Legal
Privacy policy
Last updated 13 October 2026
This policy explains what personal data Digital Nomadians collects through digitalnomadians.uk, why we collect it, who we share it with and the rights you have under UK data protection law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
1. Who we are
Digital Nomadians (“we”, “us”) is a marketing agency for heating, ventilation, air conditioning and refrigeration companies in the UK. We are the controller of the personal data described in this policy, which means we decide how and why it is used.
For anything about your personal data, including requests to use your rights, contact our founder, Priyam Goyal, at priyam.goyal@digitalnomadians.uk.
2. The personal data we collect
Information you give us
- Enquiry form: your name, company name, phone number, email address, website (if you give it), the towns or areas you cover and the type of work you want more of.
- Emails and calls: anything you tell us when you email us or speak to our team.
Information collected when you use the site
- Where you came from: when you send an enquiry we record the page you first landed on, the website that referred you and any campaign tags in the link (such as utm_source, or the gclid and fbclid click identifiers added by Google and Meta ads).
- Technical data: your IP address and browser details, which our hosting provider logs to run the site and keep it secure. We also use your IP address briefly to stop automated spam on the form.
- Cookies and similar technologies: only if you accept them. See section 8.
We don't ask for, and don't want, any special category data (such as health information).
3. How we use your data and our lawful bases
| What we do | Lawful basis |
|---|---|
| Reply to your enquiry, review your website and local market, and prepare your 90-day plan | Taking steps at your request before a contract, and our legitimate interest in responding to business enquiries |
| Phone or email you about your enquiry and a possible working relationship | Legitimate interests |
| Deliver our services if you become a client, and keep business and accounting records | Performance of a contract and legal obligation |
| Measure which pages and adverts bring in enquiries (Google Analytics and the Meta pixel) | Consent |
| Tell Meta that an enquiry came from one of its adverts, using the Conversions API (see section 5) | Consent |
| Keep the site secure and block spam and abuse | Legitimate interests |
Where we rely on legitimate interests, we have weighed them against your rights. Contacting a business that has asked us for a plan is something you would reasonably expect, and you can object at any time.
4. Who we share your data with
We never sell your personal data. We share it only with providers that help us run the site and our business:
- Render hosts the website (servers in Frankfurt, Germany).
- Resend delivers the email that tells our team about your enquiry (sent from servers in Ireland).
- Zoho hosts our email inboxes (UK data centre).
- Cloudflare provides our domain name service.
- Google provides Google Tag Manager and Google Analytics, only if you accept cookies.
- Meta Platforms Ireland provides the Meta pixel and Conversions API, only if you accept cookies.
These providers act on our instructions under data processing terms, except Google and Meta, which may also use data for their own purposes as described in their privacy policies. We may also share data with professional advisers, or where the law requires it.
5. Meta Conversions API
If you have accepted cookies and you send an enquiry, our server tells Meta that an enquiry happened so we can see which adverts work. Before your email address, phone number and name are sent, they are converted into a one-way code (hashed with SHA-256), so Meta can match them to a Meta account but cannot read them. We also send your IP address, browser details and Meta's cookie identifiers. If you haven't accepted cookies, nothing is sent to Meta.
6. International transfers
Some of our providers, and some members of our team, are based outside the UK or can access data from outside the UK. When personal data leaves the UK, we make sure it is protected by a safeguard recognised under UK law, such as UK adequacy regulations (including the UK-US data bridge where the recipient is certified), the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.
7. How long we keep your data
- Enquiries that don't lead to work: up to 24 months after our last contact, then deleted.
- Clients: for as long as we work together, plus 6 years for accounting and legal purposes.
- Hosting logs: kept by our hosting provider for a short period, then deleted automatically.
- Google Analytics: event data is kept for no more than 14 months.
- Cookies: see the table in section 8.
8. Cookies
We only set analytics and advertising cookies if you click “Accept” on our cookie banner. You can change your mind at any time using the “Cookie settings” link at the bottom of every page.
| Name | Provider | Purpose | Lasts |
|---|---|---|---|
| dn_consent | Digital Nomadians | Remembers your cookie choice (stored in your browser, strictly necessary) | Until you clear it |
| _ga, _ga_* | Google Analytics | Counts visits and shows how people use the site | Up to 2 years |
| _fbp, _fbc | Meta | Measures which Meta adverts lead to enquiries | 90 days |
When you send an enquiry, we read where you arrived from (the landing page, referring site and campaign tags) from the page address, without storing anything on your device. Only if you accept cookies do we also keep that note in your browser's session storage, so it survives moving between pages. It is deleted when you close the tab.
9. How we protect your data
The site runs over an encrypted connection (HTTPS). Access to enquiries is limited to the people who need it, and our providers are chosen for their security standards. No system is completely secure, but we take reasonable steps to protect your data and will tell you and the Information Commissioner's Office if the law requires it.
10. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you
- ask us to correct data that is wrong or incomplete
- ask us to delete your data
- ask us to restrict how we use your data
- object to us using your data on the basis of legitimate interests
- object to direct marketing at any time, which we will always respect
- ask for a copy of data you gave us in a format you can reuse
- withdraw your consent at any time, where we rely on consent
Email priyam.goyal@digitalnomadians.uk to use any of these rights. We will reply within one month, and there is usually no charge. We may need to confirm your identity first.
11. Marketing
If you send an enquiry, we will contact you about it. We won't add you to a marketing mailing list unless the law allows it, and every marketing email will tell you how to opt out. You can ask us to stop at any time.
12. Automated decisions
We don't make decisions about you based solely on automated processing.
13. Children
Our services are for businesses. The site is not aimed at children and we don't knowingly collect their data.
14. Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed. If a change materially affects how we use your data, we will make that clear on the site.
15. Complaints
If you're unhappy with how we have handled your data, please tell us first at priyam.goyal@digitalnomadians.uk and we will try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint or by phone on 0303 123 1113.
16. Contact us
Priyam Goyal, Founder, Digital Nomadians
Email: priyam.goyal@digitalnomadians.uk