening a thank-you page does not itself create a lead event. Automated form detection and automatic advanced matching are not used.

Google and Meta handle information under their own policies: Google Privacy Policy and Meta Privacy Policy. Their processing may take place outside the UK; see section 6.

Fonts and video: the website loads fonts from Google Fonts. Your browser contacts Google to retrieve them, which can disclose technical information such as your IP address and browser details. The founder-introduction video loads a video file from Wave.video only when you choose to play it; that provider then receives technical connection information.

Your browser also lets you manage or delete cookies. Deleting browser storage may clear your saved preferences and cause this website to ask again.

9. Your rights

Depending on the circumstances, you can ask to access your information, correct inaccurate information, delete it, restrict its use, or receive certain information in a portable format. You may object to processing based on legitimate interests and can object to direct marketing at any time. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing.

Email work@dubdigital.co.uk to exercise your rights. We may need to verify your identity. We normally respond within one month; lawful exceptions or extensions may apply.

You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. We would welcome the opportunity to address your concern first.

10. Automated decisions and security

Our enquiry forms record your answers for review. They do not make solely automated decisions with legal or similarly significant effects. We use appropriate access controls and technical measures to protect information, but no internet transmission can be guaranteed completely secure.

11. Changes to this policy

We may update this policy as our services and data practices change. The date above identifies the latest revision. Where required, we will provide further notice of material changes.