Skip to main content
Ownly

Legal

Privacy policy

Last updated: 15 October 2026

Who we are

This website is operated by Ownly Digital Limited (“Ownly”, “we”, “us”), a company registered in England and Wales under number 17266711, with its registered office at Unit 6 Balfour Court, Leyland, PR25 2TF. The site is available at www.ownlydigital.co.uk. We are registered with the Information Commissioner's Office (the ICO) as a data controller, registration number ZC168993.

Ownly Digital Limited is the data controller for the personal information described in this policy. If you want to exercise any of your rights, or you are unhappy with how we have handled your data, contact us at team@ownlydigital.co.uk.

How we protect the data held in the systems we build and run for clients is set out on how we keep your data safe.

What this policy covers

This policy describes how we collect and use personal information when you browse this site or use the project inquiry form, and when we contact businesses about our services (see Business contact data & outreach). It does not cover work we do for clients under separate contracts.

Business contact data & outreach

We identify UK businesses that may benefit from our services and contact some of them by email. The business contact details we use come from public sources, primarily the Companies House register, and businesses' own public websites and listings (for example Google Maps). We do not buy marketing lists.

We only send unsolicited business-to-business emails to corporate subscribers (registered companies and LLPs), relying on our legitimate interest in offering relevant services. We do not cold-email sole traders or individuals without consent. Every outreach email identifies us, explains that we found the details in public business listings, and includes a one-click unsubscribe. You can object at any time by using the unsubscribe link in any email, or by contacting us, and we will stop and suppress your details.

Phone calls and call recording

We also contact some businesses by telephone. Before making an unsolicited marketing call we screen the number against the TPS and CTPS registers, and we do not call a number registered with either. If you ask us not to call again, we stop and add your number to our suppression list straight away.

Calls to and from our business numbers are recorded automatically. You will hear an announcement at the start of the call telling you so. We record calls to keep an accurate record of what was discussed and agreed, to train our team, and to check the quality of our service. Our lawful basis is legitimate interests rather than consent, so we will not make speaking to us conditional on you agreeing to be recorded. If you would rather not be recorded, say so and we will make a written note instead or continue by email.

Recordings, voicemails and any transcripts are held by our telephone provider and are deleted automatically after 180 days. After that we keep only a basic log of the call itself (the numbers involved, the date, and how long it lasted) as a business record. A recording of your voice is your personal data, so you can ask us for a copy, ask us to delete it, or object to us holding it, using the contact details below.

Information we collect

  • Project enquiries. If you submit the project form, we collect the details you enter (for example name, email, organisation, what you need built, goals and context, optional project shape, timeline, and budget band). We may also receive technical metadata with your submission (such as timestamps, campaign tags, referral details and advertising click identifiers) so we can understand which source led to a genuine enquiry.
  • Call bookings. When you book a call we keep the details you give (name, email, phone number and your answers, which can include what you want built or fixed, your budget band and when you would like it) and use them to prepare for the call, to confirm and remind you about it by email, and to phone you if something about it changes.
  • Emails and WhatsApp messages you ask for. The booking form has two separate boxes, both unticked, and you do not need to tick either to book. If you tick the email box, we send you a few helpful emails about your project, and every one has a way to unsubscribe. If you give a phone number and tick the WhatsApp box, we may message you on WhatsApp about your enquiry. We record which boxes you ticked and when. You can withdraw either at any time by unsubscribing, replying “stop” on WhatsApp, or emailing us.
  • Contacting us on WhatsApp. If you message us on WhatsApp, we receive your phone number, your WhatsApp profile name and what you send, and use them to reply and to deal with your enquiry. WhatsApp is run by Meta, which handles those messages under its own terms and privacy policy. If you would rather not use WhatsApp, call or email us instead.
  • Job applications. If you apply through our careers page, we collect your name, email, phone number (if you give one) and whether you ticked the WhatsApp box, LinkedIn profile, your CV (an uploaded file, a link, or both), the area and role you applied for, and what you tell us about yourself. See Job applications below for how we use and keep it.
  • Website hosting. Our hosting provider may process technical data automatically (for example IP address, browser type, and request logs) to run and secure the service.

How we use your information

  • To respond to project enquiries and follow up with you.
  • To send you emails about your project, or message you on WhatsApp, only if you ticked the box for it.
  • To consider job applications and contact applicants about them.
  • To operate, secure, and improve the website.
  • To measure which of our adverts lead to enquiries, only if you accept advertising cookies (see Cookies below).
  • To meet legal obligations where applicable.

Lawful bases (UK / EEA)

Where UK or EEA data protection law applies, we rely on legitimate interests (responding to enquiries, running our business, and securing our site) and, where needed, contract steps at your request before a contract. Where consent is required for a specific activity, such as advertising cookies, the helpful emails about your project, or WhatsApp messages from us, we ask for it separately and you can withdraw it at any time.

Retention

We keep enquiry information for as long as needed to respond, manage the relationship, and meet legal or professional requirements, then delete or anonymise it when no longer needed.

Job applications

We use what you send through the careers page only to consider your application, contact you about it and, if it goes ahead, set up the work with you. Our lawful basis is taking steps at your request before a contract, and our legitimate interest in finding the right people to work with.

WhatsApp. If you give a UK mobile number and tick the WhatsApp box, we may send you one WhatsApp message inviting you to book a chat, alongside the same invite by email. That is the only message we send that way. If you do not tick it, we only email you. If you message us on WhatsApp yourself, your message goes to the person handling hiring and nothing is sent back automatically.

CVs are kept privately. An uploaded CV is stored in private storage that cannot be opened from a web link. Only the admins who run our hiring can download it, after signing in.

How long we keep it. If we do not take you on, your uploaded CV is deleted automatically 12 months after you applied, so we can come back to you if a suitable role opens up in that time. If we do take you on, it becomes part of your contractor record. You can ask us to delete your application, CV included, at any time by emailing team@ownlydigital.co.uk.

Google Calendar

Our own staff can connect their Google Calendar to our booking system, so people booking a call are only offered times they are free. Nobody else is asked to connect one, and booking a call does not need a Google account. When a member of staff connects, we can:

  • see when they are busy, so those times are not offered;
  • add a booked call to their calendar, move it if it is rescheduled and remove it if it is cancelled;
  • read the times of events Gmail added to their calendar by itself, so those block time too;
  • read which calendar was connected.

We do not read other events' details, sell this information, use it for advertising, or share it with anyone except as needed to run the booking system. The access key Google gives us is stored encrypted, and staff can disconnect at any time from their booking settings or from their Google Account.

Ownly Digital's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Sharing

We do not sell your personal information. We share it with the service providers we use to run the site, reply to enquiries and keep things working, only as far as each one needs it to do its job. They are all named on our sub-processors page, with what each one does and where it processes data.

International transfers

Some of the providers we use are in the United States. Where that happens the transfer is made under the UK Extension to the EU to US Data Privacy Framework, or under the International Data Transfer Agreement where that provider is not certified. The sub-processors page says where each one processes data.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict use of your personal data, and to object or port data. You may also have the right to complain to a supervisory authority. In the UK that is the Information Commission, still known as the ICO (ico.org.uk).

Complaints about your data

If you are unhappy with how we have handled your personal information, email us at team@ownlydigital.co.uk and put “data complaint” in the subject. We will acknowledge it within 30 days, look into it, keep you updated while we do, and tell you the outcome. You can also complain to the Information Commission (the ICO) at any time, and you do not have to come to us first.

Cookies

Always on, and not tracking you. We count visits and pages with Vercel Analytics, which sets no cookies and does not identify you. Your browser also keeps your cookie choice, so we do not ask on every page, plus the small amount of data the site needs to work and stay secure.

Advertising cookies, only if you press Accept. When we run adverts on Facebook, Instagram or Google, we use the Meta Pixel (Meta Platforms Ireland Ltd) and the Google tag (Google Ireland Ltd). They tell Meta and Google that a visit, or a booked call, came from one of their adverts, so we can see which adverts are worth paying for and show them to people similar to those who book. They set cookies such as _fbp and _fbc (Meta) and _gcl_au (Google), which last up to 90 days. None of this loads until you accept: if you reject, or never answer, the scripts are not fetched at all. Meta and Google decide for themselves how they use what they collect, under their own policies: Meta and Google.

Bookings reported from our own system. If you accepted and then book a call, our system may also tell Meta directly that a booking happened, so it is still counted when a browser blocks the Pixel. It sends your email address only in scrambled (hashed) form, which Meta can match to an account but not read, and nothing about what you told us. If you rejected advertising cookies, it sends nothing.

The booking calendar. Our booking page is our own and loads no outside calendar. Calls booked before 11 October 2026 were made through Calendly, which set its own cookies inside its calendar.

Changing your mind. Use “Cookie settings” at the bottom of any page to change your answer. Withdrawing stops the tags and deletes the advertising cookies on our domain. You can also clear cookies in your browser at any time. Our lawful basis for advertising cookies, and for the booking report above, is your consent.

Contact

For privacy questions or to exercise your rights, email us at team@ownlydigital.co.uk or reach out through the Start your project form.

Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do.