Privacy Policy

Last updated: May 2025

S. The Agency is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

S. The Agency ("we", "us", "our") is a social media agency based in London, United Kingdom. We operate the website stheagency.co.uk.

For data protection enquiries, please contact us at: hello@stheagency.co.uk

2. What Data We Collect

We may collect the following personal data when you use our website or services:

Contact information — your name, email address, phone number, and business name when you submit our contact form or enquiry
Message content — any information you voluntarily include in messages sent to us
Usage data — pages visited, time spent on pages, browser type, and device type (collected anonymously via analytics)
Cookie data — see our Cookie Policy section below

We do not collect sensitive personal data (such as health information, financial details, or government identification numbers).

3. How We Use Your Data

We use your personal data for the following purposes:

To respond to your enquiries and provide the services you've requested
To send you information about our services where you have given consent
To improve our website and understand how visitors use it
To fulfil our contractual obligations to clients
To comply with legal obligations

4. Legal Basis for Processing

We process your personal data on the following legal grounds under UK GDPR:

Legitimate interests — responding to enquiries and running our business
Contract — fulfilling services agreed with clients
Consent — where you have explicitly agreed (e.g. newsletter subscription or cookies)
Legal obligation — where required by law

5. How We Share Your Data

We do not sell, rent, or trade your personal data. We may share data with trusted third-party service providers who assist us in operating our website and business, including:

Netlify — website hosting and form submissions (netlify.com)
Google Analytics — website analytics (anonymised)
TidyCal — appointment scheduling

All third-party providers are required to handle your data securely and in accordance with applicable data protection law.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

Enquiry data — retained for up to 2 years after last contact
Client data — retained for 6 years after the end of our contract (for legal and tax purposes)
Analytics data — retained for 26 months (Google Analytics default)

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right to access — request a copy of the data we hold about you
Right to rectification — request correction of inaccurate data
Right to erasure — request deletion of your data ("right to be forgotten")
Right to restrict processing — request that we limit how we use your data
Right to data portability — receive your data in a portable format
Right to object — object to processing based on legitimate interests
Right to withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, please email us at hello@stheagency.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website uses cookies to improve your experience. Cookies are small text files stored on your device. We use the following types:

Essential cookies — required for the website to function. Cannot be disabled.
Analytics cookies — help us understand how visitors use our site (Google Analytics, anonymised). Only set with your consent.

You can manage your cookie preferences at any time using the cookie banner on our website, or by adjusting your browser settings.

9. Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. Our website is served over HTTPS and contact form submissions are processed securely through Netlify.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "last updated" date at the top of this page. Continued use of our website after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

S. The Agency
Email: hello@stheagency.co.uk
Website: stheagency.co.uk