Privacy Policy
Your data, your control. We're transparent about what we collect and why.
Last updated:
Introduction
At Blue Penguin Digital, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information when you visit our website or use our services.
We're based in Wakefield, West Yorkshire, and operate under UK GDPR and Data Protection Act 2018. If you have questions, you can reach us at robert@bluepenguin.digital.
What Information We Collect
Information You Provide
- Contact Forms: Name, email address, phone number, and message content when you contact us
- Project Inquiries: Business information, project requirements, and any details you share during consultations
- Email Communications: Any information you provide when emailing us directly
Information We Collect Automatically
- Website Usage: Pages visited, time spent, and how you navigate our site (with your consent via analytics cookies)
- Technical Data: Browser type, device information, IP address (anonymized), and referring website
- Cookies: Essential cookies for site functionality and optional analytics cookies (see Cookie Policy below)
How We Use Your Information
We use your information to:
- Respond to your inquiries and provide customer support
- Deliver our web development and digital services
- Send project updates and communicate about your work
- Improve our website and services (with your consent for analytics)
- Comply with legal obligations and protect our rights
We don't sell your data. We don't share it with third parties for marketing purposes. Simple as that.
Legal Basis for Processing
Under UK GDPR, we process your data based on:
- Consent: For analytics cookies and optional communications
- Contract: To fulfil our services and respond to enquiries
- Legitimate Interest: To improve our website and prevent fraud
- Legal Obligation: To comply with applicable laws
Cookie Policy
Cookies are small text files stored on your device. We use them to make our site work properly and, with your consent, to understand how visitors use our site.
Essential Cookies
Required for the website to function. These cannot be disabled.
Analytics Cookies
Help us understand how visitors use our site so we can improve it. These require your consent.
Purpose: Track page views, user interactions, and site performance
Data: Anonymized IP addresses, page URLs, referrer information
Privacy Note: Matomo is self-hosted on our servers. Your data never leaves our infrastructure, and we don't share it with third parties.
Managing Your Cookie Preferences: You can change your cookie preferences at any time using the "Cookie Settings" link in our footer, or by clicking the button below.
Data Sharing and Third Parties
We don't sell your data. We don't rent it. We don't share it with third parties for marketing purposes.
We may share your information only in these limited circumstances:
- Service Providers: Trusted partners who help us operate (e.g., hosting providers, email services) - all under strict confidentiality agreements
- Legal Requirements: If required by law or to protect our legal rights
- Business Transfers: In the event of a merger or acquisition (we'd notify you first)
How Long We Keep Your Data
- Contact Inquiries: We keep contact form submissions for up to 2 years, or until you ask us to delete them
- Client Data: For active clients, we retain data for the duration of our working relationship plus 7 years for legal and accounting purposes
- Analytics Data: Matomo analytics data is retained for 25 months (anonymized)
- Cookie Preferences: Stored for 365 days, then we'll ask again
Your Rights Under GDPR
You have the right to:
Access
Request a copy of the personal data we hold about you
Rectification
Correct any inaccurate or incomplete data
Erasure
Request deletion of your personal data (where legally possible)
Restriction
Limit how we process your data in certain circumstances
Portability
Receive your data in a structured, machine-readable format
Objection
Object to processing based on legitimate interests
To exercise any of these rights, email us at robert@bluepenguin.digital. We'll respond within 30 days.
How We Protect Your Data
We take security seriously. We use:
- SSL/TLS encryption for data in transit
- Secure, enterprise-grade hosting infrastructure
- Regular security updates and monitoring
- Access controls and staff training on data protection
However, no method of transmission over the internet is 100% secure. While we do our best, we can't guarantee absolute security.
International Data Transfers
Your data is primarily stored and processed in the UK. If we need to transfer data outside the UK/EEA, we'll ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses) and notify you.
Children's Privacy
Our services are not directed to children under 16. We don't knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
Changes to This Policy
We may update this privacy policy from time to time. We'll notify you of significant changes by updating the "Last updated" date at the top of this page. For material changes, we may also notify you via email.
Questions or Concerns?
If you have questions about this privacy policy or want to exercise your rights, get in touch:
Email: robert@bluepenguin.digital
Phone: +44 7356 268 664
Address: Wakefield, West Yorkshire, United Kingdom
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you're not satisfied with how we handle your data.