Privacy Policy
- Home
- /
- Privacy Policy
Privacy Policy
Privacy Policy Royal Growth Digital
Royal Growth Digital (“we,” “us,” “our,” or “the Company”) is a London-based search engine optimization and digital marketing agency. This Privacy Policy explains how we collect, use, store, share, and protect personal data when you visit royalgrowthdigital.com (the “Website”), engage us for services, subscribe to our communications, or otherwise interact with us. This policy has been reviewed and updated to reflect the UK’s Data (Use and Access) Act 2025 (“DUAA”), which amends the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, together with the Privacy and Electronic Communications Regulations (“PECR”). By using our Website or services, you acknowledge that you have read and understood this Privacy Policy.
Who We Are
Royal Growth Digital is the data controller responsible for your personal data under the UK GDPR and the Data Protection Act 2018 (as amended by the DUAA). We are registered and operating in the United Kingdom. If you have any questions about this Privacy Policy or how we handle your data, you can contact us using the details set out in Section 14 of this policy.
Information We Collect
We collect information in a few different ways: information you give us directly, information collected automatically when you use our Website, and information we receive from third parties in the course of delivering our services.
Information You Provide
- Contact details, including your name, email address, phone number, and company name, when you fill out a contact form, request a quote, or sign up for our newsletter.
- Billing and account information when you become a client, including invoicing details and payment references (we do not store full card numbers ourselves; these are processed by our payment providers).
- Project information you share with us, such as website URLs, keyword lists, business goals, and marketing materials, so that we can deliver SEO and digital marketing services.
- Any information you include in correspondence with us, such as emails, chat messages, or support tickets
Information Collected Automatically
- Technical data such as IP address, browser type, device type, operating system, and referral source.
- Usage data such as pages visited, time spent on the Website, and links clicked, collected via cookies and similar tracking technologies.
- Approximate location data derived from your IP address, where relevant to understanding our audience.
Information From Third Parties
- Analytics and advertising partners, such as Google Analytics and Google Ads, who help us understand Website performance.
- Publicly available business information used for outreach and lead qualification purposes.
How We Use Your Information
We use the personal data we collect for the following purposes:
- To respond to enquiries and provide quotes for our SEO and digital marketing services.
- To deliver, manage, and improve the services set out in any agreement between you and us.
- To send invoices and process payments.
- To send marketing communications, where you have consented or where we rely on a recognised legitimate interest, and always with an easy way to opt out.
- To monitor, analyse, and improve the performance, security, and content of our Website.
- To comply with our legal and regulatory obligations, including tax, accounting, and record-keeping requirements.
- To detect, investigate, and prevent fraud, abuse, or security incidents.
Our Legal Basis for Processing
Under the UK GDPR, as amended by the DUAA, we rely on one or more of the following legal bases depending on the purpose of processing:
- Consent, for example when you opt in to receive marketing emails or accept non-essential cookies.
- Performance of a contract, where processing is necessary to deliver services you have engaged us for.
- Legal obligation, where processing is required to comply with applicable law.
- Legitimate interests, including the newly recognised category of “recognised legitimate interests” introduced by the DUAA, which covers limited purposes such as safeguarding, crime prevention, and responding to requests from public authorities or regulators, without requiring a full balancing test.
Where we rely on ordinary legitimate interests (as opposed to a recognised legitimate interest), we carry out a balancing assessment to ensure our interests do not override your rights and freedoms.
Cookies and Similar Technologies
Our Website uses cookies and similar technologies to operate correctly, analyse traffic, and personalise content. Following the DUAA’s amendments to PECR, certain low-risk cookies, such as those used solely for analytics purposes or to remember your on-site preferences, may be used without requiring separate consent, provided you are given clear information and an easy way to opt out. Cookies used for advertising or cross-site tracking still require your explicit consent, which you can manage through our cookie banner at any time. You can also control cookies through your browser settings, though disabling certain cookies may affect Website functionality.
Automated Decision-Making
We do not currently use automated decision-making that produces legal or similarly significant effects on individuals without human involvement. If this changes, for example in relation to lead scoring or service recommendations, we will update this policy and, where required, put in place appropriate safeguards, including the right for you to obtain human intervention, express your point of view, and contest any decision, in line with the DUAA’s revised rules on automated decision-making.
Sharing Your Information
We do not sell your personal data. We may share your information with:
- Service providers who support our operations, such as hosting providers, email platforms, analytics providers, payment processors, and project management tools.
- Subcontractors and freelance specialists engaged to help deliver client work, under confidentiality obligations.
- Professional advisers, including accountants, auditors, and lawyers, where necessary.
- Regulators or public authorities, where required or permitted by law, including under the DUAA’s recognised legitimate interest provisions.
- A buyer or successor entity in the event of a merger, acquisition, or restructuring of our business.
Sharing Your Information
We do not sell your personal data. We may share your information with:
- Service providers who support our operations, such as hosting providers, email platforms, analytics providers, payment processors, and project management tools.
- Subcontractors and freelance specialists engaged to help deliver client work, under confidentiality obligations.
- Professional advisers, including accountants, auditors, and lawyers, where necessary.
- Regulators or public authorities, where required or permitted by law, including under the DUAA’s recognised legitimate interest provisions.
- A buyer or successor entity in the event of a merger, acquisition, or restructuring of our business.
International Data Transfers
Where personal data is transferred outside the United Kingdom, for example to a cloud hosting provider or software tool based overseas, we ensure an appropriate safeguard is in place. Following the DUAA’s reforms, we assess the adequacy of protections in the destination country using the UK’s updated, more flexible “data protection test,” and, where no adequacy arrangement exists, we rely on approved transfer mechanisms such as the International Data Transfer Agreement or International Data Transfer Addendum.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this policy, including satisfying any legal, accounting, or reporting requirements. Client project data is generally retained for the duration of our engagement and for a reasonable period afterwards to address any follow-up queries, after which it is securely deleted or anonymised. Marketing contact details are retained until you unsubscribe or ask us to remove them.
Children's Data
Our Website and services are intended for businesses and individuals over the age of 18. We do not knowingly collect personal data from children. In line with the DUAA’s strengthened protections for children’s data and privacy-by-design expectations, if we become aware that we have inadvertently collected data from a child, we will delete it promptly.
Your Rights
Under the UK GDPR and the Data Protection Act 2018, as amended by the DUAA, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request erasure of your data, subject to certain exemptions.
- Restrict or object to certain types of processing, including direct marketing.
- Request a copy of your data in a portable format.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint directly with us, and, as of 19 June 2026, receive an acknowledgement within 30 days and a full response without undue delay, under the DUAA’s new statutory right to complain.
- Lodge a complaint with the Information Commissioner’s Office (“ICO”), the UK’s independent data protection regulator, which is expected to be reconstituted as the Information Commission under the DUAA.
To exercise any of these rights, please contact us using the details in Section 14. We may need to verify your identity before responding.
Data Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections, access controls, staff training, and regular reviews of our data handling practices. While we take reasonable steps to safeguard your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law, including further phased provisions of the DUAA coming into force. Any updates will be posted on this page with a revised “Last updated” date. We encourage you to review this policy periodically.
Contact Us
If you have questions about this Privacy Policy, wish to exercise your data protection rights, or want to raise a complaint, please contact us at:
- Website: royalgrowthdigital.com
- Email: privacy@royalgrowthdigital.com
- Post: Royal Growth Digital, London, United Kingdom
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.
We are a London-based SEO agency helping businesses improve their Google rankings, attract more traffic, and generate more enquiries through on-page, local, technical, and content SEO.
We were founded in 2023 and have been helping London businesses grow their online presence ever since.
No. We believe in earning your business every month through results, not locking clients into long contracts.
We work with small businesses, local service providers, and eCommerce stores across London and the wider UK.
Yes. Alongside traditional SEO, we use Generative Engine Optimisation to help your brand appear across AI tools like ChatGPT, Gemini, and Perplexity.