Privacy policy

1. Who we are

BLND Agency Ltd (company number 14748840) is the controller of the personal data described in this policy, unless we are processing personal data solely on a client's documented instructions. In that situation, the client is normally the controller and BLND acts as its processor.

2. Personal data we collect

Depending on how you interact with us, we may collect:

• Identity and contact data: name, job title, company, email address, telephone number, postal address and LinkedIn profile.
• Enquiry and relationship data: messages, meeting details, proposals, contracts, correspondence, feedback and records of our relationship.
• Marketing-diagnosis data: your questionnaire answers, business model, industry, revenue range, marketing priorities, technology stack, website URL, uploaded materials and the score or recommendations generated from your answers.
• Connected-account data: where you choose to connect a service for a deeper diagnosis, read-only information from services such as Google Analytics or Google Search Console, within the permissions shown to you when connecting.
• Client and project data: project contacts, briefs, files, deliverables, account access information, meeting recordings or transcripts where agreed, time records, billing details and information needed to perform our services.
• Transaction data: information about services purchased and payments made. Payment-card details are handled by the relevant payment provider and are not intended to be stored by us.
• Marketing data: communication preferences, campaign engagement, event participation and information about how you came to us.
• Technical and usage data: IP address, device and browser information, approximate location, referring pages, pages viewed, interactions, cookie identifiers and advertising or conversion data.

Please do not send us special-category data (such as health, biometric, political, religious or trade-union information) or criminal-offence data unless we have specifically asked for it and agreed an appropriate way to handle it.

3. Where we obtain personal data

We normally obtain personal data directly from you. We may also receive it from:

• your employer, colleagues, advisers or another person who introduces you to us;
• public sources such as company websites, Companies House and professional profiles;
• our clients where your data is relevant to work we perform for them;
• analytics, advertising and social-media platforms; and
• service providers and integrations you choose to connect to BLND.

4. How and why we use personal data

Where we rely on legitimate interests, we consider whether the use is necessary and balance our interests against your rights and reasonable expectations. You may object to processing based on legitimate interests by contacting us.

5. Marketing diagnosis and profiling

Our marketing diagnosis uses the answers you provide to calculate a readiness score, identify potential gaps and suggest a service or next step. This is profiling because it evaluates aspects of a business contact's professional interests and marketing needs. The result is indicative, can be reviewed by a person and does not make a decision that produces legal or similarly significant effects for you.

Optional website scans and read-only account connections are used only when you select them and approve the requested permissions. You can skip these options and still receive the standard diagnosis. You may revoke access through the connected service or ask us to disconnect it.

6. Marketing communications

We may send relevant marketing to business contacts where permitted by law. Where consent is required, we will ask for it. You can opt out at any time using the unsubscribe link in an email or by contacting hello@blnd.agency. Opting out of marketing will not stop service messages that are necessary for an enquiry, booking, project or contract.

We may keep a minimal suppression record after an opt-out so that we can respect your preference and avoid contacting you again.

7. Cookies, analytics and advertising

Our website uses cookies and similar technologies. Strictly necessary technologies support security and core website functions. With your consent, analytics and advertising technologies may help us understand website use, measure conversions, improve campaigns and show more relevant advertising.

Depending on the page and your choices, these technologies may involve:

• HubSpot: CRM forms, meeting booking, website analytics and marketing interactions;
• Google: Google Tag Manager, Google Analytics, Google Ads conversion measurement and embedded Google content such as maps;
• Meta: advertising measurement, pixels, conversion data and audience services for Facebook and Instagram;
• WordPress and our hosting providers: essential site operation, security and preferences; and
• embedded or linked services: content or booking features that may receive technical data when loaded or used.

Non-essential analytics and advertising tags should not be activated unless you consent through our cookie banner. You can change or withdraw your choice at any time using the Cookie Settings link in the website footer. You can also limit cookies in your browser, although parts of the site may not work as intended.

8. Who we share personal data with

We share personal data only where reasonably necessary, including with:

• HubSpot for CRM, forms, meetings, email and related analytics;
• Productive for project, resource, time and business management;
• Zapier for workflow automation and controlled transfers between our systems;
• Google Workspace for email, documents, storage, meetings and collaboration;
• Google advertising and analytics services for consented measurement, conversion tracking and advertising;
• Meta Business Suite and Meta advertising services for campaign management, measurement and audiences;
• WordPress, Divi, website hosting, security and technical-support providers for operating our website;
• professional advisers, insurers, accountants, auditors and payment providers;
• contractors and delivery partners who need the information to support our work and are subject to confidentiality or data-protection obligations; and
• courts, regulators, law-enforcement bodies or other parties where required by law or necessary to protect legal rights.

If our business or assets are sold, reorganised or transferred, relevant information may be shared with professional advisers and the prospective or actual new owner, subject to appropriate safeguards.

9. International transfers

Some of our providers operate internationally, so personal data may be accessed from or transferred to countries outside the United Kingdom. Where required, we use an approved safeguard such as UK adequacy regulations (including an applicable UK-US data bridge), the UK International Data Transfer Agreement, the UK Addendum to standard contractual clauses, or another lawful transfer mechanism. We also apply appropriate contractual and security measures.

Contact us if you would like more information about the safeguards relevant to your data.

10. How long we keep personal data

We keep personal data only for as long as it is needed for the purpose for which it was collected. Our usual periods are:

• General enquiries and unsuccessful proposals: up to 24 months after the last meaningful interaction.
• Marketing contacts: until you opt out or after 24 months without meaningful engagement, unless a longer period is justified; suppression records may be kept longer.
• Marketing-diagnosis responses: up to 24 months; optional uploads, connection tokens and retrieved connected-account data are normally deleted or de-identified within 90 days after the diagnosis unless you become a client or ask us to retain them.
• Client, contract, project and financial records: usually up to seven years after the relationship or relevant transaction ends, where needed for tax, accounting, contractual or legal purposes.
• Website, analytics and advertising data: according to the lifespan shown in our cookie controls and the retention settings in the relevant platform.

We may keep information longer where required by law, needed for a legal claim or subject to a preservation request. We may retain aggregated or irreversibly anonymised information that no longer identifies anyone.

11. Security

We use proportionate technical and organisational measures to protect personal data, including access controls, account security, confidentiality obligations, reputable service providers and backups where appropriate. No online system is entirely risk-free, so please avoid sending sensitive information through ordinary website forms or email unless agreed with us.

12. Your data-protection rights

Depending on the circumstances, UK data-protection law may give you the right to:

• request access to your personal data;
• ask us to correct inaccurate or incomplete data;
• ask us to erase personal data;
• ask us to restrict processing;
• object to processing based on legitimate interests or to direct marketing;
• receive certain data in a portable format;
• withdraw consent at any time, without affecting earlier lawful processing; and
• raise concerns about certain automated decisions.

To exercise a right, email hello@blnd.agency. We may ask for information to verify your identity. We normally respond within one month, although the law allows extensions in some cases.

13. Complaints

Please contact us first so we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint. If you are located outside the UK, you may also be able to contact your local data-protection authority.

14. Third-party websites and services

Our website may link to or embed third-party websites and services. Their own privacy policies apply when you interact with them. We are not responsible for how independent third parties use personal data outside our control.

15. Children

Our website and services are intended for business users and are not directed at children. We do not knowingly collect personal data from children through the website.

16. Changes to this policy

We may update this policy when our services, systems or legal obligations change. We will publish the revised version here and change the “Last updated” date. Where a change materially affects how we use personal data, we will provide additional notice where appropriate.