Who we are
SKU Digital Ltd is the controller for the personal data described here. We’re registered in England and Wales (company number 11450749), at 22a Vincent Ave, Crownhill, Milton Keynes MK8 0AB. You can contact us about your data at [email protected].
When we work on a client’s store, the store’s customer data belongs to the client, and we handle it as their processor. That’s covered by our Data Policy, not this page.
What we collect
- When you contact us: your name, email address, store URL, the topic you choose and your message. If you email us, we keep the email and anything in it.
- When you become a client: the names and contact details of the people we work with, billing details, and our correspondence and project records.
- When you use this website: if you accept analytics cookies, information about how you use the site, such as pages viewed, device and browser type, approximate location and the site that referred you. Our server also keeps short-term logs, including IP addresses, for security.
We don’t collect special category data, and this website isn’t aimed at children.
Why we use it, and our lawful basis
- To reply to your enquiry and give you a quote: our legitimate interest in responding to people who contact us, and taking steps at your request before a contract.
- To provide our services and invoice for them: performance of our contract with you, and our legal obligations for tax and accounting records.
- To understand how the website is used and measure our adverts: your consent, which you give or refuse in the cookie banner.
- To keep the website secure: our legitimate interest in protecting it from abuse.
We don’t send marketing newsletters. If we ever do, we’ll only send them with your consent, and you’ll be able to unsubscribe at any time.
Who we share it with
We never sell personal data. We share it only with the providers that help us run the business, under contracts that protect it:
- our website host, and our email provider
- Google, for analytics and advert measurement, only if you’ve accepted those cookies
- our accountant, bank and payment providers, for invoicing and our legal obligations
- the tools we use for client work, such as GitHub and our AI provider (see the Data Policy)
We may also share data where the law requires it, or to protect our legal rights.
Transfers outside the UK
Some of our providers, such as Google and GitHub, may process data outside the UK. Where they do, the transfer is protected by the safeguards UK law requires, such as the UK’s adequacy regulations or the International Data Transfer Agreement.
How long we keep it
- Enquiries and correspondence: for as long as we need them for the reason we collected them, then deleted.
- Client records and invoices: 6 years after the end of the tax year they relate to, as the law requires.
- Analytics data: for the retention period set in Google Analytics.
Cookies
Cookies are small files a website stores in your browser. We only use the ones needed to make the site work unless you accept more in the cookie banner. You can change your choice at any time with the “Cookie settings” link at the bottom of every page.
- Necessary (always on):
cookieyes-consentremembers your cookie choice, for one year. - Analytics (only if you accept): Google Analytics cookies such as
_gaand_ga_*measure how the site is used, for up to 2 years. - Advertising (only if you accept): Google Ads cookies such as
_gcl_autell us whether someone who clicked an advert got in touch, for up to 90 days.
You can also block or delete cookies in your browser settings.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you
- have inaccurate data corrected
- have your data deleted, where there’s no good reason for us to keep it
- ask us to restrict or stop using your data in some situations, and object to uses based on legitimate interests
- receive data you gave us in a portable format
- withdraw consent at any time, where we rely on it
To use any of these rights, email [email protected]. We’ll reply within one month, and there’s normally no charge.
If you’re unhappy with how we’ve handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Keeping it secure
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or damage. If a breach puts your rights at risk, we’ll report it to the ICO within 72 hours of finding out where the law requires, and tell you if it’s likely to affect you seriously.
Links to other websites
This site links to other websites, such as our clients’ stores. Their privacy practices are their own, so check their policies.
Changes to this policy
We’ll update this page if the way we use personal data changes. The date at the top shows when it was last updated.