Last updated: March 2026

Thistlewhite Ltd (Company Number 14310200), trading as Thistlewhite Digital Marketing, is committed to protecting your personal data and respecting your privacy.

This privacy policy explains how we collect, use and protect your personal data when you visit www.thistlewhite.co.uk, make an enquiry or engage our services.

1. Who We Are

Thistlewhite Ltd is a UK-registered company providing SEO, social media marketing and content writing services to businesses across the UK.

Data Controller:
Thistlewhite Ltd
Kelham Island, Sheffield, United Kingdom
Email: emma@thistlewhite.co.uk

For the purposes of UK data protection law, we are the data controller of your personal data.

2. The Law That Applies

We process personal data in accordance with:

• The UK General Data Protection Regulation (UK GDPR)
• The Data Protection Act 2018

3. What Personal Data We Collect

We may collect, use and store the following types of personal data:

Identity and Contact Data

• Name
• Email address
• Telephone number
• Company name
• Job title

Technical and Usage Data

• IP address
• Browser type and version
• Time zone setting
• Website pages visited
• How you use our website

Marketing and Communications Data

• Your communication preferences
• Records of correspondence

We do not intentionally collect special category data.

4. How We Collect Your Data

We collect personal data when you:

• Submit a contact form
• Email us directly
• Call us
• Engage our services
• Browse our website
• Accept cookies via our cookie banner

We may also collect technical data through analytics tools.

5. How We Use Your Personal Data

We use your data to:

• Respond to enquiries
• Provide quotes and proposals
• Deliver SEO, marketing and content services
• Manage client relationships
• Send relevant marketing communications where consent has been given
• Improve our website and user experience
• Comply with legal obligations

We do not sell or rent your personal data to third parties.

6. Our Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

Contractual necessity
Where processing is necessary to perform a contract with you or take steps at your request before entering into a contract.

Legitimate interests
To respond to enquiries, manage business relationships and improve our services.

Consent
For sending marketing communications where required.

Legal obligation
To comply with tax, accounting or regulatory requirements.

7. Cookies and Analytics

Our website uses cookies to improve functionality and analyse website performance.

We may use analytics tools such as Google Analytics to collect anonymised usage data. These tools may collect IP addresses and browser data.

You can manage cookie preferences through your browser settings or our cookie banner.

For more information, please see our Cookie Policy.

8. Sharing Your Personal Data

We may share personal data with:

• Website hosting providers
• Analytics providers
• Email or CRM platforms
• Professional advisers such as accountants or legal advisers
• Regulatory authorities where required by law

All third parties are required to respect the security of your personal data and process it in accordance with the law.

9. International Transfers

Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses or providers operating under recognised data protection frameworks.

10. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data from unauthorised access, loss or misuse.

Access to personal data is limited to those who have a legitimate business need to know.

11. Data Retention

We retain personal data only for as long as necessary:

• Enquiry data – up to 24 months
• Client records – up to 6 years for accounting and legal purposes
• Marketing data – until consent is withdrawn

12. Your Rights

Under UK GDPR, you have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request erasure of your data
• Request restriction of processing
• Object to processing
• Request transfer of your data
• Withdraw consent at any time

To exercise your rights, please contact us at emma@thistlewhite.co.uk.

13. Complaints

If you are not satisfied with how we handle your personal data, you have the right to complain to:

Information Commissioner’s Office
www.ico.org.uk

We would, however, appreciate the opportunity to address your concerns first.

14. Changes to This Policy

We may update this privacy policy from time to time. The latest version will always be available on this page.