Legal
Privacy Policy
Last updated 3 August 2026
This explains what personal data we collect through edm-uk.com, why we collect it, how long we keep it and what you can ask us to do with it. We have kept it short and specific rather than long and vague.
Who Is Responsible
Expert Digital Marketing Ltd is the data controller for this website. Our details are at the bottom of this page. We are based in the United Kingdom and this policy is written to the UK GDPR and the Data Protection Act 2018.
What We Collect And Why
We collect very little. There is no account to create, no newsletter and no profiling.
When You Use The Contact Form
- What you type: your name, email address, website address if you give one, which audit you asked about, and your message.
- What is recorded with it: your IP address, the country your request came from, and your browser's user agent string. These are kept with the enquiry so we can investigate abuse of the form.
Why we may use it: to reply to you and to do the work you have asked about. Our lawful basis is legitimate interests, specifically responding to someone who has contacted us asking for a reply. For the technical details it is also legitimate interests, specifically keeping the form from being abused.
When You Accept Analytics And Advertising Cookies
If, and only if, you accept, Google Analytics 4 records the pages you view, an approximate location derived from your IP address, and basic device and browser details, and Google Ads records which advert brought you here if one did. We ask Google to anonymise your IP address. Our lawful basis is your consent, which you can withdraw at any time on our Cookie Policy page. If you decline, no cookies are set and nothing is sent to Google.
Counting Page Visits
Whether or not you accept cookies, our server keeps a simple count of the pages requested from it. This is how we tell whether an advert brought anyone to the site at all, since nothing is sent to Google unless you accept. It records the page, the time, the page you came from, the country your request came from, your browser's description of itself, and the advert click reference if there is one in the web address, and how long the page was open and on screen. It sets nothing on your device and reads nothing from it.
We do not store your IP address for this. It is turned into a scrambled code that changes every day, so we can see that one visit looked at three pages, and we cannot recognise you tomorrow or work back to your address. Our lawful basis is legitimate interests, specifically understanding whether our advertising works. These records are deleted after 14 months.
Keeping The Form Secure
Our contact form is protected by Cloudflare Turnstile, which checks that a real person is sending the enquiry. Cloudflare processes technical details including your IP address to make that check. Our lawful basis is legitimate interests, specifically preventing automated abuse. This runs whether or not you accept analytics, because it is a security measure.
Who We Share It With
We do not sell your data and we do not use it to train AI models. If you accept, we share measurement data with Google so we can see which of our adverts brings people here. We use a small number of service providers who process data on our behalf.
| Provider | What They Do | Where |
|---|---|---|
| Cloudflare | Hosts this website, stores enquiries and page visit counts in its database, and runs the anti spam check | UK and worldwide network |
| Resend | Delivers the enquiry to us by email | United States |
| Analytics, only if you accept analytics cookies | United States | |
| Microsoft | Our own email, where your enquiry lands and where our reply is written | European Union and United States |
| OpenStreetMap | Shows the map on our contact page. It sets no cookies, but like any embedded map it receives your IP address when it loads | United Kingdom and the Netherlands, backups in the EU |
Where a provider is outside the UK, transfers are covered by the UK extension to the EU Standard Contractual Clauses, by an adequacy decision, or by both.
How Long We Keep It
- Enquiries that do not become work: 24 months from your last contact with us, then deleted.
- Enquiries that become work: kept for the life of the relationship and then for 6 years, because HMRC requires business records to be kept that long.
- Analytics: Google Analytics data expires automatically after 14 months.
- Page visit counts: 14 months, then deleted automatically.
- Your cookie choice: 12 months, after which we ask again.
Your Rights
Under UK data protection law you can ask us to:
- give you a copy of the personal data we hold about you
- correct anything that is wrong
- delete it, where we have no continuing reason to keep it
- restrict how we use it, or object to us using it
- send it to you or another provider in a portable format
You can also withdraw consent at any time, and that is as easy as giving it: use the Cookie Settings link at the bottom of any page, or the controls on our Cookie Policy page.
Email us to exercise any of these. We will respond within one month. There is no charge.
Cookies
We set no cookies at all unless you accept analytics. Our Cookie Policy lists every one, what it does and how long it lasts.
Security
The site is served over HTTPS only. Enquiries are stored in a Cloudflare database and are accessible only to us. We keep the number of people and systems that can see your data as small as we can.
Changes To This Policy
If we change how we handle personal data we will update this page and the date at the top.
How To Contact Us About Your Data
Expert Digital Marketing Ltd, 14/2E Docklands Business Centre, 10-16 Tiller Road, London, E14 8PX, United Kingdom. Registered in England and Wales, company number 12325320, VAT GB460577382.
Email web@edm-uk.com or call +44 208 050 0701.
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.