Privacy Policy

This Privacy Policy explains how EXPRE Digital Limited (“EXPRE”, “we”, “us”, “our”) collects, uses, and protects personal data when you visit our website or when you use our services.

Introduction

We take the privacy of our website visitors and clients seriously. We process personal data only where we have a lawful basis for doing so and in accordance with UK GDPR and the Data Protection Act 2018. This policy explains what data we collect, why we collect it, how we use it, and your rights in relation to it.

Data Controller

The data controller is EXPRE Digital Limited, a company registered in England and Wales. Our registered address is in London. For privacy matters, contact us at data@expre.co.uk.

Data We Collect

Information you provide directly: This includes your name, email address, phone number, and any other information you submit through our contact forms, when you enquire about our services, or when you subscribe to our newsletter.

Information collected automatically: When you visit our website, we automatically collect certain technical information including your IP address (anonymised for analytics purposes), browser type, pages visited, time spent on pages, and referring URL. This data is collected through Google Analytics 4 and is subject to your cookie consent choices.

Cookies: We use cookies for analytics and functionality purposes. You can manage your cookie preferences at any time through the cookie consent manager on our website.

Business contact data: When you contact us as a representative of a business, we process your business contact information in connection with potential or active commercial relationships.

How We Use Your Data

To respond to enquiries and communicate with you about our services. To deliver services you have contracted with us for. To send our newsletter and marketing communications where you have given consent. To understand how our website is used and to improve its content and functionality. To comply with legal obligations. To manage our business operations and client relationships.

Cookies

We use the following categories of cookies: Essential cookies (required for the website to function, cannot be disabled), Analytics cookies (Google Analytics 4, used to understand website usage, requires consent), and Marketing cookies (used for advertising and retargeting purposes, requires consent).

You can manage your cookie preferences at any time using the cookie preferences link in the footer of this website. Withdrawing consent for analytics or marketing cookies will not affect the functionality of the website.

Third-Party Services

We use the following third-party services that may process personal data: Google Analytics 4 (website analytics), Google Tag Manager (tag management), HubSpot (CRM and marketing automation, for managing client and prospect relationships). Each of these services has its own privacy policy and is subject to a data processing agreement with EXPRE.

For client projects, we may use additional third-party AI services including OpenAI, Anthropic, and Google Cloud AI. Where these services process personal data in connection with a client project, appropriate data processing agreements are in place.

Data Security

We implement appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include encrypted connections (HTTPS), access controls limiting data access to authorised personnel, regular security assessments, and data minimisation practices.

We hold Cyber Essentials certification, which covers the baseline technical security controls required to protect against common cyber threats.

Your Rights

Under UK GDPR, you have the following rights: the right to be informed (about how we use your data, which this policy provides), the right of access (to obtain a copy of your personal data), the right to rectification (to have inaccurate data corrected), the right to erasure (to have data deleted where we no longer have a lawful basis), the right to restrict processing, the right to data portability, and the right to object to processing based on legitimate interests.

To exercise any of these rights, contact data@expre.co.uk. We aim to respond within 30 days. You also have the right to lodge a complaint with the ICO at ico.org.uk.

Changes to This Policy

We review this Privacy Policy periodically and update it when our data practices change or when legislation requires. The “last updated” date at the top of this page reflects the most recent revision. Material changes will be communicated to subscribers and existing clients.

Contact Us

For privacy-related questions or to exercise your data rights, contact us at data@expre.co.uk or write to: Data Protection, EXPRE Digital Limited, London.