Legal

Privacy Policy

How P11 Digital collects, uses, and protects your personal data in accordance with UK GDPR.

Last updated: 8 May 2026  |  Version: 1.0  |  This policy applies to the website www.p11digital.co.uk and all services offered by P-Eleven Ltd.

Contents

  1. Who We Are
  2. Data We Collect
  3. How We Use Your Data
  4. Legal Basis for Processing
  5. Data Retention
  6. Who We Share Data With
  7. International Transfers
  8. Cookies
  9. Your Rights
  10. Children's Privacy
  11. Changes to This Policy
  12. Contact Us
Section 01

Who We Are

P11 Digital is a trading name of P-Eleven Ltd, a company registered in England and Wales.

DetailInformation
Legal NameP-Eleven Ltd
Trading AsP11 Digital
Company Number16288440
Registered Office71-75 Shelton Street, London, England, WC2H 9JQ
EmailSales@p11digital.co.uk
Phone+44 7496 325622
Websitewww.p11digital.co.uk
ICO RegistrationRegistered with the Information Commissioner's Office (ICO) as required under UK GDPR

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, P-Eleven Ltd is the Data Controller for personal data collected through this website and our services.

Section 02

Data We Collect

We collect personal data in the following categories, depending on how you interact with us:

2.1 Contact & Enquiry Data

When you submit an enquiry via our contact form or contact us by email or phone, we collect:

This data is processed through Formspree (our form processing provider) before being delivered to us by email.

2.2 Technical & Usage Data

When you visit our website, we and our analytics provider may automatically collect:

This data is collected via Google Analytics 4 (GA4) only where you have provided your consent through our cookie consent tool.

2.3 Advertising Data

We run advertising campaigns through Google Ads. If you arrive at our website via a Google Ad, Google may set cookies on your device to measure ad performance and conversions. This only occurs with your consent. Please see our Cookie Policy for full details of the cookies used.

2.4 Payment Data

When you purchase services from us, payments are processed securely by Stripe, Inc. We do not collect, store, or have access to your full card number, CVV, or other sensitive payment credentials. Stripe acts as an independent data controller for payment data; please review Stripe's Privacy Policy for details.

We do retain records of the fact of a transaction (amount, date, service purchased, your name and email) for financial record-keeping purposes.

2.5 Data You Provide Voluntarily

If you subscribe to updates, participate in surveys, or communicate with us by any other means, we will collect whatever personal data you choose to share with us in that context.

Section 03

How We Use Your Data

Purpose Data Used Legal Basis
Responding to your enquiry Name, email, phone, message Legitimate interests / Pre-contractual steps
Delivering contracted web design & hosting services Name, email, business name Performance of a contract
Sending invoices and managing payments Name, email, transaction records Performance of a contract; legal obligation
Website analytics and performance monitoring IP address, usage data, cookies Consent
Google Ads conversion tracking Ad interaction data, cookies Consent
Sending marketing communications (newsletter, offers) Name, email Consent
Complying with legal and regulatory obligations Financial records, correspondence Legal obligation
Improving our services and website Aggregated, anonymised usage data Legitimate interests
Section 04

Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

Legitimate Interests (Article 6(1)(f))

We process contact enquiry data and basic website usage data where we have a legitimate interest in responding to potential clients, operating our business, and protecting our systems — provided that interest is not overridden by your rights and freedoms.

Performance of a Contract (Article 6(1)(b))

Where you have engaged us to provide services, we process the data necessary to fulfil that contract (e.g. communicating with you about your project, processing invoices).

Legal Obligation (Article 6(1)(c))

We retain certain financial records (invoices, payment records) for up to 7 years to comply with HMRC requirements under the Companies Act 2006 and tax legislation.

Consent (Article 6(1)(a))

We rely on your freely given, specific, informed, and unambiguous consent for: Google Analytics tracking, Google Ads conversion cookies, and any direct marketing communications. You may withdraw consent at any time without detriment — see Your Rights.

Section 05

Data Retention

We retain personal data only for as long as necessary for the purposes set out in this policy.

Data Category Retention Period Reason
Contact enquiries (no contract formed) 2 years Legitimate interests — follow-up, dispute resolution
Client project data and correspondence Duration of contract + 2 years Contract performance; dispute resolution
Financial records (invoices, payment records) 7 years HMRC / legal obligation
Google Analytics data 26 months (configured in GA4) Analytics — consent-based; industry standard
Google Ads cookies Up to 90 days (conversion window) Ad performance measurement — consent-based
Marketing consent records Until consent is withdrawn + 1 year Evidence of lawful processing

When data is no longer required, it is securely deleted or anonymised. You may request earlier deletion — see Your Rights.

Section 06

Who We Share Data With

We do not sell your personal data. We share data only with trusted third-party service providers who process data on our behalf, bound by data processing agreements:

Recipient Purpose Location Privacy Policy
Formspree Contact form processing and delivery USA (SCCs in place) View
Stripe, Inc. Secure payment processing USA / EU (SCCs in place) View
Google LLC (Analytics) Website usage analytics (with consent) USA (SCCs in place) View
Google LLC (Ads) Conversion tracking & remarketing (with consent) USA (SCCs in place) View
Netlify, Inc. Website hosting and delivery USA (SCCs in place) View

We may also disclose your data to competent authorities (e.g. law enforcement, courts, regulators) where required by law or to protect our legal rights.

Section 07

International Transfers

Some of our third-party providers are located outside the UK and the European Economic Area (EEA). Where this is the case, we ensure adequate safeguards are in place, including:

By engaging our services, you acknowledge that your data may be transferred to countries outside the UK. All such transfers are conducted with appropriate safeguards as described above.

Section 08

Cookies

We use cookies and similar tracking technologies on this website. Cookies are small text files placed on your device. We use both our own (first-party) cookies and third-party cookies from our service providers.

We operate a cookie consent mechanism on this website. Analytics and marketing cookies are only placed on your device once you have given your consent. Strictly necessary cookies (required for the website to function) do not require consent.

For a full description of every cookie we use, their purpose, duration, and how to manage or withdraw your consent, please read our Cookie Policy.

Section 09

Your Rights

Under UK GDPR, you have the following rights in relation to your personal data. We will respond to all requests within 30 days (which may be extended to 60 days for complex requests — we will notify you if this applies).

🔍

Right of Access

Obtain a copy of the personal data we hold about you (Subject Access Request).

✏️

Right to Rectification

Have inaccurate or incomplete personal data corrected.

🗑️

Right to Erasure

Request deletion of your data where there is no longer a lawful basis for processing.

📤

Right to Portability

Receive your data in a structured, machine-readable format.

Right to Restriction

Restrict processing of your data in certain circumstances.

Right to Object

Object to processing based on legitimate interests or for direct marketing.

🚫

Withdraw Consent

Withdraw consent at any time (e.g. for analytics or marketing) without affecting prior processing.

⚖️

Right to Complain

Lodge a complaint with the ICO if you believe we have processed your data unlawfully.

How to Exercise Your Rights

To exercise any of the above rights, please contact us at Sales@p11digital.co.uk with the subject line "Data Rights Request". We may need to verify your identity before processing your request. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive.

Right to Complain to the ICO

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's data protection regulator:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

We would, however, appreciate the opportunity to resolve your concern directly before you approach the ICO.

Section 10

Children's Privacy

Our services are directed at businesses and individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected data about a child, please contact us immediately at Sales@p11digital.co.uk and we will take steps to delete it without delay.

Section 11

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. The "Last updated" date at the top of this page will be revised accordingly.

Where changes are material, we will take reasonable steps to bring these to your attention (for example, by posting a notice on our website or contacting you by email where we hold your contact details). We encourage you to review this policy periodically.

Your continued use of our website after any update constitutes acceptance of the revised policy, subject to your rights under UK GDPR.

Section 12

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact our Data Controller:

P-Eleven Ltd (trading as P11 Digital)
71-75 Shelton Street, London, England, WC2H 9JQ
Email: Sales@p11digital.co.uk
Phone: +44 7496 325622
Website: www.p11digital.co.uk

We aim to respond to all privacy-related enquiries within 5 working days.