Privacy Policy
Charlotte Davies Ltd
Last updated: 31 May 2026
Charlotte Davies Ltd is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what information we collect, how we use it, and your rights under UK data protection law.
Who We Are
Charlotte Davies Ltd provides digital marketing consultancy services, including search engine optimisation (SEO), Google Ads management, analytics, conversion optimisation, website audits, and related consultancy services.
Charlotte Davies Ltd
Company Number: 13431717
VAT Number: 399229736
ICO Registration Number: ZB661631
Email: data@charlottedavies.com
Website: www.charlottedavies.com
For any questions about this policy or your personal data, please contact us at the email address above.
Information We Collect
Information You Provide
We may collect information when you:
- Contact us through our website
- Email us directly
- Book a consultation
- Request a proposal or quote
- Subscribe to our marketing communications
- Become a client
This may include your name, business name, email address, telephone number, website address, and information about your business and marketing requirements.
Information Collected Automatically
When you visit our website, we may automatically collect:
- IP address
- Device and browser type
- Pages visited and time spent on the site
- Referring websites
- General location information
This information helps us understand how visitors use our website and improve the services we provide.
How We Use Your Information
We use personal information to:
- Respond to enquiries
- Provide consultancy services
- Prepare proposals and contracts
- Manage client relationships
- Deliver reports and recommendations
- Improve our website and services
- Send relevant marketing communications where you have consented
- Meet legal, accounting, and regulatory obligations
We do not sell your personal information to third parties.
Legal Basis for Processing
Under UK GDPR, we rely on the following lawful bases for processing personal data:
Contract
Where processing is necessary to provide services you have requested or agreed to purchase.
Legitimate Interests
We rely on legitimate interests to:
- Respond to enquiries from prospective clients
- Improve our website and services
- Manage client relationships
- Maintain website security and monitor performance
We have carried out a Legitimate Interests Assessment to ensure that our use of personal data does not override your rights and freedoms. A copy of this assessment is available on request.
Consent
Where you have chosen to:
- Accept non-essential cookies
- Subscribe to marketing emails
- Request certain downloadable resources
You may withdraw your consent at any time by contacting us or using the unsubscribe link in our emails.
Legal Obligation
Where we are required to retain information for tax, accounting, or regulatory purposes.
Marketing Communications
If you subscribe to our marketing communications via MailerLite, we may send occasional emails containing:
- Marketing and SEO insights
- Search and AI visibility updates
- Service updates
- Relevant resources and guides
We will only send marketing emails where you have given your explicit consent. You can unsubscribe at any time using the link included in any of our emails, or by contacting us directly at data@charlottedavies.com.
Cookies and Website Analytics
Our website uses cookies and similar technologies to improve your experience and understand how visitors use the site. You can manage your preferences through our cookie consent banner.
We use CookieYes to manage cookie consent preferences on our website. CookieYes records and stores visitor consent choices to help us comply with UK GDPR and the Privacy and Electronic Communications Regulations (PECR).
CookieYes is configured with Google Consent Mode v2 so that non-essential analytics and advertising tags are not used until the appropriate consent has been given.
Essential Cookies
Required for website functionality and security. These cannot be disabled.
Analytics Cookies
Used to understand website performance and visitor behaviour. We use Google Analytics 4 and Google Tag Manager for this purpose.
Advertising Cookies
Where applicable, used to measure advertising effectiveness and improve our marketing campaigns. These may include Google Ads conversion tracking and Google remarketing technologies.
Third-Party Service Providers
We use trusted third-party providers to support our business operations. Our key providers include:
- MailerLite — email marketing and subscriber management
- CookieYes — cookie consent management
- Google Analytics 4 — website analytics
- Google Ads — advertising and conversion tracking
- Google Tag Manager — tag and tracking management
- Google Workspace — email and business productivity
- Microsoft 365 — document and productivity tools
- Website hosting provider(s)
- Scheduling and video conferencing platforms
These providers only process personal data where necessary and under appropriate contractual safeguards, including Data Processing Agreements where required by law.
International Data Transfers
MailerLite primarily stores subscriber data within the European Economic Area (EEA). Where personal data is transferred outside the UK or EEA by any of our service providers, appropriate safeguards are used in accordance with UK GDPR.
For other service providers that may process data outside the United Kingdom, we ensure appropriate safeguards are in place, including:
- UK International Data Transfer Agreements (IDTA)
- UK Addendum to Standard Contractual Clauses
- Other lawful transfer mechanisms recognised under UK GDPR
How Long We Keep Information
We retain personal information only for as long as necessary for the purpose it was collected, or as required by law. Our typical retention periods are:
Data Type | Retention Period |
Website enquiries | Up to 24 months |
Client records | Up to 7 years |
Accounting records | Up to 7 years |
Marketing subscribers (MailerLite) | Until unsubscribed |
Website analytics data | Up to 14 months |
Where information is no longer required, it is securely deleted or anonymised.
Data Security
We take appropriate technical and organisational measures to protect personal information from unauthorised access, loss, misuse, alteration, or disclosure. These measures include using reputable, certified service providers and following industry-standard security practices.
While no online system can guarantee absolute security, we take our obligations seriously and review our security practices regularly.
Your Rights
Under UK GDPR, you have the right to:
- Access your personal information
- Correct inaccurate or incomplete information
- Request deletion of your information (“right to be forgotten”)
- Restrict how we process your information
- Object to processing based on legitimate interests
- Data portability — request a copy of your data in a commonly used format
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, please contact us at data@charlottedavies.com. We will respond within one month of receiving your request.
Complaints
If you are unhappy with how we handle your personal information, please contact us in the first instance so we can try to resolve the matter.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Website: www.ico.org.uk
Helpline: 0303 123 1113
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or technologies we use. The latest version will always be available on our website at www.charlottedavies.com.
Where changes are material, we will take reasonable steps to bring them to your attention.