Legal

Privacy policy

This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it and what your rights are. It applies when you visit our website, contact us, book a call, buy from us or use our services.

Last updated: 24 October 2026

Who we are

We are The Powerful Group Limited, trading as Powerful Digital Marketing (“we”, “us”, “our”). We are a company registered in England and Wales, company number 09629669. Our address is 124 City Road, London EC1V 2NX.

We are the “controller” of the personal data described in this policy. This means we decide how and why it is used.

Email: info@powerfuldigitalmarketing.com
ICO registration number: ZC277757
VAT number: GB527555766

We do not currently publish a phone number. Please email us about anything in this policy.

When we handle personal data on behalf of our clients (for example, the people who chat with a client’s Powerful Bot, or a client’s newsletter list), the client is the controller and we are their “processor”. Our data processing agreement covers that.

The laws we follow

We follow the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

What we collect

What	Examples	Where it comes from
Contact details	Name, business name, email address, phone number if you give it	Our contact form, emails, bookings and orders
Order and billing details	Billing address, what you bought, invoices, VAT details	Our shop (WooCommerce)
Payment details	Payment status and the last four digits of a card	Stripe and PayPal. We never see or store your full card number.
Account details	Your login for your account on our website	You, when you create an account
Booking details	The time you book, your answers to booking questions	Our booking tool (FluentBooking)
Access you give us	Logins or user access to your website, Google, Meta, Mailchimp, Brevo, eBay, Amazon, Etsy or WooCommerce accounts	You, so that we can deliver your plan
Project content	Your logo, photos, product lists, business information and the content we make for you	You and your accounts
Website use	Pages visited, device and browser type, rough location from your IP address	Google Analytics, only loaded if you accept statistics cookies in our cookie banner. See our cookie policy.
Referral details	Which partner’s referral link you used to reach us, and when	Our affiliate programme’s referral cookie, if you accept it. See our affiliate terms.
Partner details	Name, business details, website, payment details for commission	You, when you apply to our affiliate programme
Chat messages	What you type into a chatbot on our website, if we use one	You

We do not ask for special category data (such as health, religion or ethnic origin). Please do not send it to us.

Why we use it and our lawful basis

Why we use your data	Lawful basis
To reply to your enquiry or book a call	Legitimate interests (answering people who contact us) or taking steps before a contract
To take your order, deliver your plan and send invoices	Contract
To take payments and keep accounting and tax records	Contract and legal obligation
To keep our website and your account secure and working	Legitimate interests
To understand how our website is used	Consent (through the cookie banner)
To send you occasional marketing emails	For existing customers, our legitimate interests under the PECR “soft opt-in”. For anyone else, only with your consent. Every email has an unsubscribe link.
To run our affiliate programme (tracking referrals and paying commission)	Contract (for partners); consent for the referral cookie
To deal with complaints and legal claims	Legitimate interests and legal obligation

We do not use your data for profiling or for decisions made only by automated means that have a legal or similarly significant effect on you.

Logins and access to your accounts

To deliver some plans, we need access to your accounts. Each service page says what we need. Where we can, we ask for user access rather than your password. We only use any logins you give us to deliver the work you have bought. You can remove our access at any time, but we may then be unable to deliver your plan.

Who we share it with

We never sell your personal data. We share it only when we need to, with:

Our service providers, such as our website and email host (Hostinger), payment providers (Stripe and PayPal), our booking tool (FluentBooking), Google Analytics (only if you accept statistics cookies), the tools we use to work with your project files and content (Google Workspace and X, formerly Twitter), our chatbot platform provider (Kuga), which processes data in the UK, EU or USA under appropriate safeguards, our press release distribution service, and the third-party AI providers, such as OpenAI, Anthropic, Google, Microsoft and xAI, that we use to produce your work. Our data processing agreement lists the ones we use when we handle data for our clients.
Platforms you ask us to work on, such as Google, Meta, eBay, Amazon, Etsy, Mailchimp or Brevo, when we publish or manage content for you with your permission.
Professional advisers, such as our accountants and lawyers.
Authorities, such as HMRC or the police, when the law requires it.
A buyer of our business, if we sell or reorganise it. They would have to protect your data in the same way.

We do not use subcontractors. The other businesses we work with, such as the service providers above, handle personal data under their own data protection and GDPR terms.

Transfers outside the UK

Some of our providers store or process data outside the UK. When they do, we make sure there is an adequacy decision (“data bridge”), or we use the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses. AI processing may happen in the USA. Where it does, it is protected by the UK–US data bridge (for providers certified under it) or by the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.

How long we keep it

Data	How long
Client, order and invoice records	6 years after the end of the financial year they relate to (for tax and accounting law)
Enquiries and call bookings that do not lead to an order	24 months from our last contact
Affiliate partner and commission records	6 years after the end of the financial year they relate to
Project files and content we make for you	12 months after your plan ends
Chatbot data for Powerful Bots clients	Deleted within 14 days after your plan ends
Logins and access to your accounts	Removed when your plan ends
Marketing data	Until you unsubscribe

Your rights

You have the right to:

ask for a copy of your personal data;
ask us to correct data that is wrong or incomplete;
ask us to delete your data;
ask us to restrict how we use your data;
object to us using your data, including for direct marketing (you can unsubscribe from any marketing email at any time);
ask us to move your data to another organisation (data portability);
withdraw your consent at any time, where we rely on consent. You can change your cookie choices at any time using the “Cookie settings” link at the bottom of every page.

To use any of these rights, email info@powerfuldigitalmarketing.com. We will reply within one month. We may need to check your identity first. Using your rights is usually free.

Security

We use reasonable technical and organisational measures to protect your data. These include secure (HTTPS) connections, access controls, and payment providers that meet card industry security standards. No system is completely secure, but we work to keep your data safe and will tell you and the ICO about a serious breach when the law requires it.

Complaints

If you are unhappy with how we use your data, please email us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy. We will put the new version on this page with a new “Last updated” date. If a change is important, we will tell our clients by email.