Privacy policy
Your data, without the fog machine.
This policy explains what personal data we collect, why we use it, who we share it with, and the rights you have under UK data protection law.
Last updated: 20 May 2026
01
Who we are
SAD Agency is a UK digital agency based in London. For the personal data described in this policy, SAD Agency is the data controller unless we are acting under a client contract as a processor.
You can contact us at hello@sadagency.co.uk.
02
Data we collect
We may collect your name, email address, phone number, company name, project details, messages you send us, newsletter preferences, and technical data such as IP address, device, browser, pages viewed, referral source, and cookie consent choices.
We collect this when you submit a form, email us, subscribe to updates, browse the site, or interact with our campaigns.
03
How we use data
- To respond to enquiries and provide proposals.
- To deliver services and manage client relationships.
- To send newsletters or marketing where permitted.
- To measure website performance and improve content.
- To protect the site, prevent abuse, and keep records.
- To comply with legal, tax, accounting, and regulatory duties.
04
Lawful bases
We rely on contract where we need data to provide services or take pre-contract steps, legitimate interests for business operations and site security, consent for optional analytics, advertising, and email marketing where required, and legal obligation where we must keep records or respond to lawful requests.
05
Cookies and analytics
Essential cookies are used to remember your consent choice and keep the site operating. Optional analytics and advertising cookies only run according to your saved preferences.
We use Google Analytics with Google Consent Mode v2. Consent signals are set to denied by default for analytics storage, ad storage, ad user data, and ad personalisation, then updated only when you choose.
06
Who we share data with
We use service providers for hosting, analytics, email delivery, form handling, security, CRM, payment, accounting, and project management. These suppliers may process data for us under contract. We may also share data with professional advisers, insurers, regulators, or authorities where legally required.
07
International transfers
Some suppliers may process personal data outside the UK. Where this happens, we use appropriate safeguards such as adequacy regulations, UK-approved transfer terms, or other lawful transfer mechanisms.
08
Retention
We keep enquiry records for up to 24 months, marketing preferences until you unsubscribe or ask us to delete them, analytics data in line with Google Analytics retention settings, and client, finance, tax, and contract records for up to 7 years unless a longer period is required for legal claims or compliance.
09
Your rights
You can ask to access, correct, delete, restrict, object to, or transfer your personal data. You can also withdraw consent at any time. To exercise your rights, email hello@sadagency.co.uk. You may complain to the UK Information Commissioner's Office at ico.org.uk.
Need something human?
Email hello@sadagency.co.uk or return to the contact page.