How P11 Digital collects, uses, and protects your personal data in accordance with UK GDPR.
Last updated: 8 May 2026 | Version: 1.0 | This policy applies to the website www.p11digital.co.uk and all services offered by P-Eleven Ltd.
P11 Digital is a trading name of P-Eleven Ltd, a company registered in England and Wales.
| Detail | Information |
|---|---|
| Legal Name | P-Eleven Ltd |
| Trading As | P11 Digital |
| Company Number | 16288440 |
| Registered Office | 71-75 Shelton Street, London, England, WC2H 9JQ |
| Sales@p11digital.co.uk | |
| Phone | +44 7496 325622 |
| Website | www.p11digital.co.uk |
| ICO Registration | Registered with the Information Commissioner's Office (ICO) as required under UK GDPR |
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, P-Eleven Ltd is the Data Controller for personal data collected through this website and our services.
We collect personal data in the following categories, depending on how you interact with us:
When you submit an enquiry via our contact form or contact us by email or phone, we collect:
This data is processed through Formspree (our form processing provider) before being delivered to us by email.
When you visit our website, we and our analytics provider may automatically collect:
This data is collected via Google Analytics 4 (GA4) only where you have provided your consent through our cookie consent tool.
We run advertising campaigns through Google Ads. If you arrive at our website via a Google Ad, Google may set cookies on your device to measure ad performance and conversions. This only occurs with your consent. Please see our Cookie Policy for full details of the cookies used.
When you purchase services from us, payments are processed securely by Stripe, Inc. We do not collect, store, or have access to your full card number, CVV, or other sensitive payment credentials. Stripe acts as an independent data controller for payment data; please review Stripe's Privacy Policy for details.
We do retain records of the fact of a transaction (amount, date, service purchased, your name and email) for financial record-keeping purposes.
If you subscribe to updates, participate in surveys, or communicate with us by any other means, we will collect whatever personal data you choose to share with us in that context.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Responding to your enquiry | Name, email, phone, message | Legitimate interests / Pre-contractual steps |
| Delivering contracted web design & hosting services | Name, email, business name | Performance of a contract |
| Sending invoices and managing payments | Name, email, transaction records | Performance of a contract; legal obligation |
| Website analytics and performance monitoring | IP address, usage data, cookies | Consent |
| Google Ads conversion tracking | Ad interaction data, cookies | Consent |
| Sending marketing communications (newsletter, offers) | Name, email | Consent |
| Complying with legal and regulatory obligations | Financial records, correspondence | Legal obligation |
| Improving our services and website | Aggregated, anonymised usage data | Legitimate interests |
Under UK GDPR, we rely on the following lawful bases:
We process contact enquiry data and basic website usage data where we have a legitimate interest in responding to potential clients, operating our business, and protecting our systems — provided that interest is not overridden by your rights and freedoms.
Where you have engaged us to provide services, we process the data necessary to fulfil that contract (e.g. communicating with you about your project, processing invoices).
We retain certain financial records (invoices, payment records) for up to 7 years to comply with HMRC requirements under the Companies Act 2006 and tax legislation.
We rely on your freely given, specific, informed, and unambiguous consent for: Google Analytics tracking, Google Ads conversion cookies, and any direct marketing communications. You may withdraw consent at any time without detriment — see Your Rights.
We retain personal data only for as long as necessary for the purposes set out in this policy.
| Data Category | Retention Period | Reason |
|---|---|---|
| Contact enquiries (no contract formed) | 2 years | Legitimate interests — follow-up, dispute resolution |
| Client project data and correspondence | Duration of contract + 2 years | Contract performance; dispute resolution |
| Financial records (invoices, payment records) | 7 years | HMRC / legal obligation |
| Google Analytics data | 26 months (configured in GA4) | Analytics — consent-based; industry standard |
| Google Ads cookies | Up to 90 days (conversion window) | Ad performance measurement — consent-based |
| Marketing consent records | Until consent is withdrawn + 1 year | Evidence of lawful processing |
When data is no longer required, it is securely deleted or anonymised. You may request earlier deletion — see Your Rights.
We do not sell your personal data. We share data only with trusted third-party service providers who process data on our behalf, bound by data processing agreements:
| Recipient | Purpose | Location | Privacy Policy |
|---|---|---|---|
| Formspree | Contact form processing and delivery | USA (SCCs in place) | View |
| Stripe, Inc. | Secure payment processing | USA / EU (SCCs in place) | View |
| Google LLC (Analytics) | Website usage analytics (with consent) | USA (SCCs in place) | View |
| Google LLC (Ads) | Conversion tracking & remarketing (with consent) | USA (SCCs in place) | View |
| Netlify, Inc. | Website hosting and delivery | USA (SCCs in place) | View |
We may also disclose your data to competent authorities (e.g. law enforcement, courts, regulators) where required by law or to protect our legal rights.
Some of our third-party providers are located outside the UK and the European Economic Area (EEA). Where this is the case, we ensure adequate safeguards are in place, including:
By engaging our services, you acknowledge that your data may be transferred to countries outside the UK. All such transfers are conducted with appropriate safeguards as described above.
We use cookies and similar tracking technologies on this website. Cookies are small text files placed on your device. We use both our own (first-party) cookies and third-party cookies from our service providers.
We operate a cookie consent mechanism on this website. Analytics and marketing cookies are only placed on your device once you have given your consent. Strictly necessary cookies (required for the website to function) do not require consent.
For a full description of every cookie we use, their purpose, duration, and how to manage or withdraw your consent, please read our Cookie Policy.
Under UK GDPR, you have the following rights in relation to your personal data. We will respond to all requests within 30 days (which may be extended to 60 days for complex requests — we will notify you if this applies).
Obtain a copy of the personal data we hold about you (Subject Access Request).
Have inaccurate or incomplete personal data corrected.
Request deletion of your data where there is no longer a lawful basis for processing.
Receive your data in a structured, machine-readable format.
Restrict processing of your data in certain circumstances.
Object to processing based on legitimate interests or for direct marketing.
Withdraw consent at any time (e.g. for analytics or marketing) without affecting prior processing.
Lodge a complaint with the ICO if you believe we have processed your data unlawfully.
To exercise any of the above rights, please contact us at Sales@p11digital.co.uk with the subject line "Data Rights Request". We may need to verify your identity before processing your request. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's data protection regulator:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
We would, however, appreciate the opportunity to resolve your concern directly before you approach the ICO.
Our services are directed at businesses and individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected data about a child, please contact us immediately at Sales@p11digital.co.uk and we will take steps to delete it without delay.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. The "Last updated" date at the top of this page will be revised accordingly.
Where changes are material, we will take reasonable steps to bring these to your attention (for example, by posting a notice on our website or contacting you by email where we hold your contact details). We encourage you to review this policy periodically.
Your continued use of our website after any update constitutes acceptance of the revised policy, subject to your rights under UK GDPR.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact our Data Controller:
P-Eleven Ltd (trading as P11 Digital)
71-75 Shelton Street, London, England, WC2H 9JQ
Email: Sales@p11digital.co.uk
Phone: +44 7496 325622
Website: www.p11digital.co.uk
We aim to respond to all privacy-related enquiries within 5 working days.