GDPR Compliance & Data Protection

EXPRE Digital Limited (“EXPRE”, “we”, “us”) is committed to protecting the personal data of our clients, website visitors, and business contacts. This page explains how we handle personal data in our own operations and in the services we provide to clients.

Data Controller Information

EXPRE Digital Limited is the data controller for personal data processed in connection with our website and business operations. We are registered with the Information Commissioner’s Office (ICO). Our registered office is in London, England. For data protection queries, contact us at: data@expre.co.uk

Data We Collect and Why

Contact and enquiry data: When you submit a contact form, email us, or enquire about our services, we collect your name, email address, and any information you provide in your message. We use this to respond to your enquiry and to assess whether we can help with what you need.

Website analytics data: We use Google Analytics 4 to understand how visitors use our website. This includes pages visited, time on site, device type, and approximate location. We do not use analytics data to identify individual visitors.

Client project data: For active client projects, we process data required to deliver the services agreed. This may include website data, marketing data, and business information depending on the nature of the project.

AI tool processing: Where we use AI tools (OpenAI, Anthropic Claude, Google Gemini) in the delivery of our services, we use enterprise API tiers with data processing agreements in place. We minimise personal data in AI prompts and do not input client personal data into AI tools without an appropriate lawful basis and the client’s awareness.

Lawful Basis for Processing

Enquiry responses: Legitimate interests (responding to a business enquiry you have initiated).

Contract delivery: Contract performance (delivering services you have contracted with us for).

Marketing communications: Consent (where you have subscribed to our newsletter or requested marketing content).

Analytics: Legitimate interests (understanding website usage to improve our content and services, subject to cookie consent).

How Long We Keep Your Data

Enquiry data from non-clients: 12 months from last contact, unless you become a client.

Client project data: Duration of the project plus 6 years (consistent with standard UK business record-keeping requirements).

Marketing subscriber data: Until you unsubscribe.

Analytics data: Retained in Google Analytics for 26 months.

AI Tools and Data Processing

EXPRE uses AI tools in the delivery of some services, including content generation, analysis, and automation. Where AI tools process data on behalf of clients, we ensure that data processing agreements are in place with the relevant AI service providers, data is processed only for the agreed purpose, personal data is minimised or pseudonymised where possible, and clients are informed of which AI tools are used in their project.

We do not use client data to train AI models. Enterprise API arrangements with our AI tool providers include commitments that data submitted via API is not used for training purposes.

Your Rights

Under UK GDPR, you have the right to access personal data we hold about you, correct inaccurate personal data, request deletion of personal data where we no longer have a lawful basis to hold it, object to processing based on legitimate interests, and data portability for data you have provided to us.

To exercise any of these rights, contact us at data@expre.co.uk. We will respond within 30 days. We may ask you to verify your identity before responding to rights requests.

How to Make a Data Request

Email data@expre.co.uk with “Data Rights Request” in the subject line. Include your name, the email address associated with your request, and a description of what you are requesting. We do not charge for rights requests and will not disadvantage you for making one.

If you are not satisfied with our response to a data rights request, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.