Legal

PRIVACY
POLICY

Last updated: 18 October 2026  ·  IBIX Digital Ltd, Grimsby, UK

This Privacy Policy explains how IBIX ("we", "us", "our"), a digital marketing agency based in Grimsby, North East Lincolnshire, United Kingdom, collects, uses and protects your personal data when you visit ibixagency.com or submit an enquiry through our website.

1. WHO WE ARE

IBIX Digital is a digital marketing agency based in Grimsby, North East Lincolnshire, UK. We provide SEO, Google Ads management, Google Business Profile management, AI search optimisation, web design, website care plans, and enquiry-handling services (Enquiry Response System and Front Desk Assistant) to businesses across the UK.

For data protection purposes, IBIX is the data controller for personal information collected through this website. IBIX Digital Ltd is registered in England and Wales under company number 17500085, and is registered with the Information Commissioner's Office under reference ZC278571. Its registered office, shown because the law requires it and not a place we receive visitors, is 76-78 Freeman Street, Grimsby, DN32 7AG.

To contact us about this policy or your data:

2. WHAT DATA WE COLLECT

We only collect personal data that you voluntarily provide to us, plus limited technical data collected automatically as you browse.

a) When you submit the "Get my free audit" or contact form

b) When you submit a web design enquiry

Name, business name, preferred contact method, package tier, timescale and project description. When you submit a web design enquiry we also record the page you submitted from, the site that referred you, and any campaign tags in the link you arrived on.

c) When you start a project with us (client onboarding form)

Your team member's name, quote reference, contact details, and information about your business and the website decisions you approve.

d) Technical data collected automatically as you browse

What we don't collect: we do not collect payment or card details through this website, or any sensitive personal data (health, biometric, genetic, credit or detailed financial data, belief, or children's data). Please don't include sensitive details in a form message; our forms aren't designed for it, and our form handler is based outside the UK (see sections 10 and 11).

Our forms also contain hidden anti-spam fields that are never filled in by a real visitor and collect no data about you.

3. HOW WE USE YOUR DATA

We use the personal data you provide for the following purposes and, separately, for the business-to-business introduction emails described in section 7:

We will never sell your personal data to third parties, share it without your consent, or use it for purposes unrelated to your enquiry.

Our legal basis for processing your data is legitimate interests (responding to your enquiry) and, where applicable, contractual necessity (delivering services you've commissioned).

4. COOKIES AND SIMILAR TECHNOLOGIES

Always on (necessary for the site to work):

Only with your consent:

To withdraw your consent: clear your browser's site data (local storage) for this site, or email us at info@ibixagency.com and we will reset your preference.

5. THIRD-PARTY SERVICES

To operate this website and handle enquiries, we use the following third-party services. Each has its own privacy policy:

Important: the reviews widget runs before the cookie banner appears, because it does not set an analytics cookie on your device; but it does expose your IP address to the provider named above. Our fonts are hosted on our own website, so loading them sends nothing to a third party, which is why we disclose them here explicitly. Google Analytics never runs before you have accepted.

We do not use advertising or retargeting pixels (such as Google Ads remarketing or Meta Pixel) on this website, and we do not use Google Tag Manager.

We do not sell or trade your personal data.

6. DATA RETENTION

We retain your personal data only for as long as necessary:

7. MARKETING EMAILS TO BUSINESSES

From 15 September 2026 we send a small number of introduction emails to UK limited companies. We do not email sole traders, ordinary partnerships or private individuals.

Who we contact, and how we found you. Named directors and officers of UK limited companies. Company and officer details come from the public Companies House register; the business email address and website come from the company's own public website or Google Business Profile. We hold your name, role, company, business email address, website address and our notes on our review of that website. We buy no lists.

Why we can do this without asking first. Our lawful basis is legitimate interests: our interest in offering web and SEO services to businesses likely to need them, balanced against your rights. The PECR consent rule for marketing email applies to individual subscribers, not to limited companies. Our assessment of that balance is available on request.

What we send. One short email linking to a free review of your own website, and at most one follow-up. Then we stop.

How to stop it. Every email tells you how to opt out: reply with the words no thanks, or write to the reply address. Tell us to stop and we add you to a suppression list so you are not contacted again. You can object at any time under Article 21 of the UK GDPR.

How long we keep it. Twelve months from our last contact, then deletion, except the suppression list, which we keep so the block holds. No automated decision-making is involved.

8. YOUR RIGHTS UNDER UK GDPR

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights regarding your personal data:

To exercise any of these rights, contact us via our website enquiry form. We will respond within 30 days in line with our legal obligations.

How to complain to us. If you have a complaint about how we have handled your personal data, contact us directly via our contact form or by emailing info@ibixagency.com. We will acknowledge your complaint within 30 days and let you know the outcome once we have looked into it.

If you are not satisfied with our response, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent regulator:

Information Commissioner's Office  ·  ico.org.uk  ·  Helpline: 0303 123 1113

9. DATA SECURITY

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website is served over HTTPS (encrypted connection). Access to any data you submit is restricted to IBIX only.

However, no internet transmission is completely secure and we cannot guarantee absolute security of data sent to us electronically.

10. INTERNATIONAL TRANSFERS

The providers named in section 5 are based, or process data, outside the UK and EEA. Specifically:

We rely on the appropriate safeguards available for each provider for these transfers.

11. CHILDREN'S PRIVACY

Our website and services are directed at businesses and adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or in UK data protection law. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of our website after any changes constitutes your acceptance of the updated policy. This Privacy Policy should be read alongside our Terms of Use, which govern use of this website more broadly.

13. CONTACT US

If you have any questions, concerns, or requests relating to this Privacy Policy or how IBIX handles your data, please contact us:

IBIX Digital Ltd
Registered in England & Wales · Company No. 17500085
Grimsby, North East Lincolnshire, UK
info@ibixagency.com  ·  +44 7979 451280 (UK)
ibixagency.com

We aim to respond to all data-related enquiries within 5 working days, and within 30 days at the latest.