Privacy Policy

Who We Are

Kaldwell Agency Ltd is a local SEO agency providing digital marketing services exclusively to UK tradespeople. We are registered in England and Wales as a limited company.

If you have any questions about how we handle your personal data, please contact us at info@kaldwellagency.co.uk.

What Data We Collect

We collect personal data in the following ways:

• Enquiry and contact forms — your name, email address, phone number, business name, trade, and service area when you request a free audit or get in touch.
• Client onboarding — business details, service area, Google Business Profile access, and any other information you provide during onboarding.
• Service agreement — your name, business name, email address, phone number, and electronic signature when you sign a service agreement.
• Website analytics — anonymised data about how you use our website, including pages visited, time spent, and your general location (via Google Analytics 4).
• Cookies — small files stored in your browser by Google Analytics to track website usage. See Section 7 for more detail.

Why We Collect It

We collect and use your personal data for the following purposes:

• To deliver our services — managing your Google Business Profile, building citations, creating content, and all other services within your agreed package.
• To communicate with you — sending monthly reports, responding to queries, and providing updates on your account.
• To fulfil our contract — processing payments via GoCardless and maintaining records of your service agreement.
• To improve our services — using anonymised analytics data to understand how our website is used and improve it.
• To comply with legal obligations — maintaining records as required by HMRC and Companies House.

Our legal basis for processing is primarily contract performance (processing necessary to deliver our services) and legitimate interests (communicating with you and improving our services). Where we rely on consent (such as for marketing emails), you can withdraw it at any time.

Who We Share It With

We do not sell your personal data to any third party. We share limited data only with the following service providers who help us deliver our services:

• GoCardless — to process Direct Debit payments. GoCardless is FCA-authorised and processes data in accordance with UK GDPR.
• Google (Analytics 4 and Workspace) — anonymised website usage data and business email. Google's privacy policy applies to data processed through their platforms.
• BrightLocal / SEMrush / Localo — SEO tools used to deliver your service. Only business information (business name, address, phone number) is shared, not personal data.
• HMRC and Companies House — where legally required for tax and company filings.

All third-party processors are required to handle your data securely and in accordance with UK data protection law.

How Long We Keep It

• Client records — retained for 6 years after the end of your contract in accordance with HMRC requirements.
• Enquiry data — retained for 12 months if you do not become a client, then securely deleted.
• Analytics data — retained for 14 months by Google Analytics then automatically deleted.
• Signed agreements — retained for 6 years as a legal record.

Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct inaccurate or incomplete data.
• Right to erasure — you can ask us to delete your data where we no longer have a legal basis to hold it.
• Right to restriction — you can ask us to restrict how we use your data while a dispute is resolved.
• Right to portability — you can request your data in a structured, machine-readable format.
• Right to object — you can object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, email us at info@kaldwellagency.co.uk. We will respond within 30 days. If you are unhappy with our response, you have the right to complain to the Information Commissioner's Office at ico.org.uk.

Cookies

Our website uses Google Analytics 4 to collect anonymised data about how visitors use our site. This uses cookies — small text files stored in your browser.

Google Analytics does not collect personally identifiable information. The data collected includes pages visited, time on site, approximate location (country/city level), device type, and traffic source.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, or by adjusting your browser's cookie settings.

Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, or destruction. Our website is served over HTTPS. Access to client data is restricted to authorised personnel only.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform you without undue delay.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. We encourage you to review this policy periodically. Continued use of our services after any changes constitutes acceptance of the updated policy.

Last updated: 19 May 2026