Privacy Policy

1. Who We Are

Lone24 Digital ("we", "us", "our") is a UK-based managed digital presence platform. We provide website management, social media management, and content services to small businesses, charities and nonprofits.

We are the data controller for personal information collected through our website at lone24digital.co.uk and related services.

We are committed to protecting your personal data and processing it transparently, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

We only collect personal data that is necessary for the purposes described in this policy.

Information you provide to us

• Contact forms: name, email address, organisation name, and message content when you submit an enquiry.
• Service onboarding: business details, contact preferences, and information needed to set up your digital presence.
• Client login: authentication credentials for your client portal.
• Communications: content of emails and messages you send to us.

Information collected automatically

• Essential cookies: small files stored on your device to keep the site working correctly.
• Analytics (if consented): anonymous usage data to understand how visitors use our site. We use privacy-preserving analytics that do not identify individuals.
• Server logs: IP addresses, browser type, pages visited, and timestamps — retained for security purposes only.

Information we do NOT collect

• Sensitive personal data (health, ethnicity, political views, etc.) unless directly volunteered by you.
• Payment card details (all payments are processed by secure third-party processors).
• Data from children under 13 (our services are not directed at children).

3. How We Use Your Data

We will never sell your personal data to third parties, and we do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

• Contract performance (Article 6(1)(b)): where processing is necessary to deliver our services to you.
• Legitimate interests (Article 6(1)(f)): for responding to enquiries, security, and improving our services — where your rights and interests do not override ours.
• Consent (Article 6(1)(a)): for optional analytics cookies and direct marketing communications. You can withdraw consent at any time.
• Legal obligation (Article 6(1)(c)): where required by applicable UK law.

5. Data Sharing & Third Parties

We do not sell your personal data. We only share it with carefully selected third-party services necessary for delivering our services:

All third-party processors are bound by data processing agreements and are GDPR-compliant. We may also disclose data to law enforcement or regulatory bodies where required by law.

6. Cookies & Tracking

We use cookies in accordance with the UK Privacy and Electronic Communications Regulations (PECR).

Essential Cookies (no consent needed)

Analytics Cookies (require consent)

We do not use advertising, remarketing, or cross-site tracking cookies. You can withdraw analytics consent at any time by clicking "Decline" on the cookie banner, or by clearing your browser's local storage.

Most browsers allow you to control cookies through their settings. To find out more about cookies: ICO Guide to Cookies.

7. Data Retention

We retain personal data only for as long as necessary:

• Contact/enquiry data: 12 months from the date of last contact, unless we enter a service relationship.
• Client service data: for the duration of the contract, plus 6 years (to comply with statutory UK record-keeping requirements).
• Server logs (IP addresses): 30 days for security purposes.
• Marketing consent records: until consent is withdrawn or 3 years from last interaction.

When data is no longer required, it is securely deleted or anonymised.

8. Your Rights Under UK GDPR

As a data subject, you have the following rights:

• Right to access: You can request a copy of the personal data we hold about you (a "Subject Access Request").
• Right to rectification: You can ask us to correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): You can ask us to delete your data where there is no compelling reason to continue processing it.
• Right to restrict processing: You can ask us to pause processing your data in certain circumstances.
• Right to data portability: You can request your data in a structured, machine-readable format.
• Right to object: You can object to processing based on legitimate interests or for direct marketing purposes.
• Rights related to automated decision-making: We do not use automated decision-making or profiling, so this right is not typically applicable.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at hello@lone24digital.co.uk. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

9. Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures, including:

• HTTPS/TLS encryption on all pages and data transfers.
• SSL certificates on all client websites we manage.
• Access controls limiting who can access personal data.
• Regular security reviews of our systems and third-party providers.
• Honeypot and spam protection on all web forms.
• Secure, hashed storage of any authentication credentials.

While we take all reasonable steps to protect your data, no internet transmission is 100% secure. Please contact us immediately at hello@lone24digital.co.uk if you believe your data has been compromised.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify affected individuals without undue delay.

10. International Data Transfers

Our primary operations are based in the UK. Some of our third-party service providers (e.g. Formspree) are based in the United States. Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as:

• UK adequacy regulations for transfers to EEA countries.
• Standard Contractual Clauses (SCCs) for transfers to other countries.
• Reliance on providers who participate in recognised data transfer frameworks.

11. Terms of Service

By using our website and services, you agree to the following terms:

Use of the Website

You may use our website for lawful purposes only. You must not use the site in any way that causes damage, disruption, or is harmful to others. We reserve the right to restrict access to the site at any time.

Intellectual Property

All content on lone24digital.co.uk — including text, graphics, logos, and design — is owned by or licensed to Lone24 Digital and is protected by UK and international intellectual property laws. You may not reproduce, distribute, or create derivative works without our express written permission.

Service Provision

Lone24 Digital provides managed digital presence services as described on this website. Specific service terms, deliverables, timescales and obligations are set out in individual client agreements. We reserve the right to modify or discontinue services with reasonable notice.

Limitation of Liability

To the fullest extent permitted by law, Lone24 Digital shall not be liable for any indirect, incidental, or consequential loss or damage arising from use of our website or services. Our total liability shall not exceed the fees paid by you in the 12 months preceding a claim.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies.

Governing Law

These terms are governed by the laws of England and Wales. Any disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales.

Changes to Terms

We may update these terms periodically. Significant changes will be notified by email to existing clients. Continued use of our services after changes constitutes acceptance.

12. Contact Us

For any questions, requests, or concerns about this privacy policy or how we handle your data:

We aim to respond to all data-related enquiries within 30 calendar days. If your request is complex, we will acknowledge it promptly and inform you of any extension.

If you are not satisfied with our response, you have the right to complain to the ICO at ico.org.uk.

This privacy policy was last reviewed and updated on 20 March 2026. Previous versions are available on request.