Privacy policy
This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it and what your rights are. It applies when you visit our website, contact us, book a call, buy from us or use our services.
Last updated: 24 October 2026
Who we are
We are The Powerful Group Limited, trading as Powerful Digital Marketing (“we”, “us”, “our”). We are a company registered in England and Wales, company number 09629669. Our address is 124 City Road, London EC1V 2NX.
We are the “controller” of the personal data described in this policy. This means we decide how and why it is used.
- Email: info@powerfuldigitalmarketing.com
- ICO registration number: ZC277757
- VAT number: GB527555766
We do not currently publish a phone number. Please email us about anything in this policy.
When we handle personal data on behalf of our clients (for example, the people who chat with a client’s Powerful Bot, or a client’s newsletter list), the client is the controller and we are their “processor”. Our data processing agreement covers that.
The laws we follow
We follow the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
What we collect
| What | Examples | Where it comes from |
|---|---|---|
| Contact details | Name, business name, email address, phone number if you give it | Our contact form, emails, bookings and orders |
| Order and billing details | Billing address, what you bought, invoices, VAT details | Our shop (WooCommerce) |
| Payment details | Payment status and the last four digits of a card | Stripe and PayPal. We never see or store your full card number. |
| Account details | Your login for your account on our website | You, when you create an account |
| Booking details | The time you book, your answers to booking questions | Our booking tool (FluentBooking) |
| Access you give us | Logins or user access to your website, Google, Meta, Mailchimp, Brevo, eBay, Amazon, Etsy or WooCommerce accounts | You, so that we can deliver your plan |
| Project content | Your logo, photos, product lists, business information and the content we make for you | You and your accounts |
| Website use | Pages visited, device and browser type, rough location from your IP address | Google Analytics, only loaded if you accept statistics cookies in our cookie banner. See our cookie policy. |
| Referral details | Which partner’s referral link you used to reach us, and when | Our affiliate programme’s referral cookie, if you accept it. See our affiliate terms. |
| Partner details | Name, business details, website, payment details for commission | You, when you apply to our affiliate programme |
| Chat messages | What you type into a chatbot on our website, if we use one | You |
We do not ask for special category data (such as health, religion or ethnic origin). Please do not send it to us.
Why we use it and our lawful basis
| Why we use your data | Lawful basis |
|---|---|
| To reply to your enquiry or book a call | Legitimate interests (answering people who contact us) or taking steps before a contract |
| To take your order, deliver your plan and send invoices | Contract |
| To take payments and keep accounting and tax records | Contract and legal obligation |
| To keep our website and your account secure and working | Legitimate interests |
| To understand how our website is used | Consent (through the cookie banner) |
| To send you occasional marketing emails | For existing customers, our legitimate interests under the PECR “soft opt-in”. For anyone else, only with your consent. Every email has an unsubscribe link. |
| To run our affiliate programme (tracking referrals and paying commission) | Contract (for partners); consent for the referral cookie |
| To deal with complaints and legal claims | Legitimate interests and legal obligation |
We do not use your data for profiling or for decisions made only by automated means that have a legal or similarly significant effect on you.
Logins and access to your accounts
To deliver some plans, we need access to your accounts. Each service page says what we need. Where we can, we ask for user access rather than your password. We only use any logins you give us to deliver the work you have bought. You can remove our access at any time, but we may then be unable to deliver your plan.
Who we share it with
We never sell your personal data. We share it only when we need to, with:
- Our service providers, such as our website and email host (Hostinger), payment providers (Stripe and PayPal), our booking tool (FluentBooking), Google Analytics (only if you accept statistics cookies), the tools we use to work with your project files and content (Google Workspace and X, formerly Twitter), our chatbot platform provider (Kuga), which processes data in the UK, EU or USA under appropriate safeguards, our press release distribution service, and the third-party AI providers, such as OpenAI, Anthropic, Google, Microsoft and xAI, that we use to produce your work. Our data processing agreement lists the ones we use when we handle data for our clients.
- Platforms you ask us to work on, such as Google, Meta, eBay, Amazon, Etsy, Mailchimp or Brevo, when we publish or manage content for you with your permission.
- Professional advisers, such as our accountants and lawyers.
- Authorities, such as HMRC or the police, when the law requires it.
- A buyer of our business, if we sell or reorganise it. They would have to protect your data in the same way.
We do not use subcontractors. The other businesses we work with, such as the service providers above, handle personal data under their own data protection and GDPR terms.
Transfers outside the UK
Some of our providers store or process data outside the UK. When they do, we make sure there is an adequacy decision (“data bridge”), or we use the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses. AI processing may happen in the USA. Where it does, it is protected by the UK–US data bridge (for providers certified under it) or by the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.
How long we keep it
| Data | How long |
|---|---|
| Client, order and invoice records | 6 years after the end of the financial year they relate to (for tax and accounting law) |
| Enquiries and call bookings that do not lead to an order | 24 months from our last contact |
| Affiliate partner and commission records | 6 years after the end of the financial year they relate to |
| Project files and content we make for you | 12 months after your plan ends |
| Chatbot data for Powerful Bots clients | Deleted within 14 days after your plan ends |
| Logins and access to your accounts | Removed when your plan ends |
| Marketing data | Until you unsubscribe |
Your rights
You have the right to:
- ask for a copy of your personal data;
- ask us to correct data that is wrong or incomplete;
- ask us to delete your data;
- ask us to restrict how we use your data;
- object to us using your data, including for direct marketing (you can unsubscribe from any marketing email at any time);
- ask us to move your data to another organisation (data portability);
- withdraw your consent at any time, where we rely on consent. You can change your cookie choices at any time using the “Cookie settings” link at the bottom of every page.
To use any of these rights, email info@powerfuldigitalmarketing.com. We will reply within one month. We may need to check your identity first. Using your rights is usually free.
Security
We use reasonable technical and organisational measures to protect your data. These include secure (HTTPS) connections, access controls, and payment providers that meet card industry security standards. No system is completely secure, but we work to keep your data safe and will tell you and the ICO about a serious breach when the law requires it.
Complaints
If you are unhappy with how we use your data, please email us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113.
Changes to this policy
We may update this policy. We will put the new version on this page with a new “Last updated” date. If a change is important, we will tell our clients by email.
See also: cookie policy, terms and conditions, data processing agreement, AI terms and conditions and affiliate terms.
