Ekspand’s Privacy Notice


1. Who We Are

Company Name: Ekspand

Website: https://ekspand.co.uk

Email: admin@ekspand.co.uk

Business Type: Digital Growth & Marketing Agency

Jurisdiction: United Kingdom

Ekspand is the data controller responsible for your personal data.


2. What Data We Collect

We may collect and process the following types of personal data:

a) Information You Provide Directly

  • Name
  • Email address
  • Phone number
  • Company name
  • Project details or enquiry information
  • Any information submitted via contact forms, email, or booking systems

b) Automatically Collected Data

  • IP address
  • Browser type and version
  • Device information
  • Pages visited and time spent
  • Referral source

This data is collected via cookies, analytics tools, and server logs.


3. How We Use Your Data

We only use your data where legally permitted. This includes:

  • Responding to enquiries and contact requests
  • Providing and managing our services
  • Improving website performance and user experience
  • Marketing communications (only where consent is given)
  • Analytics, reporting, and conversion optimisation
  • Legal, security, and compliance purposes

We do not sell your personal data.


4. Legal Bases for Processing (UK GDPR)

We process personal data under the following lawful bases:

  • Consent – when you submit a form or opt-in to marketing
  • Contract – when data is required to deliver services
  • Legitimate Interest – to improve our website and services
  • Legal Obligation – where required by law

5. Cookies & Tracking Technologies

We use cookies and similar technologies to:

  • Analyse website traffic and performance
  • Improve user experience
  • Track conversions and marketing effectiveness

You can manage or disable cookies via your browser settings or our cookie consent banner.


6. Third-Party Services

We may share limited data with trusted third-party providers, including:

  • Analytics platforms (e.g. Google Analytics)
  • Hosting providers
  • CRM and email tools
  • Payment processors (if applicable)

All third parties are GDPR-compliant and only process data on our instructions.


7. Data Retention

We retain personal data only for as long as necessary to:

  • Fulfil the purposes outlined in this policy
  • Meet legal, accounting, or regulatory requirements

When data is no longer required, it is securely deleted or anonymised.


8. Your Data Protection Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict processing
  • Request data portability
  • Withdraw consent at any time

To exercise your rights, email admin@ekspand.co.uk.


9. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

  • Secure hosting environments
  • SSL encryption
  • Access controls
  • Regular security monitoring

However, no online system is 100% secure.


10. International Data Transfers

If data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.


11. Children’s Data

Our services are not intended for children under 16. We do not knowingly collect data from minors.


12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.


13. Contact Information

If you have any questions about this Privacy Policy or how we handle your data, contact us at: